Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/241c18-78da-4b3d-a440-0802d4c7d96d/1/EXdPipmODyrxj3UnnjJlSBNpRIg.mft
File: EXdPipmODyrxj3UnnjJlSBNpRIg.mft (raw, json)
Hash identifier: 6E0T9CQbp2fx5BPBcUxfU0Jmy49uxozlPk2jF4U5Sfc=
Subject key identifier: 1B:67:35:36:6C:65:41:5C:41:06:A3:8B:7E:BE:1C:5E:71:AD:F8:40
Authority key identifier: 11:77:4F:8A:99:8E:0F:2A:F1:8F:75:27:9E:32:65:48:13:69:44:88
Certificate issuer: /CN=11774f8a998e0f2af18f75279e32654813694488
Certificate serial: 019A72259DF44ADB8F7433E51B5853CD6052
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EXdPipmODyrxj3UnnjJlSBNpRIg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/241c18-78da-4b3d-a440-0802d4c7d96d/1/EXdPipmODyrxj3UnnjJlSBNpRIg.mft
Manifest number: 0563
Signing time: Tue 11 Nov 2025 09:00:59 +0000
Manifest this update: Tue 11 Nov 2025 09:00:59 +0000
Manifest next update: Wed 12 Nov 2025 09:00:59 +0000
Files and hashes: 1: EXdPipmODyrxj3UnnjJlSBNpRIg.crl (hash: 458T2i1tqtUNuak+HKkR31Ag18qBb5NyuulXrW9XaCE=)
2: lEOnyeTSrhVKx1TLByVlPzDKz8w.roa (hash: n8RWZqmzmommBj8oDYR9O53K32j7DKyp4tQyqLf5eY0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/241c18-78da-4b3d-a440-0802d4c7d96d/1/EXdPipmODyrxj3UnnjJlSBNpRIg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/241c18-78da-4b3d-a440-0802d4c7d96d/1/EXdPipmODyrxj3UnnjJlSBNpRIg.mft
rsync://rpki.ripe.net/repository/DEFAULT/EXdPipmODyrxj3UnnjJlSBNpRIg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:9d:f4:4a:db:8f:74:33:e5:1b:58:53:cd:60:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11774f8a998e0f2af18f75279e32654813694488
Validity
Not Before: Nov 11 09:00:59 2025 GMT
Not After : Nov 12 09:00:59 2025 GMT
Subject: CN=1b6735366c65415c4106a38b7ebe1c5e71adf840
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a7:04:5c:a7:80:76:1f:d5:b0:6e:69:05:3a:
12:5a:9a:91:25:e4:ee:60:c0:c1:b2:dc:46:f6:9c:
ea:13:2b:6c:93:9a:12:e9:2e:05:cd:46:ad:79:0d:
1d:bd:48:2c:68:66:20:e4:8a:e5:d7:b7:0e:68:7d:
80:2f:0c:9e:18:4c:fb:52:70:6f:2d:bd:61:f0:d6:
ff:73:a8:80:3c:0d:7c:0c:92:61:f0:b6:0d:9b:51:
49:c8:bd:0b:32:f3:a7:49:50:fe:17:b7:66:84:1c:
bc:76:24:61:3f:8b:62:2b:74:f6:29:66:94:da:18:
b7:4c:31:d4:f3:6e:61:db:98:84:72:d9:64:21:10:
a5:fb:1f:82:67:d7:e6:2f:ad:5d:f6:4e:dc:aa:f3:
af:64:3e:b0:85:58:44:02:63:25:93:7c:81:c8:1b:
8e:67:ab:95:cf:0f:52:c6:62:9b:3e:14:a0:42:f2:
af:24:06:9c:4c:7a:37:7e:18:ce:63:eb:d2:ef:a9:
01:cd:fe:28:8b:ac:4b:c4:2d:aa:79:13:77:bd:eb:
96:59:fc:7e:a2:ee:5a:0f:fd:49:80:ac:db:2a:b0:
c3:eb:b8:73:8d:d1:3f:b0:45:48:ee:ca:9c:a8:37:
70:f8:03:3f:1f:5b:8c:58:ae:7a:c1:b7:cf:71:6e:
e9:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:67:35:36:6C:65:41:5C:41:06:A3:8B:7E:BE:1C:5E:71:AD:F8:40
X509v3 Authority Key Identifier:
keyid:11:77:4F:8A:99:8E:0F:2A:F1:8F:75:27:9E:32:65:48:13:69:44:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EXdPipmODyrxj3UnnjJlSBNpRIg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/241c18-78da-4b3d-a440-0802d4c7d96d/1/EXdPipmODyrxj3UnnjJlSBNpRIg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/241c18-78da-4b3d-a440-0802d4c7d96d/1/EXdPipmODyrxj3UnnjJlSBNpRIg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:2d:5e:98:d9:57:79:9d:30:07:61:9f:26:93:16:ca:70:18:
7d:d3:ee:20:74:1e:fc:38:20:1d:8c:12:15:8c:91:45:51:1f:
05:5a:6c:d9:86:c1:e6:82:76:b9:72:c7:62:f9:df:bd:96:69:
6e:2d:61:8d:b4:fb:a4:32:a1:b5:25:d0:26:da:c6:27:9f:b0:
cf:ee:bb:9f:50:db:6e:5b:48:61:a1:ec:58:4e:2b:5e:fd:14:
04:5d:27:ae:04:37:46:5e:ab:ed:7a:2d:9e:df:8b:c5:22:46:
69:c9:12:ac:e7:de:d3:b6:2f:99:80:ee:0d:fe:54:13:b7:0d:
58:40:e3:bc:0d:34:42:ca:b0:92:5e:87:bd:3f:8a:2a:da:94:
f9:cf:4b:3c:9c:55:53:46:ce:34:0d:92:fb:8f:37:74:46:ce:
e4:d1:4b:96:72:86:26:20:a5:18:34:9c:a2:ab:0e:07:10:a5:
a4:16:b6:f5:ff:93:c8:89:1b:47:88:69:6d:8b:cc:d9:4f:39:
3f:a1:80:7b:a2:3d:16:b2:ed:5a:e2:6e:88:85:5e:da:38:c8:
fb:d2:92:23:93:29:e6:44:bd:37:36:9e:5f:b3:67:8c:00:25:
f6:d2:65:ac:cb:dc:50:98:e1:62:aa:7c:d1:65:a5:c8:5c:a8:
76:04:75:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:05:45 2025 by rpki-client