Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/b94f5f-4cca-49a1-9edb-904ae8b5f479/1/Rn7Pxyeq3bl-WzzTWrBiI-ZBQcQ.mft
File: Rn7Pxyeq3bl-WzzTWrBiI-ZBQcQ.mft (raw, json)
Hash identifier: 3xTxJttp6G4zbVvqbYh82GNeDZ7IefhdQFE3BDHHSEs=
Subject key identifier: CF:12:58:96:B8:D0:93:D1:AA:7E:A9:13:F1:19:A3:34:40:73:80:E3
Authority key identifier: 46:7E:CF:C7:27:AA:DD:B9:7E:5B:3C:D3:5A:B0:62:23:E6:41:41:C4
Certificate issuer: /CN=467ecfc727aaddb97e5b3cd35ab06223e64141c4
Certificate serial: 019A722587B99F2342C3B336B26382FCDE2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rn7Pxyeq3bl-WzzTWrBiI-ZBQcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/b94f5f-4cca-49a1-9edb-904ae8b5f479/1/Rn7Pxyeq3bl-WzzTWrBiI-ZBQcQ.mft
Manifest number: 16
Signing time: Tue 11 Nov 2025 09:00:53 +0000
Manifest this update: Tue 11 Nov 2025 09:00:53 +0000
Manifest next update: Wed 12 Nov 2025 09:00:53 +0000
Files and hashes: 1: Rn7Pxyeq3bl-WzzTWrBiI-ZBQcQ.crl (hash: T76oGzfjHQnCt4GFAHbR+iDjxhK1aDrRzei0Vll4kjE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/b94f5f-4cca-49a1-9edb-904ae8b5f479/1/Rn7Pxyeq3bl-WzzTWrBiI-ZBQcQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/b94f5f-4cca-49a1-9edb-904ae8b5f479/1/Rn7Pxyeq3bl-WzzTWrBiI-ZBQcQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rn7Pxyeq3bl-WzzTWrBiI-ZBQcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:87:b9:9f:23:42:c3:b3:36:b2:63:82:fc:de:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=467ecfc727aaddb97e5b3cd35ab06223e64141c4
Validity
Not Before: Nov 11 09:00:53 2025 GMT
Not After : Nov 12 09:00:53 2025 GMT
Subject: CN=cf125896b8d093d1aa7ea913f119a334407380e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:35:0b:06:ba:4e:7a:74:d7:9a:e7:a8:01:fd:
b3:05:fd:e4:7e:d5:d3:c1:6c:17:f7:82:9a:b9:62:
6e:01:52:fb:46:ef:9f:e4:87:57:4d:db:8b:7b:2f:
be:27:d5:15:ef:54:de:13:bb:e8:37:a0:f2:6c:4d:
83:59:ed:6a:ed:49:02:24:d1:89:f4:1a:e0:78:88:
be:a7:bd:73:fa:f8:b2:44:ce:bb:f4:18:3c:4a:93:
e4:82:36:3f:41:d0:81:e5:f5:7b:4e:79:f6:64:d3:
ec:da:61:23:1f:8e:6c:1b:a5:2e:f9:85:9c:b3:36:
5a:3a:76:1d:23:7c:e2:16:fb:f9:2a:18:ee:77:88:
c3:67:5e:da:79:be:d9:50:54:d8:65:8c:34:e3:9e:
ac:54:e9:a2:48:41:d4:ce:c8:df:b5:82:e2:96:49:
8b:b7:90:d4:6a:87:12:18:18:65:6f:4b:c3:1f:78:
7b:2e:b6:94:b2:cc:9a:b1:70:fd:aa:69:eb:2f:dc:
4b:bb:e2:8a:70:05:ee:e3:46:80:46:ea:f0:1f:8e:
eb:26:ad:05:7c:7d:6b:b2:0e:ff:30:83:a5:45:15:
fe:5a:31:cf:c8:f3:ce:df:1f:4b:bb:b2:d1:e8:61:
1d:e6:e2:fa:14:8c:b1:db:13:1f:bc:4d:59:f2:fa:
fd:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:12:58:96:B8:D0:93:D1:AA:7E:A9:13:F1:19:A3:34:40:73:80:E3
X509v3 Authority Key Identifier:
keyid:46:7E:CF:C7:27:AA:DD:B9:7E:5B:3C:D3:5A:B0:62:23:E6:41:41:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rn7Pxyeq3bl-WzzTWrBiI-ZBQcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/b94f5f-4cca-49a1-9edb-904ae8b5f479/1/Rn7Pxyeq3bl-WzzTWrBiI-ZBQcQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/b94f5f-4cca-49a1-9edb-904ae8b5f479/1/Rn7Pxyeq3bl-WzzTWrBiI-ZBQcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:af:6c:0d:5b:89:bb:8a:19:fa:9b:50:ef:53:07:ba:d7:b6:
0b:ef:fe:8d:fe:1f:d5:2d:a9:bf:68:c6:fc:af:9d:23:a9:4f:
4d:f0:fb:19:ef:1b:53:ad:c9:66:3b:b5:13:a7:86:7b:3b:e5:
3b:15:9b:88:6d:6a:94:46:1e:7c:cd:c8:85:aa:84:7b:0c:3f:
44:12:89:f5:38:a4:ed:7c:48:80:7b:e0:0c:97:bc:99:f8:75:
5a:9f:f1:bd:61:24:84:fc:82:b5:3e:fd:3d:bb:7d:a7:15:10:
c4:2b:b3:44:87:fe:45:c9:79:f5:f2:33:f8:0d:b2:2d:e2:81:
20:3c:ef:c5:3f:12:c4:bf:97:27:89:1e:4f:4a:08:12:8c:06:
a9:fc:16:bf:21:f2:e3:b2:0a:e6:ec:97:9d:3e:40:36:c3:ef:
af:ba:bf:7a:de:1f:56:77:18:fe:cd:5d:08:29:9e:cb:e5:28:
9e:49:32:0c:24:f5:a0:ea:3f:11:21:60:d2:d5:94:4c:d3:5f:
2a:4f:05:33:c9:7a:d5:7b:17:96:bc:02:3f:64:aa:d1:5f:73:
c3:50:aa:1c:45:c6:32:b0:db:0f:15:87:3c:26:a0:9d:e6:ac:
38:87:d9:69:76:60:26:f7:a5:08:73:48:58:7f:42:d5:07:87:
6b:d7:4e:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:24:50 2025 by rpki-client