Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/e4622d-357b-4f86-8589-cda049b19143/1/rVYQTCidcf2Duoh774CRkU82biE.mft
File: rVYQTCidcf2Duoh774CRkU82biE.mft (raw, json)
Hash identifier: +QeOnpcmCqXq4/aF8EWzsP6OBgf7/pxZ3rlID9J3sa4=
Subject key identifier: 37:E4:6B:05:B8:60:C1:F1:E5:9B:C7:0D:61:C5:30:60:18:95:0C:CE
Authority key identifier: AD:56:10:4C:28:9D:71:FD:83:BA:88:7B:EF:80:91:91:4F:36:6E:21
Certificate issuer: /CN=ad56104c289d71fd83ba887bef8091914f366e21
Certificate serial: 019A71B90AE4EC7B63914A8F063531DA76D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rVYQTCidcf2Duoh774CRkU82biE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/e4622d-357b-4f86-8589-cda049b19143/1/rVYQTCidcf2Duoh774CRkU82biE.mft
Manifest number: 0F28
Signing time: Tue 11 Nov 2025 07:02:23 +0000
Manifest this update: Tue 11 Nov 2025 07:02:23 +0000
Manifest next update: Wed 12 Nov 2025 07:02:23 +0000
Files and hashes: 1: rVYQTCidcf2Duoh774CRkU82biE.crl (hash: nS4t7QulPBPi4KqhOisSH3AIraswBJTSOBJ1YvLF8pc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/e4622d-357b-4f86-8589-cda049b19143/1/rVYQTCidcf2Duoh774CRkU82biE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/e4622d-357b-4f86-8589-cda049b19143/1/rVYQTCidcf2Duoh774CRkU82biE.mft
rsync://rpki.ripe.net/repository/DEFAULT/rVYQTCidcf2Duoh774CRkU82biE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:0a:e4:ec:7b:63:91:4a:8f:06:35:31:da:76:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad56104c289d71fd83ba887bef8091914f366e21
Validity
Not Before: Nov 11 07:02:23 2025 GMT
Not After : Nov 12 07:02:23 2025 GMT
Subject: CN=37e46b05b860c1f1e59bc70d61c5306018950cce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:db:44:30:0c:c3:d2:e9:7c:35:e8:27:e0:38:
81:5a:ef:16:fd:ca:78:cc:0c:93:91:26:be:35:75:
ce:c9:a3:17:d4:3b:fd:0f:00:83:ae:bd:6a:a8:9e:
37:74:f3:88:21:e7:2b:59:07:22:20:b0:e9:00:4b:
00:d6:3d:d7:a6:22:d1:d3:07:7d:8c:ce:6b:4e:7d:
94:a3:50:51:e1:97:6f:f5:a1:7b:3d:ee:68:ac:6e:
a6:b2:9b:59:ee:f3:cc:e7:6e:89:15:8e:97:3c:09:
c3:e8:a9:bc:91:e3:df:d3:49:61:f2:05:05:85:e6:
27:36:61:51:24:c6:0d:66:86:2e:33:75:87:de:b0:
16:b1:1f:a4:f6:4b:da:32:9e:8b:5a:d5:71:f9:bf:
63:21:ed:42:91:08:99:55:b8:74:e8:08:0d:86:80:
e9:ee:cf:7e:3d:b6:a8:75:5c:4e:e4:d1:7f:b2:c9:
2e:69:d7:c0:61:f1:48:51:66:2c:06:b2:56:53:f7:
28:77:5d:6a:e1:26:71:2e:7b:33:f1:cf:aa:0c:a0:
34:6b:20:61:e1:0c:cc:ad:19:9a:ed:79:e9:92:3c:
ce:a7:90:10:e5:37:8e:56:87:0b:02:bb:be:a0:74:
1c:af:07:bb:b2:e9:eb:5a:1f:46:a4:cb:5f:7c:0d:
52:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:E4:6B:05:B8:60:C1:F1:E5:9B:C7:0D:61:C5:30:60:18:95:0C:CE
X509v3 Authority Key Identifier:
keyid:AD:56:10:4C:28:9D:71:FD:83:BA:88:7B:EF:80:91:91:4F:36:6E:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rVYQTCidcf2Duoh774CRkU82biE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/e4622d-357b-4f86-8589-cda049b19143/1/rVYQTCidcf2Duoh774CRkU82biE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/e4622d-357b-4f86-8589-cda049b19143/1/rVYQTCidcf2Duoh774CRkU82biE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:73:56:c4:d1:f2:6b:1e:28:58:fd:81:2f:ea:a8:62:05:dd:
2e:52:4e:76:ea:dd:ce:c2:bc:c8:ab:6e:a0:d4:de:9c:0e:40:
14:f5:87:66:13:36:30:e9:18:32:76:65:2f:42:51:ab:49:a4:
c6:85:bc:bf:44:63:17:ea:b3:0e:c4:e0:35:14:38:d7:7e:96:
74:58:45:8e:c2:f1:d2:1c:58:42:ae:5a:ca:a2:d6:7c:da:7c:
22:c5:9e:e9:05:f5:ff:d7:7b:14:2c:c0:38:36:ba:63:7f:5c:
4f:07:c5:ae:d5:cf:c4:2c:47:da:f8:e2:f3:3b:b9:75:2b:83:
6a:c1:08:c7:c1:0a:05:16:b5:7f:e1:01:89:fd:14:44:df:0b:
5a:83:97:83:97:fb:d8:71:d0:fd:97:bf:72:84:40:00:a0:ca:
33:1c:6e:bd:a7:dd:a1:fc:28:5b:b7:57:95:7e:75:42:7b:94:
b1:cb:68:a7:f6:83:fc:84:98:cc:56:dc:48:ab:c1:4a:07:5e:
3f:84:88:7e:08:10:97:cd:7a:92:f9:e1:dd:c5:4d:98:3c:9c:
49:24:54:f5:7c:0e:a8:81:25:06:61:e3:58:dc:23:34:07:2f:
40:df:df:5a:e3:fe:05:a3:b5:31:14:e3:ce:0b:0c:55:08:4b:
99:27:29:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:11:22 2025 by rpki-client