Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/94a264-ea29-491f-ac4c-62c0858344e8/1/c3eHzyqHDZGxE2n510WRlXYCgU4.mft
File: c3eHzyqHDZGxE2n510WRlXYCgU4.mft (raw, json)
Hash identifier: kYLR6nl6nym2jF58iPm/cttnU9bhp6pMWlvKdYIp2NE=
Subject key identifier: CD:1C:0F:05:34:64:AB:79:86:59:84:F5:28:55:FE:2E:6D:C0:F2:19
Authority key identifier: 73:77:87:CF:2A:87:0D:91:B1:13:69:F9:D7:45:91:95:76:02:81:4E
Certificate issuer: /CN=737787cf2a870d91b11369f9d74591957602814e
Certificate serial: 019A71B8701C82DC60CC4E4B5446F49532ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c3eHzyqHDZGxE2n510WRlXYCgU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/94a264-ea29-491f-ac4c-62c0858344e8/1/c3eHzyqHDZGxE2n510WRlXYCgU4.mft
Manifest number: 09E5
Signing time: Tue 11 Nov 2025 07:01:43 +0000
Manifest this update: Tue 11 Nov 2025 07:01:43 +0000
Manifest next update: Wed 12 Nov 2025 07:01:43 +0000
Files and hashes: 1: c3eHzyqHDZGxE2n510WRlXYCgU4.crl (hash: Ytvc/4gj9WXF/XMSB3K31nXGdgUmXCTPTDE1z8R373k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/94a264-ea29-491f-ac4c-62c0858344e8/1/c3eHzyqHDZGxE2n510WRlXYCgU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/94a264-ea29-491f-ac4c-62c0858344e8/1/c3eHzyqHDZGxE2n510WRlXYCgU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/c3eHzyqHDZGxE2n510WRlXYCgU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:70:1c:82:dc:60:cc:4e:4b:54:46:f4:95:32:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=737787cf2a870d91b11369f9d74591957602814e
Validity
Not Before: Nov 11 07:01:43 2025 GMT
Not After : Nov 12 07:01:43 2025 GMT
Subject: CN=cd1c0f053464ab79865984f52855fe2e6dc0f219
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:7a:56:c1:b5:28:30:3c:c6:9d:c7:c1:92:86:
3d:5c:30:17:44:a3:e5:40:dd:eb:7d:c2:ab:5a:47:
0f:5a:4b:d6:71:ab:8a:cc:ce:e9:07:2d:17:30:81:
97:c6:4c:21:40:66:a7:ee:49:f4:95:d4:ad:da:2c:
b3:2a:af:44:38:06:57:9b:76:a9:18:ea:fc:e3:8e:
8f:1a:6f:12:b8:53:88:16:3d:3d:75:e5:e1:51:6a:
d7:e0:f1:e9:63:1a:84:1e:96:31:40:9d:79:b4:21:
63:86:c1:11:f5:8d:0d:17:ee:a2:0c:4d:b1:7d:8e:
36:2a:59:43:2d:42:c8:19:3e:25:a7:58:1f:41:4b:
07:31:b6:e7:b5:c5:69:07:f7:79:e2:2a:ab:d9:37:
08:23:72:c4:cc:1c:08:07:5b:ec:cd:98:56:cf:b4:
b0:ab:44:ac:cd:c1:c8:ed:d3:9d:d3:6c:a6:80:a8:
43:67:e8:5f:c9:36:81:1e:d4:ff:51:5b:52:f2:38:
26:e2:44:fe:b4:b3:e8:10:82:98:d4:0a:78:63:8d:
88:1c:5e:4c:f5:98:b5:06:cb:1e:b8:f4:27:a8:55:
b9:6e:5d:43:d4:84:d5:f8:fc:9a:7a:90:0b:c6:7c:
62:9e:8a:83:85:df:72:7a:2f:b0:8b:a1:f5:d9:29:
44:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:1C:0F:05:34:64:AB:79:86:59:84:F5:28:55:FE:2E:6D:C0:F2:19
X509v3 Authority Key Identifier:
keyid:73:77:87:CF:2A:87:0D:91:B1:13:69:F9:D7:45:91:95:76:02:81:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3eHzyqHDZGxE2n510WRlXYCgU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/94a264-ea29-491f-ac4c-62c0858344e8/1/c3eHzyqHDZGxE2n510WRlXYCgU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/94a264-ea29-491f-ac4c-62c0858344e8/1/c3eHzyqHDZGxE2n510WRlXYCgU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:54:d4:62:f3:70:f8:e6:6c:af:db:e6:8a:b8:2d:d7:b9:64:
3e:63:6f:a4:9d:9b:0e:de:5f:d0:ab:d1:a4:2a:bf:33:a7:de:
2c:dd:77:54:a0:a5:e4:f3:33:b8:0b:7c:f6:4a:81:77:c1:13:
7d:59:5f:60:31:ee:36:1d:d5:cf:63:17:97:de:f9:d1:60:e9:
b4:6e:d4:0d:71:0e:66:f7:40:6c:fe:0f:b7:9e:d2:7f:3d:d1:
08:93:3f:e7:d5:9a:93:a8:9d:cc:4b:51:1e:e7:ce:d6:c0:9a:
a8:0f:1a:b9:ee:f7:b2:28:4c:02:5a:7d:4b:b3:8c:a4:73:46:
79:05:5c:0a:f5:04:a3:a7:cc:62:f1:d9:52:0f:3f:4f:58:11:
ea:e1:7c:b8:33:60:ed:92:04:d2:86:d3:f5:86:e2:e8:bb:a3:
36:df:12:2e:76:85:74:f8:c7:4c:c3:aa:35:25:89:08:06:42:
96:e2:4b:d9:40:ec:7a:99:7a:78:b7:33:4f:b9:1b:17:88:ea:
6b:08:04:d8:d0:bc:2c:39:31:99:c0:cd:39:94:21:9b:4e:18:
6e:88:da:7d:f5:a7:d6:ec:3f:ea:4f:18:12:dc:a9:2f:7c:7b:
98:cc:f9:41:d0:7a:45:a9:e6:8a:1d:0f:c6:62:e3:09:8c:4f:
89:53:e5:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:44:47 2025 by rpki-client