Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/51d781-c155-4297-b0b7-c718361d4374/1/rCRVsahZvE1mGBdQVfDsiWB_BS0.mft
File: rCRVsahZvE1mGBdQVfDsiWB_BS0.mft (raw, json)
Hash identifier: UzwYUVOOyZvkRYT63vcnUidV1trWsnyInOdu5lhSU4o=
Subject key identifier: 72:26:B3:EF:78:1D:0F:BD:EB:7B:54:CC:ED:41:A2:09:70:C8:18:9F
Authority key identifier: AC:24:55:B1:A8:59:BC:4D:66:18:17:50:55:F0:EC:89:60:7F:05:2D
Certificate issuer: /CN=ac2455b1a859bc4d6618175055f0ec89607f052d
Certificate serial: 019A730181FF30D019261EABF36BAB4BE28A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rCRVsahZvE1mGBdQVfDsiWB_BS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/51d781-c155-4297-b0b7-c718361d4374/1/rCRVsahZvE1mGBdQVfDsiWB_BS0.mft
Manifest number: 145D
Signing time: Tue 11 Nov 2025 13:01:09 +0000
Manifest this update: Tue 11 Nov 2025 13:01:09 +0000
Manifest next update: Wed 12 Nov 2025 13:01:09 +0000
Files and hashes: 1: rCRVsahZvE1mGBdQVfDsiWB_BS0.crl (hash: xGryWRr3mYqK6BVs2WyLChZaKMuk+ePGrTJB89Delco=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/51d781-c155-4297-b0b7-c718361d4374/1/rCRVsahZvE1mGBdQVfDsiWB_BS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/51d781-c155-4297-b0b7-c718361d4374/1/rCRVsahZvE1mGBdQVfDsiWB_BS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/rCRVsahZvE1mGBdQVfDsiWB_BS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:81:ff:30:d0:19:26:1e:ab:f3:6b:ab:4b:e2:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac2455b1a859bc4d6618175055f0ec89607f052d
Validity
Not Before: Nov 11 13:01:09 2025 GMT
Not After : Nov 12 13:01:09 2025 GMT
Subject: CN=7226b3ef781d0fbdeb7b54cced41a20970c8189f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:0c:19:b6:a9:33:b0:12:bd:f0:1d:14:74:5c:
72:07:ad:84:b2:8a:4b:13:40:68:61:78:b9:ad:e2:
19:8f:d2:e5:8d:f3:5a:8e:92:24:4d:4a:b9:0c:9a:
1b:9b:62:99:26:89:d6:82:2c:4d:4d:ba:f1:af:4f:
1d:12:6d:07:bf:c3:a4:08:2f:00:67:45:dc:54:78:
73:e9:83:7a:f6:44:24:98:40:34:e1:7a:72:0b:d3:
ec:f3:b5:15:7f:03:0e:56:9c:3b:09:49:b0:56:4c:
40:07:64:03:b2:4b:c3:da:75:07:22:0a:05:c7:da:
a2:02:c9:30:5e:6d:41:e9:13:e7:b9:4f:47:28:a8:
ac:f0:66:d3:b6:33:5a:73:5f:a3:5f:9d:d5:0c:67:
ff:d6:bb:f2:6d:23:2e:11:5d:5e:62:e8:53:f5:a2:
38:f9:2e:a1:7e:70:7d:2e:00:1f:a9:75:21:81:4c:
d7:78:43:9a:0f:8a:e4:3a:57:a7:a2:a5:85:79:b3:
b8:b4:2a:06:64:af:70:8d:3b:e0:e2:1b:09:af:75:
03:4f:97:9e:c9:2f:6e:91:1c:99:53:d0:1e:b3:2d:
4a:98:ba:5c:24:9c:02:71:23:4e:d7:47:64:b5:99:
aa:ff:e1:ee:4d:42:08:35:92:c1:7e:86:35:bb:eb:
ec:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:26:B3:EF:78:1D:0F:BD:EB:7B:54:CC:ED:41:A2:09:70:C8:18:9F
X509v3 Authority Key Identifier:
keyid:AC:24:55:B1:A8:59:BC:4D:66:18:17:50:55:F0:EC:89:60:7F:05:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rCRVsahZvE1mGBdQVfDsiWB_BS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/51d781-c155-4297-b0b7-c718361d4374/1/rCRVsahZvE1mGBdQVfDsiWB_BS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/51d781-c155-4297-b0b7-c718361d4374/1/rCRVsahZvE1mGBdQVfDsiWB_BS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:3d:12:79:f2:96:58:05:6e:0f:03:7a:96:6f:0a:f4:fb:c0:
00:8e:c2:e8:f8:77:2a:f6:2c:bb:e1:2d:24:f1:5b:2f:ce:9f:
ac:d8:83:59:3d:03:08:d9:b2:ef:0a:46:2a:b1:58:5e:23:6b:
f9:d4:34:e3:1c:6e:7e:4c:ba:e0:56:9d:98:8b:e2:99:9e:c8:
45:81:07:f3:1d:6a:66:e9:e6:c2:bf:1e:3d:a8:de:65:6d:cf:
b5:69:f2:8d:46:6a:86:51:ac:34:26:3b:5b:72:d5:32:9f:f7:
a4:9d:4a:92:78:bf:ac:f5:b2:d4:f6:54:0b:bd:72:de:77:ff:
cf:7e:f6:19:65:27:89:ba:3e:72:ed:8e:f7:87:2a:96:81:82:
6d:ce:bf:dd:e8:6f:9a:fd:05:ea:25:62:e7:44:58:6a:b9:47:
35:bd:c4:69:02:ef:63:c6:ab:9f:db:4b:5c:2a:c0:b5:e1:53:
0e:09:c0:da:2b:58:1e:0c:66:32:4f:03:7e:0d:b0:33:0b:dc:
0a:4a:e3:35:2b:26:c8:c6:6d:4d:f7:de:6d:c2:ab:62:47:44:
db:61:de:a3:80:5b:9c:ad:5c:2d:b2:87:a3:8c:c8:c5:3f:86:
3e:e7:82:c6:fe:41:4a:be:25:af:4d:38:ea:5b:12:9e:e9:58:
26:af:88:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 17:17:17 2025 by rpki-client