Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/39a3dd-2d26-4753-a180-56d611720224/1/R5jSPWIery3VeYDVoA-8zJhYgvI.mft
File: R5jSPWIery3VeYDVoA-8zJhYgvI.mft (raw, json)
Hash identifier: WjGHBX48Fp+EN58SOZHrbyksZUVCKWzghVBqjcT9XpM=
Subject key identifier: BB:B9:8B:E7:03:82:F8:71:F9:8C:E2:4C:8E:FB:F2:14:D3:82:41:D1
Authority key identifier: 47:98:D2:3D:62:1E:AF:2D:D5:79:80:D5:A0:0F:BC:CC:98:58:82:F2
Certificate issuer: /CN=4798d23d621eaf2dd57980d5a00fbccc985882f2
Certificate serial: 019A71B7A566202DA73DF81F877E7A0FAF75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R5jSPWIery3VeYDVoA-8zJhYgvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/39a3dd-2d26-4753-a180-56d611720224/1/R5jSPWIery3VeYDVoA-8zJhYgvI.mft
Manifest number: 111A
Signing time: Tue 11 Nov 2025 07:00:52 +0000
Manifest this update: Tue 11 Nov 2025 07:00:52 +0000
Manifest next update: Wed 12 Nov 2025 07:00:52 +0000
Files and hashes: 1: R5jSPWIery3VeYDVoA-8zJhYgvI.crl (hash: AThu+SWVO6LhcGl0GOJrLYXHO03ZrJdY/v9YadNbFzs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/39a3dd-2d26-4753-a180-56d611720224/1/R5jSPWIery3VeYDVoA-8zJhYgvI.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/39a3dd-2d26-4753-a180-56d611720224/1/R5jSPWIery3VeYDVoA-8zJhYgvI.mft
rsync://rpki.ripe.net/repository/DEFAULT/R5jSPWIery3VeYDVoA-8zJhYgvI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:a5:66:20:2d:a7:3d:f8:1f:87:7e:7a:0f:af:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4798d23d621eaf2dd57980d5a00fbccc985882f2
Validity
Not Before: Nov 11 07:00:52 2025 GMT
Not After : Nov 12 07:00:52 2025 GMT
Subject: CN=bbb98be70382f871f98ce24c8efbf214d38241d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:95:e8:95:99:c0:6a:c0:d8:74:5e:12:d8:be:
58:2a:41:d8:b4:f5:49:c3:c3:db:57:49:2e:7e:52:
cd:26:bb:7d:47:6f:af:f3:da:b5:a1:3d:e6:46:b1:
dc:69:3f:e5:07:60:86:c1:d3:4b:00:7b:a1:cf:66:
2f:ab:b1:65:93:a2:ae:9d:15:88:b7:de:55:aa:e2:
11:6a:77:82:68:85:da:04:da:c4:c0:17:fb:23:a8:
2b:37:54:05:d8:c9:0f:03:5d:06:de:8a:f0:b4:af:
f5:a9:7b:89:76:29:cf:10:97:54:79:a5:98:e5:24:
42:5e:fa:82:cf:73:0a:c3:31:27:d4:79:9a:e6:18:
6b:dd:50:4c:29:98:f0:c5:59:5c:29:97:7a:87:36:
85:27:14:8c:ae:54:6c:5c:00:38:86:52:44:ce:4b:
7c:6f:de:a8:f1:a8:3b:24:b6:57:8d:c2:6c:ab:51:
6e:05:07:19:8f:33:a4:8a:c8:75:56:a8:9e:f9:d3:
2f:4a:cb:e2:ef:9a:c9:dd:4d:4a:35:e0:cf:0c:d2:
c9:83:6d:3c:3a:95:8e:e7:26:cd:ab:06:1d:ae:81:
f2:88:b2:c4:76:ee:81:f0:ac:09:57:f2:f4:eb:a6:
34:a7:f5:13:de:4b:c2:bd:e4:45:0a:8d:27:04:3d:
dd:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:B9:8B:E7:03:82:F8:71:F9:8C:E2:4C:8E:FB:F2:14:D3:82:41:D1
X509v3 Authority Key Identifier:
keyid:47:98:D2:3D:62:1E:AF:2D:D5:79:80:D5:A0:0F:BC:CC:98:58:82:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R5jSPWIery3VeYDVoA-8zJhYgvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/39a3dd-2d26-4753-a180-56d611720224/1/R5jSPWIery3VeYDVoA-8zJhYgvI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/39a3dd-2d26-4753-a180-56d611720224/1/R5jSPWIery3VeYDVoA-8zJhYgvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:bc:bb:07:90:78:fe:7e:30:47:3f:19:4b:ad:10:61:ba:9a:
f0:8c:f2:8d:7b:ae:f2:c6:af:c5:10:78:e8:42:62:ef:47:7f:
20:2a:03:29:a8:07:be:c7:bf:06:64:bf:95:c3:5f:09:d1:f8:
fb:95:f0:35:7c:b7:b1:2e:7b:5d:f5:33:f8:c0:f3:d3:35:f9:
7c:5e:9a:a9:0f:cf:d1:33:1b:8d:88:42:ab:45:3e:49:cb:8c:
38:7e:90:7e:19:f7:8e:33:66:48:94:76:18:88:23:52:30:08:
ff:b9:8d:3b:38:9d:2f:b4:31:e9:c6:07:5d:a1:7c:9a:5a:8a:
31:59:2f:6d:b0:55:e9:13:c6:0b:72:50:98:df:83:70:ea:83:
e5:42:a6:ae:de:5c:be:d8:38:3a:c5:86:e8:f2:6e:56:74:c3:
3a:ec:dd:4b:89:85:af:b4:f9:6a:a8:0c:9d:24:61:d6:89:18:
a9:6b:0a:05:f8:07:2e:85:5c:61:fa:42:71:40:e1:22:ae:61:
5e:e8:75:75:23:33:f0:e6:27:e2:c6:da:54:4d:21:69:32:ec:
ae:0b:16:2e:4c:b8:43:9e:6f:2f:3d:4e:ed:b1:0d:7c:33:0a:
c2:53:eb:f8:14:ba:28:ff:c0:24:f5:5a:17:90:92:57:91:6f:
61:0e:d8:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:46:14 2025 by rpki-client