Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/d9ec67-9338-43cd-9d05-38a5c2a6554a/1/C2fboIcH_kC9AC6XrjCEhjKRXbg.mft
File: C2fboIcH_kC9AC6XrjCEhjKRXbg.mft (raw, json)
Hash identifier: m9kiNSM7tRnF4khvG5xHQXvW2G0diYl3gpwzEjE5CLc=
Subject key identifier: 54:E0:F4:7C:2F:C2:49:BF:57:2A:9A:2A:99:6C:DD:8B:2D:2F:9F:E3
Authority key identifier: 0B:67:DB:A0:87:07:FE:40:BD:00:2E:97:AE:30:84:86:32:91:5D:B8
Certificate issuer: /CN=0b67dba08707fe40bd002e97ae30848632915db8
Certificate serial: 019A71EEDCB8D04619F7ABC087444095EEA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C2fboIcH_kC9AC6XrjCEhjKRXbg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/d9ec67-9338-43cd-9d05-38a5c2a6554a/1/C2fboIcH_kC9AC6XrjCEhjKRXbg.mft
Manifest number: 171B
Signing time: Tue 11 Nov 2025 08:01:10 +0000
Manifest this update: Tue 11 Nov 2025 08:01:10 +0000
Manifest next update: Wed 12 Nov 2025 08:01:10 +0000
Files and hashes: 1: C2fboIcH_kC9AC6XrjCEhjKRXbg.crl (hash: 9uD1SMUOsjZlmu9OsC7UJXhCNYMXuaNrf4gqmC86vDg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/d9ec67-9338-43cd-9d05-38a5c2a6554a/1/C2fboIcH_kC9AC6XrjCEhjKRXbg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/d9ec67-9338-43cd-9d05-38a5c2a6554a/1/C2fboIcH_kC9AC6XrjCEhjKRXbg.mft
rsync://rpki.ripe.net/repository/DEFAULT/C2fboIcH_kC9AC6XrjCEhjKRXbg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:dc:b8:d0:46:19:f7:ab:c0:87:44:40:95:ee:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b67dba08707fe40bd002e97ae30848632915db8
Validity
Not Before: Nov 11 08:01:10 2025 GMT
Not After : Nov 12 08:01:10 2025 GMT
Subject: CN=54e0f47c2fc249bf572a9a2a996cdd8b2d2f9fe3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:54:90:3d:dc:63:b1:c2:f9:8a:84:fa:d3:17:
90:f5:7f:35:f8:05:6a:cf:93:92:41:9c:37:d6:fa:
8e:6c:82:17:76:2c:0a:3b:c4:59:57:e3:93:37:e4:
08:4f:f7:15:5d:bd:4e:2c:83:be:8b:ba:86:2f:a6:
99:7e:0c:1c:b2:a1:91:8e:5b:b0:09:12:e7:b5:75:
f8:b9:6e:11:cf:d0:40:ba:2e:f7:44:6b:d5:d9:b6:
19:bf:12:e5:ed:74:93:b1:ee:bc:0b:3b:a8:0a:f3:
62:23:39:05:d5:bd:b8:e3:06:f5:cb:bb:4a:a3:42:
07:97:9f:5d:61:6d:ed:2e:cb:c8:dc:c8:fa:60:07:
a1:20:75:f0:4c:48:80:92:65:1f:b6:d9:8f:e4:e6:
34:e0:d1:9a:84:08:bf:99:c3:c2:0c:6c:0b:29:c4:
fb:99:42:e4:06:ee:d2:d7:27:10:69:6c:b1:b2:d0:
14:b9:7b:dc:ef:65:40:42:c8:ce:f6:fc:7c:c9:ae:
85:a9:3f:d4:e5:4e:71:aa:2b:16:e5:3d:d8:aa:74:
f3:a9:04:70:17:2b:ad:77:18:03:60:9d:fb:4d:7d:
78:da:2a:d7:ad:ce:8d:71:b3:a2:57:26:7a:55:18:
3b:f5:96:e3:d7:74:d6:ab:12:76:31:07:86:d2:ff:
af:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:E0:F4:7C:2F:C2:49:BF:57:2A:9A:2A:99:6C:DD:8B:2D:2F:9F:E3
X509v3 Authority Key Identifier:
keyid:0B:67:DB:A0:87:07:FE:40:BD:00:2E:97:AE:30:84:86:32:91:5D:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C2fboIcH_kC9AC6XrjCEhjKRXbg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/d9ec67-9338-43cd-9d05-38a5c2a6554a/1/C2fboIcH_kC9AC6XrjCEhjKRXbg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/d9ec67-9338-43cd-9d05-38a5c2a6554a/1/C2fboIcH_kC9AC6XrjCEhjKRXbg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:01:7d:fa:73:82:08:67:7e:b6:6f:68:a2:83:1d:93:98:d7:
1a:89:8e:7a:86:c2:21:51:d2:ec:3a:40:7d:63:09:a6:c2:38:
b2:29:cb:94:06:48:7b:be:43:6c:aa:b7:f8:2f:43:b2:0d:5c:
1d:6d:28:ab:29:42:de:06:be:59:d6:31:0d:24:c6:94:ee:c8:
ba:96:5f:33:0b:ed:1d:a3:85:e0:6e:8c:b8:67:30:19:72:da:
60:00:c3:c0:1d:52:26:18:b7:c1:d5:80:da:43:2c:20:89:5d:
e7:3a:d9:07:c6:7c:01:3e:d4:cb:64:0d:d8:f1:ab:7d:e3:58:
7b:35:8d:c4:a2:2f:97:bd:bf:69:55:48:43:57:8b:85:4d:44:
ba:3d:80:aa:74:8e:dd:a6:84:f3:35:16:d5:91:64:cc:5c:5e:
6d:fd:ff:92:4e:71:cf:1e:6a:7c:f6:cd:28:18:03:bc:31:ae:
4c:41:09:d7:9e:79:60:c5:a9:e9:9c:4a:e8:49:7b:1c:a3:09:
6c:77:63:00:36:72:8b:ee:db:fa:0d:4e:1c:cf:22:04:1d:fb:
d2:5a:5d:4d:4e:d7:b9:74:63:1c:e4:68:5d:e8:fd:1f:9c:56:
eb:d0:6b:38:41:04:b3:1c:50:43:94:09:b2:03:37:af:b4:6e:
e7:84:38:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:11 2025 by rpki-client