Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/e4a668-fbd6-4553-ae9f-0bbb2381ba88/1/69xd5v5ftQVVoFyXxbDdR369C_U.mft
File: 69xd5v5ftQVVoFyXxbDdR369C_U.mft (raw, json)
Hash identifier: CNR+Y3xmvT0CpCkm2gB2GBbyIgP6Pg1oY2EjzRQuj2o=
Subject key identifier: AE:15:5B:F6:55:E8:59:DD:D9:C4:7F:F6:31:05:AB:65:3B:DC:E2:B3
Authority key identifier: EB:DC:5D:E6:FE:5F:B5:05:55:A0:5C:97:C5:B0:DD:47:7E:BD:0B:F5
Certificate issuer: /CN=ebdc5de6fe5fb50555a05c97c5b0dd477ebd0bf5
Certificate serial: 019A73A7E0CC57F3A6646D4F509A72D1D068
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/69xd5v5ftQVVoFyXxbDdR369C_U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/e4a668-fbd6-4553-ae9f-0bbb2381ba88/1/69xd5v5ftQVVoFyXxbDdR369C_U.mft
Manifest number: 171B
Signing time: Tue 11 Nov 2025 16:02:53 +0000
Manifest this update: Tue 11 Nov 2025 16:02:53 +0000
Manifest next update: Wed 12 Nov 2025 16:02:53 +0000
Files and hashes: 1: 69xd5v5ftQVVoFyXxbDdR369C_U.crl (hash: 6uZS9vF6DmUXNrUgi9eVU1Y21rsQ9ZWm+y1Hc6jDtPk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/e4a668-fbd6-4553-ae9f-0bbb2381ba88/1/69xd5v5ftQVVoFyXxbDdR369C_U.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/e4a668-fbd6-4553-ae9f-0bbb2381ba88/1/69xd5v5ftQVVoFyXxbDdR369C_U.mft
rsync://rpki.ripe.net/repository/DEFAULT/69xd5v5ftQVVoFyXxbDdR369C_U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:a7:e0:cc:57:f3:a6:64:6d:4f:50:9a:72:d1:d0:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebdc5de6fe5fb50555a05c97c5b0dd477ebd0bf5
Validity
Not Before: Nov 11 16:02:53 2025 GMT
Not After : Nov 12 16:02:53 2025 GMT
Subject: CN=ae155bf655e859ddd9c47ff63105ab653bdce2b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ad:29:69:e5:ec:f3:17:51:e7:17:85:77:96:
7c:6f:49:24:71:76:f8:54:8a:db:55:d3:41:a3:71:
d5:2b:a0:a0:8c:e1:7d:c0:73:11:55:e6:0d:02:e8:
59:fc:21:89:8a:fb:b4:ae:c4:04:c1:5d:c1:bc:42:
ec:5b:ac:76:31:07:a2:28:33:2a:5b:b7:9e:5a:cc:
ff:ee:90:0c:b5:5e:f3:f3:4a:f1:8a:54:b3:82:90:
11:f2:0d:6d:92:8d:f9:7a:58:c3:cb:d3:61:97:8d:
a1:19:08:e4:55:c4:75:ca:29:66:82:bb:20:12:34:
96:d9:85:1e:7d:4e:ac:04:03:3c:8c:cc:f3:e4:7e:
63:81:90:05:dd:88:9e:65:69:d2:b4:80:b8:eb:3e:
25:d3:18:c4:8a:af:76:bf:47:0c:0b:f4:a3:f0:a4:
50:a2:f0:e5:ec:47:66:e9:d9:d4:61:72:37:d7:8e:
61:5c:d5:74:32:94:d0:4c:1a:9c:40:3c:38:74:de:
e6:6b:bd:ad:f1:6c:c2:63:dd:f6:38:97:4d:2f:16:
9b:5a:3f:05:9d:83:74:42:59:9d:fb:5d:d4:fd:9a:
1b:34:b4:09:b4:8f:27:08:f8:d0:42:be:7e:c7:82:
bc:b0:07:77:fb:85:e5:48:ac:0c:af:70:46:cc:19:
d0:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:15:5B:F6:55:E8:59:DD:D9:C4:7F:F6:31:05:AB:65:3B:DC:E2:B3
X509v3 Authority Key Identifier:
keyid:EB:DC:5D:E6:FE:5F:B5:05:55:A0:5C:97:C5:B0:DD:47:7E:BD:0B:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/69xd5v5ftQVVoFyXxbDdR369C_U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/e4a668-fbd6-4553-ae9f-0bbb2381ba88/1/69xd5v5ftQVVoFyXxbDdR369C_U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/e4a668-fbd6-4553-ae9f-0bbb2381ba88/1/69xd5v5ftQVVoFyXxbDdR369C_U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:12:bd:c6:98:da:f4:9c:74:8f:5b:a4:6e:3c:fd:51:fd:9b:
81:74:0b:e7:75:01:e2:13:5d:d5:aa:9d:a5:b3:d6:07:32:7d:
60:07:7b:3d:a5:b2:41:93:83:93:f0:46:d9:dd:d5:98:39:54:
5d:60:2d:04:9a:25:52:e8:90:bf:95:26:ad:99:21:78:98:5a:
ea:4e:41:af:92:ec:fb:bc:51:54:b1:01:fd:97:8e:f1:70:27:
b4:ad:54:02:66:a4:0a:e3:c4:24:10:6d:f9:b3:87:f6:1f:6d:
23:b1:2d:c3:dd:12:72:c3:9c:90:22:fd:a3:3f:c5:77:e5:00:
a6:18:ef:26:39:8b:d8:7f:cc:28:30:ff:41:23:1d:61:46:29:
1a:e6:7c:d3:38:61:dd:e4:d4:63:be:79:3f:d7:ac:08:b2:c0:
82:81:89:c9:b1:60:9b:0d:b5:a8:42:21:e2:f8:c9:2a:59:eb:
00:f3:46:1d:b0:88:85:a1:03:3a:f7:d8:50:df:dd:0e:84:92:
4e:eb:9d:7e:ed:ca:9c:b9:e3:9c:e4:15:9c:2b:45:63:07:4b:
f2:8e:67:eb:f1:c0:fa:49:72:7d:ee:d9:76:1b:8b:b5:2b:d1:
bd:37:4f:78:d8:07:68:c5:5e:b2:85:9a:89:81:1f:09:bd:b0:
79:a7:e1:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 18:39:19 2025 by rpki-client