Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/226b69-4a01-4e33-84a8-02b2acee3bdc/1/s5DqJ6ZUsoo4kanb-vy53i3DteQ.mft
File: s5DqJ6ZUsoo4kanb-vy53i3DteQ.mft (raw, json)
Hash identifier: qpXPdBGhu0aYbEPdchq801NpRQppsX/ZWP/osEfMZFg=
Subject key identifier: EC:BE:FD:2D:E0:4D:E7:00:96:D6:C2:69:BE:B0:5C:92:D8:FE:11:1A
Authority key identifier: B3:90:EA:27:A6:54:B2:8A:38:91:A9:DB:FA:FC:B9:DE:2D:C3:B5:E4
Certificate issuer: /CN=b390ea27a654b28a3891a9dbfafcb9de2dc3b5e4
Certificate serial: 019A71B7FE51BCF72E98F5312B711CDA9671
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s5DqJ6ZUsoo4kanb-vy53i3DteQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/226b69-4a01-4e33-84a8-02b2acee3bdc/1/s5DqJ6ZUsoo4kanb-vy53i3DteQ.mft
Manifest number: 46
Signing time: Tue 11 Nov 2025 07:01:14 +0000
Manifest this update: Tue 11 Nov 2025 07:01:14 +0000
Manifest next update: Wed 12 Nov 2025 07:01:14 +0000
Files and hashes: 1: s5DqJ6ZUsoo4kanb-vy53i3DteQ.crl (hash: 1oi9B0m36qW6/CeKRrm/RrqIfUZOgL1XzQ3VOVTzym4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/226b69-4a01-4e33-84a8-02b2acee3bdc/1/s5DqJ6ZUsoo4kanb-vy53i3DteQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/226b69-4a01-4e33-84a8-02b2acee3bdc/1/s5DqJ6ZUsoo4kanb-vy53i3DteQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/s5DqJ6ZUsoo4kanb-vy53i3DteQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:fe:51:bc:f7:2e:98:f5:31:2b:71:1c:da:96:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b390ea27a654b28a3891a9dbfafcb9de2dc3b5e4
Validity
Not Before: Nov 11 07:01:14 2025 GMT
Not After : Nov 12 07:01:14 2025 GMT
Subject: CN=ecbefd2de04de70096d6c269beb05c92d8fe111a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:7b:15:9b:cf:da:1d:8e:1a:23:44:ea:99:19:
d3:e4:29:9b:5c:1a:73:cf:58:7f:25:5d:4d:16:72:
96:02:09:e0:56:4b:b6:a1:5e:7f:20:d9:d0:f6:b7:
ac:ac:a5:58:55:00:ee:ba:0d:5a:48:1d:7b:15:63:
de:df:77:fe:d0:b8:74:57:7f:69:df:62:29:bf:f8:
fa:89:27:dd:18:24:8b:b6:f2:b5:b0:67:60:64:dd:
f2:99:d8:91:00:f9:a2:99:89:5c:75:2a:4c:4e:57:
a0:fe:d2:0b:5d:b6:3b:70:ab:7d:fe:bd:a0:dd:f6:
e7:46:f7:b8:d8:6c:16:83:2a:f8:74:d0:98:e3:e0:
7c:9e:97:c1:95:ec:e6:90:ab:9a:c8:d2:78:57:c9:
76:23:be:bf:b2:64:05:c8:4c:fa:29:88:4f:8d:3b:
b8:f1:2c:53:60:0a:87:65:ba:55:9d:1d:11:e7:ce:
d4:3b:82:ae:ec:03:ed:da:b8:45:0b:32:a2:56:59:
43:7a:24:31:19:fa:1d:20:29:36:05:ac:d2:20:22:
f8:03:b7:fb:b8:42:75:47:81:fe:67:55:a7:11:93:
e7:11:45:76:6e:06:ba:4d:1b:94:35:d0:c0:43:02:
f2:ce:44:ed:a6:79:c7:e4:31:c7:7e:4c:96:f5:d4:
df:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:BE:FD:2D:E0:4D:E7:00:96:D6:C2:69:BE:B0:5C:92:D8:FE:11:1A
X509v3 Authority Key Identifier:
keyid:B3:90:EA:27:A6:54:B2:8A:38:91:A9:DB:FA:FC:B9:DE:2D:C3:B5:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s5DqJ6ZUsoo4kanb-vy53i3DteQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/226b69-4a01-4e33-84a8-02b2acee3bdc/1/s5DqJ6ZUsoo4kanb-vy53i3DteQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/226b69-4a01-4e33-84a8-02b2acee3bdc/1/s5DqJ6ZUsoo4kanb-vy53i3DteQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:e6:13:53:81:e6:2b:f8:8e:dc:6a:f4:da:62:ec:9d:19:28:
ee:94:55:76:d3:5b:1f:dd:7b:c1:a5:c4:24:00:67:6b:00:43:
b4:06:d7:76:2b:c3:14:0d:5d:5e:72:3d:75:79:45:de:82:f9:
1d:17:5f:d2:90:69:5f:45:81:82:1c:94:92:33:44:32:fd:4d:
13:10:c0:ab:bc:2c:ca:11:c3:62:ed:91:eb:4c:d8:09:84:28:
27:20:b2:b8:89:cd:de:4b:e9:df:f3:42:02:21:11:80:98:ad:
f9:f1:75:4e:f0:bd:28:5d:7b:a6:db:5b:78:42:09:c2:89:88:
9e:6e:7c:2d:19:f7:a7:4d:e5:ef:50:07:a1:51:ea:5c:eb:1a:
03:5c:83:aa:59:8e:db:3e:5f:03:7e:8c:33:7e:41:fd:9e:e8:
53:88:f9:f4:04:02:f2:71:e3:d4:a1:3b:8f:0e:ba:63:5a:ec:
1a:b6:13:eb:10:fd:23:41:94:38:2c:8b:3c:ca:89:88:9c:ca:
bd:75:e7:00:75:9b:55:42:f9:5d:d8:76:a3:95:2b:76:1b:0e:
70:89:fe:cb:c5:9e:39:f5:40:a5:ee:15:79:49:c6:9e:ed:8a:
e6:40:65:86:db:a7:91:28:e1:90:b2:f6:6c:ce:71:c6:7e:ec:
73:74:26:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:37:07 2025 by rpki-client