Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/311aef-3bfc-43e9-955c-9b0b3f024829/1/Rc2B9JhmGA_L3Tt3XnnWGb_bV-Y.mft
File: Rc2B9JhmGA_L3Tt3XnnWGb_bV-Y.mft (raw, json)
Hash identifier: AeUEurcYiOszBKw7PDr4iNZd8U0BRb3tw8/cQOagFvQ=
Subject key identifier: 74:5B:73:7B:A0:9E:49:B0:C7:BD:08:A7:63:6F:A7:0B:DF:9D:28:61
Authority key identifier: 45:CD:81:F4:98:66:18:0F:CB:DD:3B:77:5E:79:D6:19:BF:DB:57:E6
Certificate issuer: /CN=45cd81f49866180fcbdd3b775e79d619bfdb57e6
Certificate serial: 019A71B90F321FF300A327C2A5A798653C3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rc2B9JhmGA_L3Tt3XnnWGb_bV-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/311aef-3bfc-43e9-955c-9b0b3f024829/1/Rc2B9JhmGA_L3Tt3XnnWGb_bV-Y.mft
Manifest number: 1153
Signing time: Tue 11 Nov 2025 07:02:24 +0000
Manifest this update: Tue 11 Nov 2025 07:02:24 +0000
Manifest next update: Wed 12 Nov 2025 07:02:24 +0000
Files and hashes: 1: Rc2B9JhmGA_L3Tt3XnnWGb_bV-Y.crl (hash: iFt+McxiDuJ7CjXEgcwjszxAnJo6rWFwvE48EjbNnLE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/311aef-3bfc-43e9-955c-9b0b3f024829/1/Rc2B9JhmGA_L3Tt3XnnWGb_bV-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/311aef-3bfc-43e9-955c-9b0b3f024829/1/Rc2B9JhmGA_L3Tt3XnnWGb_bV-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rc2B9JhmGA_L3Tt3XnnWGb_bV-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:0f:32:1f:f3:00:a3:27:c2:a5:a7:98:65:3c:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45cd81f49866180fcbdd3b775e79d619bfdb57e6
Validity
Not Before: Nov 11 07:02:24 2025 GMT
Not After : Nov 12 07:02:24 2025 GMT
Subject: CN=745b737ba09e49b0c7bd08a7636fa70bdf9d2861
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e4:0e:31:7f:ca:9a:79:7a:6c:83:35:a6:f4:
78:62:91:d2:b6:13:9a:d5:ea:58:9a:7e:4e:b1:c6:
bb:84:3d:16:3f:7a:f7:cd:18:1a:20:eb:ef:9b:40:
2f:aa:e8:bb:7e:db:92:74:3d:1c:fb:0f:1a:e8:10:
56:53:93:bc:c8:70:8b:a7:6e:f8:92:4f:52:19:ef:
7c:43:50:3c:5e:a9:b1:9f:2d:2c:b7:cd:ab:7f:bb:
02:5a:b5:23:ad:c8:c1:3c:47:ac:d6:5e:1f:7c:e3:
07:34:7a:bc:f7:db:6f:3a:04:66:1d:31:89:cb:de:
8d:38:7f:5e:24:6e:65:15:e7:7c:ed:c5:a7:cc:07:
3c:44:47:c0:6e:ce:f0:4f:33:32:83:0f:8a:2b:70:
fa:98:b0:37:4a:e3:15:3c:c9:78:19:eb:8d:43:e2:
e6:c5:fb:e6:6f:e4:1e:59:cb:67:0b:14:c9:4c:f5:
37:09:5e:5c:c4:71:2b:0c:43:0f:04:04:9f:f3:a6:
03:9e:09:cf:a9:3a:50:4e:84:07:08:94:35:db:ed:
b6:90:13:13:30:9b:99:85:81:d4:c6:d3:40:28:c8:
12:aa:8f:aa:f7:88:57:f0:b6:3f:70:9c:36:4e:01:
b3:ca:97:76:f2:c0:6a:ed:b9:f1:19:74:18:95:e8:
c1:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:5B:73:7B:A0:9E:49:B0:C7:BD:08:A7:63:6F:A7:0B:DF:9D:28:61
X509v3 Authority Key Identifier:
keyid:45:CD:81:F4:98:66:18:0F:CB:DD:3B:77:5E:79:D6:19:BF:DB:57:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rc2B9JhmGA_L3Tt3XnnWGb_bV-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/311aef-3bfc-43e9-955c-9b0b3f024829/1/Rc2B9JhmGA_L3Tt3XnnWGb_bV-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/311aef-3bfc-43e9-955c-9b0b3f024829/1/Rc2B9JhmGA_L3Tt3XnnWGb_bV-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
df:38:c7:c2:49:c2:e8:e7:89:25:61:0d:b8:a3:14:0c:a5:5f:
3f:9b:0b:74:12:e5:0a:12:06:a3:bd:02:c4:32:0c:6a:7b:48:
6f:f9:17:7e:61:a5:eb:66:c7:11:af:85:88:e7:ce:87:00:ec:
e3:ac:f1:bf:54:39:35:66:98:10:43:48:b4:91:93:ce:73:5e:
3d:16:f7:ea:36:1c:bc:dc:40:d7:42:2c:3e:ab:05:e2:ab:59:
91:94:53:88:1d:09:37:8f:fb:b9:5f:aa:d7:14:94:07:3c:20:
e7:8c:f5:09:42:b0:54:96:ed:d4:79:cd:65:cd:1e:32:46:02:
9e:fe:4d:41:ec:f1:8b:cf:7e:6a:93:11:f3:28:ba:ae:5d:6f:
3a:b1:7a:9a:33:28:30:e3:b2:22:4d:2b:4b:01:a9:21:f5:21:
b9:8b:6c:a1:de:1d:de:e6:79:03:bc:3e:84:37:e6:b0:0e:22:
1b:36:b9:16:55:65:18:aa:44:79:e3:ef:e5:7b:12:70:24:d4:
f1:7a:e7:49:9d:b7:37:61:9a:a4:b5:11:d8:3c:88:2b:4f:5c:
10:65:7a:fc:50:b5:9b:d3:b5:c5:a8:fb:17:8c:be:48:db:6d:
50:07:db:a5:3c:15:3b:fc:a3:82:1d:9b:75:80:33:d4:ea:41:
d6:1a:7a:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:47:50 2025 by rpki-client