Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/e63328-45a5-4798-bcf4-c1acf012b9bc/1/eX87nykJe6W_ddRkbgJZ9RxCGlg.mft
File: eX87nykJe6W_ddRkbgJZ9RxCGlg.mft (raw, json)
Hash identifier: ed9r/RLfR9APdycf97ibi16HorBcOEmLQTT+qGe7z7k=
Subject key identifier: 33:71:B9:9C:8E:EA:35:23:DA:C7:CA:DD:98:FA:11:06:59:9F:69:07
Authority key identifier: 79:7F:3B:9F:29:09:7B:A5:BF:75:D4:64:6E:02:59:F5:1C:42:1A:58
Certificate issuer: /CN=797f3b9f29097ba5bf75d4646e0259f51c421a58
Certificate serial: 019A71B8558B3FD939A94F1D6E6E50ACA1AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eX87nykJe6W_ddRkbgJZ9RxCGlg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/e63328-45a5-4798-bcf4-c1acf012b9bc/1/eX87nykJe6W_ddRkbgJZ9RxCGlg.mft
Manifest number: 0DF0
Signing time: Tue 11 Nov 2025 07:01:37 +0000
Manifest this update: Tue 11 Nov 2025 07:01:37 +0000
Manifest next update: Wed 12 Nov 2025 07:01:37 +0000
Files and hashes: 1: eX87nykJe6W_ddRkbgJZ9RxCGlg.crl (hash: 3YQyKEpNnWl4dZzFYY6JH+wML1FmP5Alj5MDLPv9xYg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/e63328-45a5-4798-bcf4-c1acf012b9bc/1/eX87nykJe6W_ddRkbgJZ9RxCGlg.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/e63328-45a5-4798-bcf4-c1acf012b9bc/1/eX87nykJe6W_ddRkbgJZ9RxCGlg.mft
rsync://rpki.ripe.net/repository/DEFAULT/eX87nykJe6W_ddRkbgJZ9RxCGlg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:55:8b:3f:d9:39:a9:4f:1d:6e:6e:50:ac:a1:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=797f3b9f29097ba5bf75d4646e0259f51c421a58
Validity
Not Before: Nov 11 07:01:37 2025 GMT
Not After : Nov 12 07:01:37 2025 GMT
Subject: CN=3371b99c8eea3523dac7cadd98fa1106599f6907
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:ef:ef:d6:da:1b:9c:cc:81:b6:a7:f3:d6:d0:
89:53:c9:1a:48:9c:96:a1:e9:24:e2:b2:2a:0f:4f:
9b:aa:35:f3:16:63:f0:b6:32:3a:04:f2:ff:22:e9:
a4:c1:7d:1a:a8:a2:8a:e2:f5:ac:bf:c1:9a:1b:b1:
1f:16:de:df:e5:c3:83:be:bd:3a:db:cc:09:a5:66:
7b:22:6c:d0:3c:c7:20:c6:a9:56:3b:80:e3:4a:0e:
82:e0:72:50:3c:15:48:39:05:42:9a:d4:4a:f8:7f:
af:c6:19:7a:2b:96:e7:5e:f2:69:97:07:17:f5:e0:
1f:91:3b:69:c2:cd:1d:46:ed:67:2b:62:23:36:2b:
f1:c8:f8:3f:05:f0:b8:2b:75:31:32:ac:de:2d:6d:
66:8b:15:9c:27:b6:03:f7:d7:f9:b6:1c:a7:db:2e:
1f:cc:9f:93:5c:96:68:af:31:30:06:92:b2:c6:81:
80:d2:65:d8:80:3a:d1:9b:67:b0:4d:26:98:9b:6d:
47:64:f1:95:6d:d4:8e:77:9d:a3:00:f8:77:d0:67:
2f:d0:90:b4:58:47:21:fd:02:ca:4c:16:a6:04:b3:
84:a2:9b:c2:6a:96:f3:c7:65:52:15:65:27:08:c8:
2a:bc:01:41:77:a4:95:2c:47:f3:92:f2:c5:30:85:
db:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:71:B9:9C:8E:EA:35:23:DA:C7:CA:DD:98:FA:11:06:59:9F:69:07
X509v3 Authority Key Identifier:
keyid:79:7F:3B:9F:29:09:7B:A5:BF:75:D4:64:6E:02:59:F5:1C:42:1A:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eX87nykJe6W_ddRkbgJZ9RxCGlg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/e63328-45a5-4798-bcf4-c1acf012b9bc/1/eX87nykJe6W_ddRkbgJZ9RxCGlg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/e63328-45a5-4798-bcf4-c1acf012b9bc/1/eX87nykJe6W_ddRkbgJZ9RxCGlg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:b7:02:ef:94:c9:7f:ae:38:74:ee:3b:6c:c5:67:28:12:42:
15:30:7e:de:0a:0f:bb:9e:03:a7:69:f9:99:ca:34:f1:09:38:
c8:d1:3e:b5:24:79:97:66:ae:28:4c:22:e3:81:27:cd:ac:8b:
26:52:b8:f9:17:52:4c:da:42:de:eb:26:a0:3e:e2:6d:84:19:
72:04:f9:9f:9f:0e:bb:a6:42:df:e5:36:9e:23:d2:f7:c2:a4:
1b:f3:66:26:ad:fb:bf:aa:1d:89:81:89:41:60:32:49:40:1a:
b3:e2:52:5e:7b:ed:9d:f1:df:c2:fe:7d:04:41:c0:cb:c6:f7:
a9:e6:3b:d5:01:d9:d3:d2:65:5b:13:2a:03:ce:40:8e:fb:6b:
68:12:07:fa:01:52:53:46:fc:07:4d:db:10:23:77:d9:08:72:
af:ae:2f:64:5d:c9:e1:b4:36:3d:56:f1:b2:9b:54:46:2f:70:
f5:5d:be:f4:c1:38:74:21:d4:12:4c:fb:ee:d6:96:5d:2d:12:
0d:b0:95:99:18:4a:60:48:e2:b8:c7:60:92:42:34:01:8c:56:
f8:43:45:ba:4c:a1:1c:ad:86:f3:3d:41:99:ad:34:97:eb:28:
2d:bf:e9:11:aa:2e:7a:f9:0b:d1:03:e7:c4:81:4e:5b:6f:d3:
24:d8:cb:4f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuFWLP9k5qU8dbm5QrKGsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5N2YzYjlmMjkwOTdiYTViZjc1ZDQ2NDZlMDI1OWY1MWM0
MjFhNTgwHhcNMjUxMTExMDcwMTM3WhcNMjUxMTEyMDcwMTM3WjAzMTEwLwYDVQQD
EygzMzcxYjk5YzhlZWEzNTIzZGFjN2NhZGQ5OGZhMTEwNjU5OWY2OTA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4+/v1tobnMyBtqfz1tCJU8kaSJyW
oekk4rIqD0+bqjXzFmPwtjI6BPL/IumkwX0aqKKK4vWsv8GaG7EfFt7f5cODvr06
28wJpWZ7ImzQPMcgxqlWO4DjSg6C4HJQPBVIOQVCmtRK+H+vxhl6K5bnXvJplwcX
9eAfkTtpws0dRu1nK2IjNivxyPg/BfC4K3UxMqzeLW1mixWcJ7YD99f5thyn2y4f
zJ+TXJZorzEwBpKyxoGA0mXYgDrRm2ewTSaYm21HZPGVbdSOd52jAPh30Gcv0JC0
WEch/QLKTBamBLOEopvCapbzx2VSFWUnCMgqvAFBd6SVLEfzkvLFMIXb8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDNxuZyO6jUj2sfK3Zj6EQZZn2kHMB8GA1UdIwQY
MBaAFHl/O58pCXulv3XUZG4CWfUcQhpYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZVg4N255a0plNldfZGRSa2JnSlo5UnhDR2xnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9lNjMzMjgtNDVhNS00Nzk4LWJjZjQt
YzFhY2YwMTJiOWJjLzEvZVg4N255a0plNldfZGRSa2JnSlo5UnhDR2xnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi9lNjMzMjgtNDVhNS00Nzk4LWJjZjQtYzFhY2YwMTJiOWJj
LzEvZVg4N255a0plNldfZGRSa2JnSlo5UnhDR2xnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgbcC75TJ
f644dO47bMVnKBJCFTB+3goPu54Dp2n5mco08Qk4yNE+tSR5l2auKEwi44EnzayL
JlK4+RdSTNpC3usmoD7ibYQZcgT5n58Ou6ZC3+U2niPS98KkG/NmJq37v6odiYGJ
QWAySUAas+JSXnvtnfHfwv59BEHAy8b3qeY71QHZ09JlWxMqA85AjvtraBIH+gFS
U0b8B03bECN32Qhyr64vZF3J4bQ2PVbxsptURi9w9V2+9ME4dCHUEkz77taWXS0S
DbCVmRhKYEjiuMdgkkI0AYxW+ENFukyhHK2G8z1Bma00l+soLb/pEaouevkL0QPn
xIFOW2/TJNjLTw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 16:54:31 2025 by rpki-client