Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/7da5b4-4b9b-4c28-86c8-fe54170deea1/1/1-vVJwcCcEQk6NzO4MIrgRSzmJLo.mft
File: 1-vVJwcCcEQk6NzO4MIrgRSzmJLo.mft (raw, json)
Hash identifier: veCR0JpyUpzMyvAXuGGotlSggQwIEgb9TmheakzdgfE=
Subject key identifier: 87:91:A0:B0:7C:33:01:69:50:B8:10:1F:1C:0E:AF:48:94:F2:34:7B
Authority key identifier: FA:F5:49:C1:C0:9C:11:09:3A:37:33:B8:30:8A:E0:45:2C:E6:24:BA
Certificate issuer: /CN=faf549c1c09c11093a3733b8308ae0452ce624ba
Certificate serial: 019A72259FC6788FC32F63D29354E4925649
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-vVJwcCcEQk6NzO4MIrgRSzmJLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/7da5b4-4b9b-4c28-86c8-fe54170deea1/1/1-vVJwcCcEQk6NzO4MIrgRSzmJLo.mft
Manifest number: 171B
Signing time: Tue 11 Nov 2025 09:00:59 +0000
Manifest this update: Tue 11 Nov 2025 09:00:59 +0000
Manifest next update: Wed 12 Nov 2025 09:00:59 +0000
Files and hashes: 1: 1-vVJwcCcEQk6NzO4MIrgRSzmJLo.crl (hash: EoPeaIxtwBHZHRsdw6RL6xro7b7RGL905um2gfi94hc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/7da5b4-4b9b-4c28-86c8-fe54170deea1/1/1-vVJwcCcEQk6NzO4MIrgRSzmJLo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/7da5b4-4b9b-4c28-86c8-fe54170deea1/1/1-vVJwcCcEQk6NzO4MIrgRSzmJLo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-vVJwcCcEQk6NzO4MIrgRSzmJLo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:9f:c6:78:8f:c3:2f:63:d2:93:54:e4:92:56:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faf549c1c09c11093a3733b8308ae0452ce624ba
Validity
Not Before: Nov 11 09:00:59 2025 GMT
Not After : Nov 12 09:00:59 2025 GMT
Subject: CN=8791a0b07c33016950b8101f1c0eaf4894f2347b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:17:3c:cb:99:50:06:f3:96:a0:1e:48:62:b9:
69:9d:25:b7:2f:ad:a7:2f:8c:11:a0:a7:7f:12:5a:
ec:ee:a7:15:bf:f0:95:c6:46:80:ae:e5:7e:1a:cf:
42:12:35:e0:9e:72:81:df:0d:a4:3a:c8:f9:ce:42:
8b:c8:41:d3:c6:01:74:d8:46:0e:d1:32:70:d9:8f:
f1:b4:5d:96:47:bc:80:db:04:cc:a5:b6:a6:59:e9:
b4:28:d4:03:48:22:7b:27:29:63:03:27:a0:a7:1f:
da:d6:c9:cc:dc:82:a6:f6:ea:bb:e3:05:80:5a:6e:
25:40:26:1e:6d:eb:04:c1:8c:ad:c0:02:14:0c:22:
f2:37:fd:04:9d:ed:49:19:74:96:ae:6f:00:97:1d:
79:22:03:2f:a9:e5:cf:87:df:3a:88:dd:9a:0c:b9:
cd:19:54:2e:37:d4:27:ed:c4:98:0f:b1:44:1a:e5:
0f:8d:0a:18:eb:a6:ec:63:6a:35:6a:b4:6c:43:82:
d9:3b:3b:fb:9a:7f:0b:22:f5:3e:5d:9b:f1:7a:61:
ea:bd:94:c0:2f:68:53:78:ba:5b:38:89:4a:6b:c2:
bf:23:a4:45:4b:e6:c3:f1:1b:a7:5b:a6:88:7a:de:
e7:3c:f3:37:cf:48:38:61:ae:45:03:c0:81:b2:d8:
30:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:91:A0:B0:7C:33:01:69:50:B8:10:1F:1C:0E:AF:48:94:F2:34:7B
X509v3 Authority Key Identifier:
keyid:FA:F5:49:C1:C0:9C:11:09:3A:37:33:B8:30:8A:E0:45:2C:E6:24:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-vVJwcCcEQk6NzO4MIrgRSzmJLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/7da5b4-4b9b-4c28-86c8-fe54170deea1/1/1-vVJwcCcEQk6NzO4MIrgRSzmJLo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/7da5b4-4b9b-4c28-86c8-fe54170deea1/1/1-vVJwcCcEQk6NzO4MIrgRSzmJLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ce:95:59:d0:da:3a:28:d7:60:f8:57:dc:34:87:98:b3:9a:ce:
fd:65:9e:55:bc:dd:95:b1:58:89:24:1b:e7:31:28:f4:f0:a8:
0b:fa:9b:58:68:94:8c:31:87:a6:7e:d7:11:5d:3f:e5:73:b9:
e9:84:5f:99:96:26:a0:ed:38:75:42:f5:57:a3:0a:3d:d6:3a:
d0:82:d3:45:bc:c3:9b:7d:9b:0c:17:b8:d3:a1:94:c5:0a:df:
5c:30:63:19:17:34:e8:60:2b:5c:a4:08:c0:13:d7:93:8e:3c:
21:47:20:37:9d:df:f6:3d:ad:80:14:d1:64:d9:66:d4:6d:2c:
4d:37:0a:31:79:ec:09:6c:db:81:4e:6f:e5:1d:ba:7e:a8:0d:
63:97:1a:5d:55:83:21:c7:1b:11:cd:e9:05:00:dc:d8:6a:4f:
1b:82:db:19:a0:86:5c:24:b4:cd:b3:7f:eb:0e:11:35:0f:8f:
d5:9d:ad:05:d9:f4:f2:86:c5:62:54:7a:67:d4:95:fc:a1:47:
df:ff:14:71:63:fd:78:54:07:e9:1f:18:65:f9:c5:4c:fa:26:
25:4e:14:a1:dc:a8:d2:b8:f4:a5:9d:ef:7e:ee:90:41:17:1e:
73:df:cf:96:98:12:b6:b3:e0:6f:0d:5f:cf:66:c2:06:c5:2b:
2f:08:fb:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:26:45 2025 by rpki-client