Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/b05e62-cac2-42f9-9ef6-a32549232520/1/t5LX7PO0XEk48Fu5BRxaiXKd1EE.mft
File: t5LX7PO0XEk48Fu5BRxaiXKd1EE.mft (raw, json)
Hash identifier: sLvK9qr7gmojuwJeU952iaQsJW7Pk34iBvgyIi7KZmc=
Subject key identifier: F6:B8:E7:25:41:CF:DF:58:C6:A6:6D:C4:72:78:2E:52:D6:1B:A0:38
Authority key identifier: B7:92:D7:EC:F3:B4:5C:49:38:F0:5B:B9:05:1C:5A:89:72:9D:D4:41
Certificate issuer: /CN=b792d7ecf3b45c4938f05bb9051c5a89729dd441
Certificate serial: 019A72266186E35CA6EDE8EFF74D3DD2D488
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t5LX7PO0XEk48Fu5BRxaiXKd1EE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/b05e62-cac2-42f9-9ef6-a32549232520/1/t5LX7PO0XEk48Fu5BRxaiXKd1EE.mft
Manifest number: 0DB4
Signing time: Tue 11 Nov 2025 09:01:49 +0000
Manifest this update: Tue 11 Nov 2025 09:01:49 +0000
Manifest next update: Wed 12 Nov 2025 09:01:49 +0000
Files and hashes: 1: t5LX7PO0XEk48Fu5BRxaiXKd1EE.crl (hash: ETVetQviR5c7/ml1IYJIlojw8SiGiRF6qKJwQkJOpJ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/b05e62-cac2-42f9-9ef6-a32549232520/1/t5LX7PO0XEk48Fu5BRxaiXKd1EE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/b05e62-cac2-42f9-9ef6-a32549232520/1/t5LX7PO0XEk48Fu5BRxaiXKd1EE.mft
rsync://rpki.ripe.net/repository/DEFAULT/t5LX7PO0XEk48Fu5BRxaiXKd1EE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:61:86:e3:5c:a6:ed:e8:ef:f7:4d:3d:d2:d4:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b792d7ecf3b45c4938f05bb9051c5a89729dd441
Validity
Not Before: Nov 11 09:01:49 2025 GMT
Not After : Nov 12 09:01:49 2025 GMT
Subject: CN=f6b8e72541cfdf58c6a66dc472782e52d61ba038
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b3:ff:f9:cd:e3:29:f9:1a:4e:4c:4e:7b:16:
2e:1e:84:60:30:19:7e:be:c1:c7:60:90:1c:4d:ab:
36:35:c7:fb:47:38:58:56:2e:78:41:d6:58:d9:b3:
a5:65:b9:83:5f:de:54:b0:18:a3:e8:82:54:db:96:
df:a6:51:9e:f8:e9:e3:94:af:d1:95:3f:5e:45:74:
d3:82:dd:4a:3a:e1:46:9a:04:9c:11:fd:19:09:75:
dc:d6:61:43:d0:78:a0:a1:62:d8:d2:e3:b0:1d:f4:
4c:e9:09:55:12:cb:ef:c6:af:c8:7c:db:22:6a:01:
bb:1e:22:dd:55:f0:61:92:be:55:34:38:f5:31:e3:
98:cb:76:ac:92:fd:62:40:63:1c:62:70:9c:9e:6c:
bd:56:07:b9:60:1c:f4:75:48:ea:aa:f1:58:2f:da:
bd:85:79:d3:e8:4d:c6:db:6a:e3:1f:f7:c0:d8:b7:
96:10:0e:a3:22:6a:7c:2c:06:d4:d2:ea:2f:92:d8:
60:8e:5f:0d:01:2b:6b:43:7c:22:35:3c:b2:9b:ca:
7e:f2:b7:89:c3:5e:20:23:b7:7a:e8:59:d7:31:b0:
b0:74:06:a3:c8:5b:6d:18:52:f5:69:3f:bf:af:07:
82:34:49:d8:0c:61:32:18:5b:c1:82:8e:3c:60:86:
f2:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:B8:E7:25:41:CF:DF:58:C6:A6:6D:C4:72:78:2E:52:D6:1B:A0:38
X509v3 Authority Key Identifier:
keyid:B7:92:D7:EC:F3:B4:5C:49:38:F0:5B:B9:05:1C:5A:89:72:9D:D4:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t5LX7PO0XEk48Fu5BRxaiXKd1EE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/b05e62-cac2-42f9-9ef6-a32549232520/1/t5LX7PO0XEk48Fu5BRxaiXKd1EE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/b05e62-cac2-42f9-9ef6-a32549232520/1/t5LX7PO0XEk48Fu5BRxaiXKd1EE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:9a:40:cb:e2:4d:cf:17:1d:ee:e3:02:fd:e3:7f:2e:93:cf:
a0:f9:88:f2:21:76:1b:15:80:7d:69:0d:1c:15:65:e7:d9:55:
27:02:1c:c6:97:aa:4b:30:34:28:43:4d:be:72:a0:0a:29:11:
d4:22:33:a6:c0:8b:e6:7a:5d:2f:69:60:ec:79:a1:22:e0:25:
01:32:8d:20:f7:02:ff:f5:52:3e:08:cf:28:5d:1b:97:0b:61:
c7:b8:4d:e7:10:ef:a2:7e:4f:e2:fd:5e:a5:24:42:34:7a:2e:
1b:3f:21:60:e5:76:6d:e6:0e:b9:fa:c7:6b:da:ce:ad:e2:ab:
2e:3f:ac:31:9e:eb:1e:4c:20:3d:b3:f6:21:53:92:b8:27:27:
01:10:20:17:18:11:bc:16:7e:36:0e:3d:4f:11:48:51:b6:73:
5f:aa:82:55:16:ba:b2:d0:dd:de:f2:2d:10:f4:47:74:e9:d4:
b1:6a:f5:1a:7b:91:c6:5e:db:57:40:5a:13:a1:f7:3c:37:a8:
a1:9e:24:92:9c:f9:c3:46:45:ce:ea:94:68:b4:fb:1d:d9:ad:
8a:77:94:9f:37:2c:7e:7f:cb:cf:0c:14:f4:25:9a:c5:c8:a1:
b4:27:d8:f4:e3:fe:35:c8:b9:66:3b:32:dd:61:4f:47:55:af:
a6:08:2c:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:38:51 2025 by rpki-client