Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/c85bfa-c070-4de8-8444-82977062b947/1/Vz6UxDzTSjuDpL2Kp79K4yRubak.mft
File: Vz6UxDzTSjuDpL2Kp79K4yRubak.mft (raw, json)
Hash identifier: PsSmQRB/aGxRWDjI6JQ3TwU1nTiq7Xzft50ffvXbSYU=
Subject key identifier: 4A:2A:77:64:F2:94:18:21:A8:92:45:7B:BB:58:FA:A1:42:FE:9E:E5
Authority key identifier: 57:3E:94:C4:3C:D3:4A:3B:83:A4:BD:8A:A7:BF:4A:E3:24:6E:6D:A9
Certificate issuer: /CN=573e94c43cd34a3b83a4bd8aa7bf4ae3246e6da9
Certificate serial: 019A725C62E59877CBCFB6EE20A397EDC817
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vz6UxDzTSjuDpL2Kp79K4yRubak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/c85bfa-c070-4de8-8444-82977062b947/1/Vz6UxDzTSjuDpL2Kp79K4yRubak.mft
Manifest number: 171C
Signing time: Tue 11 Nov 2025 10:00:48 +0000
Manifest this update: Tue 11 Nov 2025 10:00:48 +0000
Manifest next update: Wed 12 Nov 2025 10:00:48 +0000
Files and hashes: 1: Vz6UxDzTSjuDpL2Kp79K4yRubak.crl (hash: x4iKlsMKnFG36fn7G8681XCoMh7xuc4yP5o8P3/lKik=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/c85bfa-c070-4de8-8444-82977062b947/1/Vz6UxDzTSjuDpL2Kp79K4yRubak.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/c85bfa-c070-4de8-8444-82977062b947/1/Vz6UxDzTSjuDpL2Kp79K4yRubak.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vz6UxDzTSjuDpL2Kp79K4yRubak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:62:e5:98:77:cb:cf:b6:ee:20:a3:97:ed:c8:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=573e94c43cd34a3b83a4bd8aa7bf4ae3246e6da9
Validity
Not Before: Nov 11 10:00:48 2025 GMT
Not After : Nov 12 10:00:48 2025 GMT
Subject: CN=4a2a7764f2941821a892457bbb58faa142fe9ee5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:3e:1a:51:f7:72:e5:e4:5e:10:08:b4:f5:35:
04:4e:06:4f:07:6c:d9:83:b9:b7:48:97:49:ab:ad:
c3:b9:c5:a1:92:dc:75:02:34:82:d9:e2:33:f7:c0:
1c:fe:eb:f0:37:d2:e9:fa:52:dc:ef:8b:06:67:93:
bc:cf:6a:f8:c2:bc:99:10:c7:bb:9b:1c:da:56:2f:
f5:3c:54:2f:0b:49:0f:f4:0d:19:2e:e2:35:a4:72:
72:70:9b:e9:44:44:ca:8a:a5:09:a7:91:bc:c1:ce:
ce:11:b2:e8:ac:65:0f:61:2b:ba:6d:3b:21:2d:3b:
ab:7c:50:1e:37:7a:57:58:d8:eb:0f:cb:f2:e8:da:
4a:7c:56:95:ce:58:43:ef:7c:5f:d2:0a:84:58:5c:
d4:42:ea:c4:12:0e:dd:29:2c:21:82:1e:fa:4c:fa:
42:69:73:1d:2f:20:01:48:9a:db:ee:cd:b2:c8:80:
5c:a1:d9:f1:60:92:73:43:b9:ec:9a:42:0a:45:95:
3c:e1:35:bb:ef:2b:49:6b:7b:1c:9a:8d:59:0a:5a:
33:3e:da:f4:b4:a6:0c:36:d3:29:2f:2d:f4:f7:df:
f4:a1:65:a7:ba:55:9c:ae:3f:51:93:22:cf:b8:5a:
c4:91:f2:98:1b:4a:0d:9e:eb:7f:b4:06:e2:11:84:
fe:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:2A:77:64:F2:94:18:21:A8:92:45:7B:BB:58:FA:A1:42:FE:9E:E5
X509v3 Authority Key Identifier:
keyid:57:3E:94:C4:3C:D3:4A:3B:83:A4:BD:8A:A7:BF:4A:E3:24:6E:6D:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vz6UxDzTSjuDpL2Kp79K4yRubak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/c85bfa-c070-4de8-8444-82977062b947/1/Vz6UxDzTSjuDpL2Kp79K4yRubak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/c85bfa-c070-4de8-8444-82977062b947/1/Vz6UxDzTSjuDpL2Kp79K4yRubak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:56:a0:29:9c:5a:57:34:45:d4:ad:19:e2:b9:d3:12:ed:2c:
98:a3:1c:7d:5f:2b:09:56:7b:e7:e6:7f:78:37:2f:37:34:5f:
b4:15:4b:86:37:9e:3a:f0:e0:5e:8a:e3:7a:36:6d:95:1e:d5:
89:44:89:8f:79:a9:95:c7:44:74:cb:25:02:79:c0:fb:7e:6e:
d0:05:d3:12:9b:bc:4a:c2:13:65:65:90:c0:fc:86:fa:ff:88:
a2:b1:34:16:4b:39:56:47:14:28:d4:fe:78:0d:6c:2d:20:f7:
ea:36:78:bc:22:fe:a6:7f:7e:02:09:b4:3b:19:ef:0d:dd:cd:
8a:bd:66:28:f8:fa:01:7b:48:56:3c:87:8e:45:d7:bb:bd:0c:
91:ff:63:df:08:7e:98:fe:07:4d:79:a1:ed:00:b3:bb:6d:6e:
79:03:30:40:87:0a:b8:ac:46:9e:15:0c:fc:27:c1:22:f2:77:
ee:5d:8a:cd:9b:58:67:46:88:6f:55:aa:b7:1b:eb:91:66:b7:
e4:87:0c:15:34:5f:c5:5c:7d:2e:da:90:cb:d1:f2:79:d6:cf:
01:87:f7:11:98:b3:01:40:52:84:0f:08:03:01:89:0b:3c:42:
e9:63:26:df:4c:4b:75:d5:e6:ee:fb:38:5b:e1:90:13:fe:76:
3b:b2:76:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:53:34 2025 by rpki-client