Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/d7a5eb-d188-4aa2-bca5-fa59dc2a463b/1/crsdyZa54KP6ZjLPgHp8IFCUnEY.mft
File: crsdyZa54KP6ZjLPgHp8IFCUnEY.mft (raw, json)
Hash identifier: kgctXHPJGRM6jUlXQgibvnq+U1F4Bhd/Sbw2HqMbwsA=
Subject key identifier: B9:55:19:7F:64:1A:42:B0:2B:47:D5:3A:23:95:A4:B2:32:86:4B:FB
Authority key identifier: 72:BB:1D:C9:96:B9:E0:A3:FA:66:32:CF:80:7A:7C:20:50:94:9C:46
Certificate issuer: /CN=72bb1dc996b9e0a3fa6632cf807a7c2050949c46
Certificate serial: 019A7112A92B79E6DC38868427F9A215D5B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crsdyZa54KP6ZjLPgHp8IFCUnEY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/d7a5eb-d188-4aa2-bca5-fa59dc2a463b/1/crsdyZa54KP6ZjLPgHp8IFCUnEY.mft
Manifest number: 0A0D
Signing time: Tue 11 Nov 2025 04:00:39 +0000
Manifest this update: Tue 11 Nov 2025 04:00:39 +0000
Manifest next update: Wed 12 Nov 2025 04:00:39 +0000
Files and hashes: 1: crsdyZa54KP6ZjLPgHp8IFCUnEY.crl (hash: AU69Au+ZJR+rEqEipwd/w9UvIOQwXOQeDp5HE+mQkFk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/d7a5eb-d188-4aa2-bca5-fa59dc2a463b/1/crsdyZa54KP6ZjLPgHp8IFCUnEY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/d7a5eb-d188-4aa2-bca5-fa59dc2a463b/1/crsdyZa54KP6ZjLPgHp8IFCUnEY.mft
rsync://rpki.ripe.net/repository/DEFAULT/crsdyZa54KP6ZjLPgHp8IFCUnEY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:a9:2b:79:e6:dc:38:86:84:27:f9:a2:15:d5:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72bb1dc996b9e0a3fa6632cf807a7c2050949c46
Validity
Not Before: Nov 11 04:00:39 2025 GMT
Not After : Nov 12 04:00:39 2025 GMT
Subject: CN=b955197f641a42b02b47d53a2395a4b232864bfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ac:88:fd:7a:0a:ef:ae:00:f0:ec:7f:ef:e5:
df:52:a6:1a:21:26:36:e2:73:0b:41:fc:79:0e:06:
c3:80:97:0b:0f:ea:cc:1d:d1:65:e1:15:ac:0f:c0:
d8:96:b0:66:da:ee:3c:0f:22:58:f5:3b:b8:d5:d6:
54:44:74:df:b0:62:8e:6b:9f:fa:d2:b4:b6:3a:7d:
27:61:93:63:c3:96:0a:a9:e9:34:86:d4:c3:ac:5e:
80:11:44:43:03:98:33:9a:5a:96:9b:74:43:ed:a6:
6a:9a:cd:80:c4:55:da:d1:35:3d:bd:3d:72:92:37:
93:02:ad:fb:c3:96:18:1c:74:17:cb:9b:32:8c:45:
9a:3a:71:02:ed:60:26:33:b7:90:00:4f:82:20:5a:
12:af:3e:eb:3d:9a:43:4c:e8:9c:8c:ec:79:cc:08:
79:a6:f2:ff:10:d6:e2:40:e6:d2:ba:75:87:c2:35:
08:ce:6d:32:5a:60:3f:a7:ca:f9:5b:bb:4b:b0:88:
8e:a9:e8:19:5c:cb:66:ed:81:5e:dd:bb:ac:35:77:
9b:1d:3c:04:e7:89:83:11:cf:b7:bd:52:cb:10:5a:
b2:0d:f4:dc:78:f2:75:cd:82:3c:a6:95:f5:ba:83:
59:57:aa:06:c6:2a:b7:a7:47:90:62:28:1c:ac:9b:
ce:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:55:19:7F:64:1A:42:B0:2B:47:D5:3A:23:95:A4:B2:32:86:4B:FB
X509v3 Authority Key Identifier:
keyid:72:BB:1D:C9:96:B9:E0:A3:FA:66:32:CF:80:7A:7C:20:50:94:9C:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crsdyZa54KP6ZjLPgHp8IFCUnEY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/d7a5eb-d188-4aa2-bca5-fa59dc2a463b/1/crsdyZa54KP6ZjLPgHp8IFCUnEY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/d7a5eb-d188-4aa2-bca5-fa59dc2a463b/1/crsdyZa54KP6ZjLPgHp8IFCUnEY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:86:f7:3c:bf:56:25:37:95:1e:5b:cc:18:fd:5b:17:e5:c1:
71:bd:80:ba:d5:60:a9:cd:2d:0e:49:60:40:b5:28:c2:36:df:
94:7a:cf:0a:05:53:b0:fa:e3:4d:6c:15:48:f3:fd:47:d9:ec:
a9:56:11:4c:8c:b8:a5:df:4c:ee:43:b8:76:8a:74:41:3f:1a:
12:62:00:67:fe:6a:48:e4:0a:95:a5:cb:e1:88:41:63:26:bf:
68:0a:1d:7a:8e:91:9e:b0:ed:7a:20:d6:59:a5:c0:14:a2:15:
9a:64:8b:53:00:eb:70:e3:74:bf:fc:21:94:de:16:8f:33:c5:
5e:c1:a0:f3:b6:ad:2a:6c:f0:47:07:a5:8f:af:48:55:1c:6a:
91:a4:32:30:fb:ef:de:da:8b:5a:52:29:e4:94:16:a4:c9:52:
42:28:48:77:c4:de:d4:c4:67:a4:c2:c1:99:17:ec:f5:7e:56:
2f:e3:22:f6:e5:3f:2b:2c:d2:c5:f5:78:9b:da:a8:b4:a7:5f:
10:47:6b:94:a5:da:56:75:f2:f7:54:d5:a3:9a:0d:44:e5:b3:
dc:d3:e1:71:20:59:4e:96:65:51:48:24:cf:ff:7d:a8:b9:b5:
bc:a6:48:91:c8:93:1b:e1:db:16:f5:84:2e:42:f7:a6:0e:a0:
da:15:5b:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:39:08 2025 by rpki-client