Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/3bee01-1fb8-47e2-b766-fe0a2ac0869f/1/tW2qb4UEFKE_ZQ3wlFBmKKRtwS8.mft
File: tW2qb4UEFKE_ZQ3wlFBmKKRtwS8.mft (raw, json)
Hash identifier: /OByIx+/kGoN9E+EOpZkhYKPQ85e/0Ys5mQQIUDWP+Q=
Subject key identifier: F2:3C:64:3E:52:80:67:AB:DF:D8:93:02:18:6A:F4:6D:0C:92:CE:EC
Authority key identifier: B5:6D:AA:6F:85:04:14:A1:3F:65:0D:F0:94:50:66:28:A4:6D:C1:2F
Certificate issuer: /CN=b56daa6f850414a13f650df094506628a46dc12f
Certificate serial: 019A711323FE738C424B5627521FE22E6DCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tW2qb4UEFKE_ZQ3wlFBmKKRtwS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/3bee01-1fb8-47e2-b766-fe0a2ac0869f/1/tW2qb4UEFKE_ZQ3wlFBmKKRtwS8.mft
Manifest number: 121A
Signing time: Tue 11 Nov 2025 04:01:11 +0000
Manifest this update: Tue 11 Nov 2025 04:01:11 +0000
Manifest next update: Wed 12 Nov 2025 04:01:11 +0000
Files and hashes: 1: tW2qb4UEFKE_ZQ3wlFBmKKRtwS8.crl (hash: +QDDyr4uXwrIVZBzDsbRDvqyA1h2wUVKq4qFNAWqx0s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/3bee01-1fb8-47e2-b766-fe0a2ac0869f/1/tW2qb4UEFKE_ZQ3wlFBmKKRtwS8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/3bee01-1fb8-47e2-b766-fe0a2ac0869f/1/tW2qb4UEFKE_ZQ3wlFBmKKRtwS8.mft
rsync://rpki.ripe.net/repository/DEFAULT/tW2qb4UEFKE_ZQ3wlFBmKKRtwS8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:23:fe:73:8c:42:4b:56:27:52:1f:e2:2e:6d:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b56daa6f850414a13f650df094506628a46dc12f
Validity
Not Before: Nov 11 04:01:11 2025 GMT
Not After : Nov 12 04:01:11 2025 GMT
Subject: CN=f23c643e528067abdfd89302186af46d0c92ceec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:21:35:77:97:a2:34:b2:42:af:99:06:07:ea:
fb:8b:7d:57:dd:ff:51:2b:e0:66:a8:3a:f4:3e:8b:
fd:66:87:55:35:17:23:63:75:fd:be:24:8d:96:80:
d9:9b:5a:a0:38:f6:27:fe:1d:5e:12:f3:7f:51:56:
4a:57:12:d6:c6:d8:5d:3c:db:f4:3b:71:89:85:b9:
9b:f2:b0:aa:da:bb:d0:68:c3:3a:09:a9:fc:92:e7:
ec:7d:be:af:18:d8:ff:cf:7d:73:32:56:17:b5:cd:
b7:72:bd:29:be:2c:a4:1e:b1:64:7b:e4:dc:b7:47:
83:94:df:f8:97:78:97:ea:fd:d9:e5:b2:9b:4d:5f:
d6:6f:55:d4:aa:2b:5e:b9:5c:09:3f:55:7f:7d:d3:
66:92:32:ef:37:34:09:0e:64:9a:ff:33:c8:82:08:
a0:a8:7b:40:68:46:b5:92:bf:db:1c:d4:fa:e2:af:
65:04:bc:ae:1f:0f:26:21:07:a8:95:d1:2c:ec:37:
ab:70:67:30:8e:1f:2f:f6:4a:92:99:8c:23:d2:55:
6a:e8:56:ff:44:e7:47:27:57:0b:95:ad:4c:16:85:
86:c2:d3:5f:e3:bd:0c:b4:aa:07:7b:da:72:91:ca:
c3:9a:03:97:f2:9a:90:51:3a:79:c6:23:b1:e2:25:
bd:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:3C:64:3E:52:80:67:AB:DF:D8:93:02:18:6A:F4:6D:0C:92:CE:EC
X509v3 Authority Key Identifier:
keyid:B5:6D:AA:6F:85:04:14:A1:3F:65:0D:F0:94:50:66:28:A4:6D:C1:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tW2qb4UEFKE_ZQ3wlFBmKKRtwS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/3bee01-1fb8-47e2-b766-fe0a2ac0869f/1/tW2qb4UEFKE_ZQ3wlFBmKKRtwS8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/3bee01-1fb8-47e2-b766-fe0a2ac0869f/1/tW2qb4UEFKE_ZQ3wlFBmKKRtwS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:cf:5c:94:60:78:48:1e:62:47:9d:92:14:e3:97:69:ea:2c:
3f:b3:85:ae:24:b6:a8:3a:40:6d:55:d3:b1:c8:d4:64:0c:68:
7d:54:b2:3d:66:8d:9b:76:e4:9e:31:34:7b:1e:27:bd:80:06:
21:2a:3c:21:a9:a3:0a:42:ae:3b:52:b7:b9:ee:eb:64:d5:ea:
f2:3e:7d:91:a0:b0:42:bd:17:f4:06:81:c1:e3:39:bb:c1:78:
3a:d8:14:a5:c1:52:a8:16:49:5a:01:91:1a:32:d9:f9:01:f6:
4d:40:18:4c:33:d0:cd:13:18:91:d1:92:28:67:84:de:6f:f9:
41:b7:dd:e1:bc:fd:e5:39:d9:b0:c2:fe:44:d9:a5:63:40:19:
d5:ad:de:77:43:37:4b:b5:55:41:6e:1b:0e:1b:98:2a:2d:57:
67:89:5c:e2:89:38:40:55:4b:4e:ab:fe:53:d6:95:78:d9:5a:
32:1b:10:2d:24:ee:93:6f:d9:2f:81:ae:8d:cc:6f:29:af:fc:
5d:87:d3:59:92:c4:8c:86:66:71:e6:2c:3b:25:17:df:6c:92:
da:af:eb:e6:61:2a:4c:69:21:55:e4:60:0d:c1:89:23:cc:e4:
18:48:5a:94:e2:e7:cb:2d:cb:34:e5:a5:be:41:12:9d:de:b0:
b8:a6:5b:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:02:38 2025 by rpki-client