Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/9f068a-17f4-4311-8bbc-234b322a0cfe/1/o_60EOB9CI-2UbkTdJuBJX47mVI.mft
File: o_60EOB9CI-2UbkTdJuBJX47mVI.mft (raw, json)
Hash identifier: fCz/PF//IpaHNRjtgB3caiLZT2Fd3Rdxjv/sCgIFryI=
Subject key identifier: E3:D6:95:99:CB:C3:73:6D:F3:B6:95:DC:33:C3:C5:43:E8:41:D0:6A
Authority key identifier: A3:FE:B4:10:E0:7D:08:8F:B6:51:B9:13:74:9B:81:25:7E:3B:99:52
Certificate issuer: /CN=a3feb410e07d088fb651b913749b81257e3b9952
Certificate serial: 019A71B8188DF5095CD15B5D695A75D4F022
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o_60EOB9CI-2UbkTdJuBJX47mVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/9f068a-17f4-4311-8bbc-234b322a0cfe/1/o_60EOB9CI-2UbkTdJuBJX47mVI.mft
Manifest number: 1169
Signing time: Tue 11 Nov 2025 07:01:21 +0000
Manifest this update: Tue 11 Nov 2025 07:01:21 +0000
Manifest next update: Wed 12 Nov 2025 07:01:21 +0000
Files and hashes: 1: o_60EOB9CI-2UbkTdJuBJX47mVI.crl (hash: FXqM0CG5YG77Y3dk37l8k/CV/t/wAB8ybstO7mml+XI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/9f068a-17f4-4311-8bbc-234b322a0cfe/1/o_60EOB9CI-2UbkTdJuBJX47mVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/9f068a-17f4-4311-8bbc-234b322a0cfe/1/o_60EOB9CI-2UbkTdJuBJX47mVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/o_60EOB9CI-2UbkTdJuBJX47mVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:18:8d:f5:09:5c:d1:5b:5d:69:5a:75:d4:f0:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3feb410e07d088fb651b913749b81257e3b9952
Validity
Not Before: Nov 11 07:01:21 2025 GMT
Not After : Nov 12 07:01:21 2025 GMT
Subject: CN=e3d69599cbc3736df3b695dc33c3c543e841d06a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c8:3d:bd:8d:89:3e:a5:04:fc:d9:a1:aa:d7:
0c:c0:91:be:16:f7:19:2b:36:9b:e8:fc:ba:ed:03:
1f:89:27:a7:b1:45:c3:bf:dc:24:c8:7e:68:d2:9a:
91:ad:b9:d9:4a:54:02:5e:f7:1c:59:bb:14:8e:d6:
c9:cf:3c:5c:80:6d:41:60:6a:49:37:0f:30:0b:96:
53:cc:78:3b:5d:5c:0a:9a:ec:65:f1:a0:a1:38:9c:
e0:85:52:a3:52:1b:cf:5e:e0:82:a6:9c:10:bd:c0:
88:5c:6f:d9:ef:53:36:b0:90:7a:70:01:7e:98:60:
af:ff:c6:3c:97:f9:25:1c:41:11:88:95:b6:98:0f:
1d:17:f6:76:50:32:d8:ae:33:b7:ca:fe:1b:ee:dd:
d1:56:e4:b2:ff:77:9e:b0:af:f4:d4:e4:ee:55:f7:
15:09:1b:d7:61:42:01:61:39:fd:7f:02:8d:6f:65:
c8:c4:32:56:21:b9:e9:ff:fb:04:09:19:13:ae:fe:
39:b7:ae:b3:f0:78:45:17:80:95:81:9c:bc:5b:2a:
b7:66:bc:a1:f6:c8:aa:a8:ed:0c:c1:fc:aa:2f:b6:
69:de:b5:4f:44:9e:f1:56:95:98:b6:43:a0:a5:31:
18:52:a4:e0:ca:72:0c:25:79:ba:e5:26:f9:78:dc:
cd:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:D6:95:99:CB:C3:73:6D:F3:B6:95:DC:33:C3:C5:43:E8:41:D0:6A
X509v3 Authority Key Identifier:
keyid:A3:FE:B4:10:E0:7D:08:8F:B6:51:B9:13:74:9B:81:25:7E:3B:99:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o_60EOB9CI-2UbkTdJuBJX47mVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/9f068a-17f4-4311-8bbc-234b322a0cfe/1/o_60EOB9CI-2UbkTdJuBJX47mVI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/9f068a-17f4-4311-8bbc-234b322a0cfe/1/o_60EOB9CI-2UbkTdJuBJX47mVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:cb:76:92:52:22:b8:84:62:26:2e:6f:e9:d1:97:65:82:6f:
09:7b:41:41:69:52:0a:65:85:0d:2c:04:ad:08:b6:45:d3:67:
8a:44:20:2a:ae:a3:88:de:3b:af:4d:8c:85:bb:b4:c3:c3:85:
2b:d1:64:6a:cc:97:b5:31:12:1d:e7:5b:07:5b:4c:71:9f:1a:
2f:ae:31:90:df:58:36:d6:02:fe:e9:44:92:d8:94:72:f4:25:
20:28:1d:a2:b3:52:63:8f:e2:b2:84:2a:e7:0a:79:4f:92:ac:
51:a6:37:33:63:30:c7:db:95:cd:9d:be:f4:a5:61:ed:1c:e5:
65:8c:db:99:c5:f4:8c:5c:54:f8:61:05:6a:0d:90:36:98:8b:
9b:fc:aa:5e:fa:90:ce:83:38:9e:d5:b8:6f:81:6f:6e:9c:d8:
a6:e6:bb:bc:95:d2:b3:f0:17:65:59:c1:1a:bb:5c:a2:cf:78:
e2:29:c0:0e:a7:f8:b9:31:20:5a:89:f6:45:cc:45:31:c7:2d:
c2:98:30:31:f6:4c:86:99:9a:57:30:a4:ef:50:8f:8d:d5:02:
50:4d:92:19:19:ab:bb:4c:e9:ab:f4:88:2f:60:12:63:14:64:
e8:3f:a6:1f:03:e4:af:6b:81:3a:65:39:63:f0:86:24:f6:c9:
6f:43:01:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:41:47 2025 by rpki-client