Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/65d6a2-a22c-4e9e-acdf-8e0c6ff00b78/1/RNC2iz7BebNdz_XEZdwtBGGZJ24.mft
File: RNC2iz7BebNdz_XEZdwtBGGZJ24.mft (raw, json)
Hash identifier: GUYzg5HERI5shpGkXxdfjpTeLrJCXdcSlPHGMOb0LHc=
Subject key identifier: 99:B6:8C:CD:C4:F3:7C:B5:E1:52:FA:58:31:8B:FC:FC:C1:33:C5:E0
Authority key identifier: 44:D0:B6:8B:3E:C1:79:B3:5D:CF:F5:C4:65:DC:2D:04:61:99:27:6E
Certificate issuer: /CN=44d0b68b3ec179b35dcff5c465dc2d046199276e
Certificate serial: 019A7226319CE5C52B8CDE20110FD5413212
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RNC2iz7BebNdz_XEZdwtBGGZJ24.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/65d6a2-a22c-4e9e-acdf-8e0c6ff00b78/1/RNC2iz7BebNdz_XEZdwtBGGZJ24.mft
Manifest number: 171C
Signing time: Tue 11 Nov 2025 09:01:36 +0000
Manifest this update: Tue 11 Nov 2025 09:01:36 +0000
Manifest next update: Wed 12 Nov 2025 09:01:36 +0000
Files and hashes: 1: RNC2iz7BebNdz_XEZdwtBGGZJ24.crl (hash: /0xOS5uruxHOlpozN7ApXWWuHF940XvBTGumUa/YFXs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/65d6a2-a22c-4e9e-acdf-8e0c6ff00b78/1/RNC2iz7BebNdz_XEZdwtBGGZJ24.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/65d6a2-a22c-4e9e-acdf-8e0c6ff00b78/1/RNC2iz7BebNdz_XEZdwtBGGZJ24.mft
rsync://rpki.ripe.net/repository/DEFAULT/RNC2iz7BebNdz_XEZdwtBGGZJ24.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:31:9c:e5:c5:2b:8c:de:20:11:0f:d5:41:32:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44d0b68b3ec179b35dcff5c465dc2d046199276e
Validity
Not Before: Nov 11 09:01:36 2025 GMT
Not After : Nov 12 09:01:36 2025 GMT
Subject: CN=99b68ccdc4f37cb5e152fa58318bfcfcc133c5e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:ee:6c:d9:19:5d:c1:c5:ea:a6:33:24:bb:43:
22:d1:e4:d1:e7:69:84:2a:a9:54:98:69:56:27:bc:
dc:27:af:88:15:be:03:01:87:9b:60:be:ec:00:96:
ad:f5:ab:37:70:9b:ad:b0:24:81:10:f3:a2:f8:d9:
71:2c:e2:64:1a:aa:1c:04:28:8d:c8:97:a2:d1:ad:
9a:5a:bd:d7:ee:51:84:91:df:c2:77:f3:7f:ac:da:
c0:e6:c3:d6:ec:9a:d4:a1:5a:a9:2b:d1:da:30:e9:
5e:88:f4:95:ed:56:f7:bd:e9:dd:ba:25:6a:d1:fa:
fb:d1:08:8b:28:65:57:71:28:32:90:1d:5d:b4:60:
f9:71:fa:5f:ee:4f:3e:87:32:43:8b:83:f9:f1:d1:
a0:bb:0b:d2:1e:c1:25:b2:af:16:d7:11:54:0e:f0:
91:ae:ef:7c:95:87:a0:93:6d:86:2a:86:2a:fb:73:
a2:70:87:f0:6c:fd:75:77:d4:bf:00:6a:dc:de:bf:
73:30:cf:db:6e:d6:9f:c6:bd:f0:07:0b:a6:de:d1:
17:0d:d1:8d:00:0f:01:81:48:19:5c:24:6b:d4:76:
ca:c3:59:39:da:52:1e:2a:d6:4d:43:4d:61:f1:71:
a1:f2:34:b0:10:00:e3:e3:43:ce:c4:21:64:69:bb:
a3:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:B6:8C:CD:C4:F3:7C:B5:E1:52:FA:58:31:8B:FC:FC:C1:33:C5:E0
X509v3 Authority Key Identifier:
keyid:44:D0:B6:8B:3E:C1:79:B3:5D:CF:F5:C4:65:DC:2D:04:61:99:27:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RNC2iz7BebNdz_XEZdwtBGGZJ24.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/65d6a2-a22c-4e9e-acdf-8e0c6ff00b78/1/RNC2iz7BebNdz_XEZdwtBGGZJ24.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/65d6a2-a22c-4e9e-acdf-8e0c6ff00b78/1/RNC2iz7BebNdz_XEZdwtBGGZJ24.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:6e:8c:b2:98:2e:f3:ee:82:72:c6:9e:b6:68:17:fc:82:18:
f0:0b:f6:14:5e:00:dc:36:8c:42:0d:77:8a:9c:5c:c7:7a:8a:
b2:e4:ee:5b:49:d9:af:a1:08:18:cb:97:ed:1e:c9:95:30:ed:
16:c4:fe:df:94:df:4e:c6:a3:e5:85:f2:f9:21:1a:88:91:be:
7f:94:f1:52:06:d7:f8:e9:27:21:2c:8c:c5:11:6e:cb:1c:cf:
88:58:f8:5b:d8:58:a7:55:24:79:df:3e:48:9e:ed:dc:90:18:
e9:f3:67:80:d4:76:e6:cd:38:5f:63:43:3f:3d:ee:9f:36:96:
ba:4a:b1:a7:82:da:98:d2:7d:1e:d3:70:8f:a3:3a:ea:64:2a:
aa:84:f6:1a:8c:65:71:8d:4f:82:ce:13:a3:60:ad:e3:c9:79:
8e:d7:f1:71:4b:56:a4:a1:cb:3b:9b:4f:ea:2e:81:53:7e:ac:
7d:0b:6e:e0:1e:e6:5c:ff:f8:ea:f3:4e:82:77:de:ac:6c:e5:
f2:5c:eb:ea:6a:fc:ce:22:fc:38:54:6a:64:95:2a:fb:06:e6:
ec:09:70:b6:86:3b:26:b5:2b:41:7a:73:5b:5c:19:9f:82:62:
02:ef:da:b1:20:ef:20:e1:cf:0c:2b:70:f4:86:5f:c7:23:fa:
5b:bb:c0:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:16:44 2025 by rpki-client