Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/e7375e-6ac5-4c8b-95f3-4eca4c9af4b5/1/_CwEhVQA8w2Ng82ayoVo_H9KAYg.mft
File: _CwEhVQA8w2Ng82ayoVo_H9KAYg.mft (raw, json)
Hash identifier: iNz0GARp13tWX5LRSD9mia3iJDUakCfBd1NTnFfyJLg=
Subject key identifier: 37:9C:5A:D9:DF:40:F2:CD:EC:95:DD:42:DD:6A:8B:7A:A6:9C:79:17
Authority key identifier: FC:2C:04:85:54:00:F3:0D:8D:83:CD:9A:CA:85:68:FC:7F:4A:01:88
Certificate issuer: /CN=fc2c04855400f30d8d83cd9aca8568fc7f4a0188
Certificate serial: 019A71B8334BC8779B4392FCAC36471D7989
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_CwEhVQA8w2Ng82ayoVo_H9KAYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/e7375e-6ac5-4c8b-95f3-4eca4c9af4b5/1/_CwEhVQA8w2Ng82ayoVo_H9KAYg.mft
Manifest number: 141F
Signing time: Tue 11 Nov 2025 07:01:28 +0000
Manifest this update: Tue 11 Nov 2025 07:01:28 +0000
Manifest next update: Wed 12 Nov 2025 07:01:28 +0000
Files and hashes: 1: _CwEhVQA8w2Ng82ayoVo_H9KAYg.crl (hash: OHUHmWdLFYOP4Yo0MLU4BUKspJ+gVFnxzbTZ+AOmKg4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/e7375e-6ac5-4c8b-95f3-4eca4c9af4b5/1/_CwEhVQA8w2Ng82ayoVo_H9KAYg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/e7375e-6ac5-4c8b-95f3-4eca4c9af4b5/1/_CwEhVQA8w2Ng82ayoVo_H9KAYg.mft
rsync://rpki.ripe.net/repository/DEFAULT/_CwEhVQA8w2Ng82ayoVo_H9KAYg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:33:4b:c8:77:9b:43:92:fc:ac:36:47:1d:79:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc2c04855400f30d8d83cd9aca8568fc7f4a0188
Validity
Not Before: Nov 11 07:01:28 2025 GMT
Not After : Nov 12 07:01:28 2025 GMT
Subject: CN=379c5ad9df40f2cdec95dd42dd6a8b7aa69c7917
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a7:bc:4b:72:11:3d:9c:83:45:a2:1d:c8:b3:
6c:1c:12:c6:3a:8d:d4:bf:63:f1:c5:38:a6:92:39:
86:d3:34:73:d9:a4:d4:a4:3f:b6:a3:d9:10:c4:41:
c0:33:2d:d0:f7:d6:90:43:b3:8d:ff:fb:37:4e:88:
80:32:2a:a3:95:4e:44:5e:cc:d6:d8:dc:d8:0d:c8:
1c:44:b7:f0:16:9b:bc:6f:a0:1b:48:ed:4e:bf:e7:
b3:a2:40:1b:2f:b7:49:b9:53:c9:bd:ad:e3:bf:cb:
80:ea:a2:83:99:5a:75:3e:69:b8:1a:82:28:be:b1:
ae:95:66:55:f8:bc:4b:3c:18:50:53:b9:db:29:3d:
6a:ce:1e:f3:f6:1f:97:42:8d:73:e2:3f:90:20:00:
60:60:79:25:48:5b:b7:37:11:a7:22:12:4c:2b:43:
cf:ff:b6:b0:17:a6:73:60:ab:b5:4c:3b:b1:ec:7e:
ad:99:a0:70:2e:33:6e:08:36:89:47:51:8b:cf:38:
7d:a9:14:16:e0:85:f5:b2:b9:10:7f:13:22:75:b7:
83:16:7f:78:45:77:08:19:9d:7b:b2:ee:4a:f5:cb:
8c:17:ea:6d:46:6a:e6:0a:d0:39:0e:3a:01:6f:a7:
26:20:3a:2e:4c:ec:48:c5:b2:8d:e6:ef:07:cc:e5:
64:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:9C:5A:D9:DF:40:F2:CD:EC:95:DD:42:DD:6A:8B:7A:A6:9C:79:17
X509v3 Authority Key Identifier:
keyid:FC:2C:04:85:54:00:F3:0D:8D:83:CD:9A:CA:85:68:FC:7F:4A:01:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_CwEhVQA8w2Ng82ayoVo_H9KAYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/e7375e-6ac5-4c8b-95f3-4eca4c9af4b5/1/_CwEhVQA8w2Ng82ayoVo_H9KAYg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/e7375e-6ac5-4c8b-95f3-4eca4c9af4b5/1/_CwEhVQA8w2Ng82ayoVo_H9KAYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:5d:89:27:ad:56:06:4b:25:ee:de:a2:fc:d3:60:43:ad:26:
7c:3b:1d:bf:e4:c6:2d:41:0b:fa:a6:6c:db:4a:51:a4:35:ed:
b5:f2:30:d6:61:af:19:2c:cd:86:d2:99:ce:4b:b9:ed:cd:30:
83:ac:6d:6e:3e:d6:e9:42:b8:a8:fd:4b:89:86:ab:f0:dd:04:
7b:d6:6d:4a:9d:49:23:aa:e1:ad:1b:a5:78:a9:dd:0d:aa:1e:
49:b2:d3:d9:c3:7c:57:72:ad:59:cf:b8:d9:82:d3:08:d5:8d:
90:92:db:c0:41:9c:5a:3e:b6:4d:22:f8:d6:4f:80:e5:d6:8b:
8a:5d:f6:34:eb:f7:24:5f:ad:f8:66:2f:db:07:4d:1a:6b:9c:
5c:f3:e9:54:0d:4f:74:8f:21:72:cf:87:a3:ff:90:e6:8d:d8:
c4:bc:84:e1:00:0c:69:d4:9b:8d:94:43:ac:6d:88:bd:43:24:
2a:2b:47:dc:f8:ec:64:17:a3:ea:75:62:af:46:d5:6d:7c:60:
a8:72:e5:cc:72:ff:49:d9:3f:6e:75:01:27:51:4a:b9:e9:0c:
bc:67:82:3e:c2:6e:22:9c:0e:f9:67:2d:9e:e7:69:55:42:b4:
f4:f7:78:28:a3:f6:97:42:46:fb:9e:18:ca:c3:fe:a3:9f:03:
95:a0:42:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:39:09 2025 by rpki-client