Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/7f7361-b1e6-4019-ad63-2005994df471/1/G_ksKZT_tTV_jcRieb3Zm-OlbL0.mft
File: G_ksKZT_tTV_jcRieb3Zm-OlbL0.mft (raw, json)
Hash identifier: iZtgLzncN1ecPVxLtdmWWW+IbUpptInmYchMnjF8uoA=
Subject key identifier: 6E:00:90:E9:B3:DC:E5:A0:80:45:92:19:BE:30:B1:31:7F:A1:8E:5B
Authority key identifier: 1B:F9:2C:29:94:FF:B5:35:7F:8D:C4:62:79:BD:D9:9B:E3:A5:6C:BD
Certificate issuer: /CN=1bf92c2994ffb5357f8dc46279bdd99be3a56cbd
Certificate serial: 019A71B7A5B9A672C29670D38C611540EC2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G_ksKZT_tTV_jcRieb3Zm-OlbL0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/7f7361-b1e6-4019-ad63-2005994df471/1/G_ksKZT_tTV_jcRieb3Zm-OlbL0.mft
Manifest number: 0EB7
Signing time: Tue 11 Nov 2025 07:00:52 +0000
Manifest this update: Tue 11 Nov 2025 07:00:52 +0000
Manifest next update: Wed 12 Nov 2025 07:00:52 +0000
Files and hashes: 1: G_ksKZT_tTV_jcRieb3Zm-OlbL0.crl (hash: 7jYDG+vuGqp9Fjcvadc4lCAmB/icRZ1g6F78GVD6YJA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/7f7361-b1e6-4019-ad63-2005994df471/1/G_ksKZT_tTV_jcRieb3Zm-OlbL0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/7f7361-b1e6-4019-ad63-2005994df471/1/G_ksKZT_tTV_jcRieb3Zm-OlbL0.mft
rsync://rpki.ripe.net/repository/DEFAULT/G_ksKZT_tTV_jcRieb3Zm-OlbL0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:a5:b9:a6:72:c2:96:70:d3:8c:61:15:40:ec:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bf92c2994ffb5357f8dc46279bdd99be3a56cbd
Validity
Not Before: Nov 11 07:00:52 2025 GMT
Not After : Nov 12 07:00:52 2025 GMT
Subject: CN=6e0090e9b3dce5a080459219be30b1317fa18e5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:83:71:ba:43:7d:85:da:5c:4a:65:50:a7:db:
50:ef:65:ac:fb:9a:ea:cd:09:f9:b5:c9:72:ea:b7:
94:37:7b:e7:ec:27:37:66:46:09:d3:09:a6:30:84:
69:93:cc:f7:cf:d2:ba:0d:7b:96:ba:db:6b:bf:c4:
0d:ec:1d:e6:45:0c:b0:8f:42:a3:54:02:d2:67:07:
25:b7:f4:6c:b7:cd:6c:3a:18:78:14:57:cd:42:ae:
51:37:dc:ad:61:16:38:1e:c6:91:07:de:be:89:0e:
82:c7:f8:f0:85:94:97:f3:d1:28:1e:91:44:51:b6:
ef:b1:79:a5:f0:09:9e:ff:87:67:0d:d8:eb:cf:3c:
94:67:7b:3d:96:23:b2:f6:7c:3c:57:82:90:2a:85:
c5:9c:82:ac:42:ca:dd:11:40:59:2a:dd:f4:ec:83:
c7:4f:68:31:dc:a7:27:46:5b:af:47:8f:24:b7:bc:
6f:47:84:1c:1f:5c:e9:39:8f:47:67:78:f7:19:0a:
00:98:a6:46:45:6a:06:3f:4e:3a:50:fa:84:15:ea:
f8:21:0d:f9:0f:a1:df:1a:a7:0f:e8:36:d0:f5:d9:
3d:a0:cc:de:8c:45:3e:d9:5c:20:dc:80:2c:56:73:
08:99:a5:c4:ad:3f:95:91:05:a4:1c:13:93:11:8d:
73:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:00:90:E9:B3:DC:E5:A0:80:45:92:19:BE:30:B1:31:7F:A1:8E:5B
X509v3 Authority Key Identifier:
keyid:1B:F9:2C:29:94:FF:B5:35:7F:8D:C4:62:79:BD:D9:9B:E3:A5:6C:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G_ksKZT_tTV_jcRieb3Zm-OlbL0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/7f7361-b1e6-4019-ad63-2005994df471/1/G_ksKZT_tTV_jcRieb3Zm-OlbL0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/7f7361-b1e6-4019-ad63-2005994df471/1/G_ksKZT_tTV_jcRieb3Zm-OlbL0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:c9:17:ee:8d:3c:3f:9a:5f:22:d8:37:ee:f2:01:9e:3a:8e:
f5:1d:6f:01:61:07:a1:d9:00:e6:a8:87:df:ed:2c:63:3c:c6:
c1:9d:8a:35:91:b4:4c:63:4a:65:82:5d:a1:58:f1:6b:5f:10:
0d:53:72:68:d9:1e:27:23:6a:3e:e6:ba:0f:8c:8c:f9:48:ab:
f3:94:28:1e:df:6d:6a:64:12:2b:c1:19:a7:82:6e:09:13:fe:
12:0e:e5:ff:8f:91:3f:a3:ec:4e:7d:70:f4:11:a1:64:a4:f3:
59:ca:c1:e3:6c:a4:07:9f:11:2d:23:ce:3e:cd:e2:64:88:15:
e5:b7:c3:49:dc:9c:8c:af:7b:cd:e7:a4:de:d4:60:a1:23:43:
2f:24:76:9e:ce:d2:9e:bb:9b:a5:8d:de:a3:51:6a:7b:5e:f6:
79:30:b9:f8:56:8d:17:8d:72:d7:50:7d:fd:b8:20:ca:43:e8:
26:60:c0:af:c2:e9:b1:79:76:2e:19:f5:97:40:31:b7:e0:e0:
7c:5f:4d:17:98:0e:ba:57:10:8f:5d:c6:8e:7d:9f:a9:9d:58:
0c:f5:5a:82:3e:2a:8e:87:63:3c:69:96:14:f1:38:a9:d1:7d:
a5:b0:17:c5:54:ca:62:ed:16:e7:cb:d1:2a:8c:6c:5c:bd:52:
96:b3:a2:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:31:18 2025 by rpki-client