Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/f64e2d-58f2-4fd7-8bd1-262db92ba638/1/C1D8sK0jatqJ5lvWKlHRhKaHu_w.mft
File: C1D8sK0jatqJ5lvWKlHRhKaHu_w.mft (raw, json)
Hash identifier: +M6NPH72yWZQtc3wAuV1v9f9f1AbHJzwPYtqcDgm+ns=
Subject key identifier: 76:3B:56:13:ED:C7:D6:80:28:4E:5B:38:42:F3:E2:E4:9A:89:7C:F8
Authority key identifier: 0B:50:FC:B0:AD:23:6A:DA:89:E6:5B:D6:2A:51:D1:84:A6:87:BB:FC
Certificate issuer: /CN=0b50fcb0ad236ada89e65bd62a51d184a687bbfc
Certificate serial: 019A71EED71B9EBACF84F3E36C59E6BC64F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C1D8sK0jatqJ5lvWKlHRhKaHu_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/f64e2d-58f2-4fd7-8bd1-262db92ba638/1/C1D8sK0jatqJ5lvWKlHRhKaHu_w.mft
Manifest number: 43
Signing time: Tue 11 Nov 2025 08:01:09 +0000
Manifest this update: Tue 11 Nov 2025 08:01:09 +0000
Manifest next update: Wed 12 Nov 2025 08:01:09 +0000
Files and hashes: 1: C1D8sK0jatqJ5lvWKlHRhKaHu_w.crl (hash: 5AuKRfFy8U3csdBmZEvvA0D/Za7S3+tR8KHegW1XBuA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/f64e2d-58f2-4fd7-8bd1-262db92ba638/1/C1D8sK0jatqJ5lvWKlHRhKaHu_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/f64e2d-58f2-4fd7-8bd1-262db92ba638/1/C1D8sK0jatqJ5lvWKlHRhKaHu_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/C1D8sK0jatqJ5lvWKlHRhKaHu_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:d7:1b:9e:ba:cf:84:f3:e3:6c:59:e6:bc:64:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b50fcb0ad236ada89e65bd62a51d184a687bbfc
Validity
Not Before: Nov 11 08:01:09 2025 GMT
Not After : Nov 12 08:01:09 2025 GMT
Subject: CN=763b5613edc7d680284e5b3842f3e2e49a897cf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:fd:81:91:a5:dd:c2:6e:f8:aa:36:4a:ee:e5:
d0:b0:15:5b:4b:1d:63:f3:a0:dd:a1:40:47:d6:3f:
af:2d:ad:d6:c9:f6:80:75:8f:f9:bd:58:5f:22:72:
69:14:4f:c9:2b:b2:35:38:5b:d6:59:d0:cc:d7:ad:
50:7f:8c:73:35:ec:2e:48:3b:6f:25:79:1b:40:b8:
6a:9c:a2:01:e3:22:c6:7f:aa:53:96:e0:71:59:c2:
3a:6c:12:a1:11:50:b8:a3:70:88:3a:c4:1e:c7:5d:
db:e6:e8:e1:a0:f1:05:22:92:c0:4d:3d:7a:15:5e:
c1:cb:56:6a:46:59:32:03:6b:43:2b:35:10:28:90:
30:44:1a:6f:99:7f:56:d9:9d:c6:4e:cf:52:42:49:
8e:08:29:ab:76:c6:95:93:d1:07:b5:67:9c:6a:87:
c5:49:82:6c:00:d7:76:c4:16:06:c4:42:c6:30:9e:
11:88:6f:9e:92:09:1b:52:60:a5:fe:b5:cb:fa:45:
a4:c1:ed:51:0f:d2:b1:84:24:48:11:c9:c7:ba:1e:
15:db:17:e0:b6:46:f9:bb:ca:5e:16:07:28:a3:c5:
f5:45:a8:07:e4:46:4e:d9:cd:9b:0e:0b:8d:28:20:
d8:7f:c1:dd:52:e2:50:98:76:9d:12:22:72:ee:3a:
fb:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:3B:56:13:ED:C7:D6:80:28:4E:5B:38:42:F3:E2:E4:9A:89:7C:F8
X509v3 Authority Key Identifier:
keyid:0B:50:FC:B0:AD:23:6A:DA:89:E6:5B:D6:2A:51:D1:84:A6:87:BB:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1D8sK0jatqJ5lvWKlHRhKaHu_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f64e2d-58f2-4fd7-8bd1-262db92ba638/1/C1D8sK0jatqJ5lvWKlHRhKaHu_w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f64e2d-58f2-4fd7-8bd1-262db92ba638/1/C1D8sK0jatqJ5lvWKlHRhKaHu_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:ab:ce:88:21:72:49:1a:58:52:44:4d:31:f7:a2:89:b6:6e:
33:38:f6:e9:34:e5:11:3f:7c:4d:b3:f2:20:6c:c8:f8:c4:31:
32:91:9e:ca:77:09:f4:2c:c9:b6:2d:db:7c:06:24:9a:ee:6d:
b9:8d:4a:02:1e:8d:1b:6b:17:97:79:94:11:28:f8:e2:4d:73:
12:29:0c:dd:07:d2:ab:13:2c:33:7f:42:34:1c:35:d5:3c:40:
62:d5:96:09:5c:fc:64:e8:43:51:bc:9e:9f:d3:68:ce:fe:49:
ee:29:1e:e8:89:2b:ff:73:7c:f7:2f:61:2a:90:9f:60:85:c2:
9a:66:87:2d:d0:7a:0f:21:3f:4d:78:54:7d:db:ad:98:64:80:
1e:de:2b:e3:29:76:8e:0a:c3:ce:7b:17:99:f8:9c:b7:90:e1:
53:19:49:25:fa:a5:27:b7:99:6f:a9:3a:91:ff:6d:1d:1f:28:
fc:b3:32:6e:80:01:c6:a6:2a:19:aa:34:9e:0c:a5:b8:bf:cf:
8c:ce:83:af:1d:82:e5:d1:81:f6:05:65:d4:7e:87:8b:e1:92:
81:ac:07:f0:02:3e:a1:73:98:da:f7:7a:7e:f3:79:90:b0:1a:
9c:5c:29:0f:5a:fa:38:67:e3:a7:88:43:aa:9c:10:b6:0a:ef:
8c:af:69:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:24:48 2025 by rpki-client