Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/c636cc-405a-4f1e-936a-8437cc92282a/1/E93mmrzMZdCGiMqDVCYzohkpMic.mft
File: E93mmrzMZdCGiMqDVCYzohkpMic.mft (raw, json)
Hash identifier: fmPKEn6M1mj24tPDw//wor38T7b8gTH/HDuetiMF7k0=
Subject key identifier: F2:40:C2:C3:4F:E6:92:D2:C6:CC:F8:E3:58:FB:78:A4:04:EE:3C:F8
Authority key identifier: 13:DD:E6:9A:BC:CC:65:D0:86:88:CA:83:54:26:33:A2:19:29:32:27
Certificate issuer: /CN=13dde69abccc65d08688ca83542633a219293227
Certificate serial: 019A7113285BDD6A8046733E6B33D511DCE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E93mmrzMZdCGiMqDVCYzohkpMic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/c636cc-405a-4f1e-936a-8437cc92282a/1/E93mmrzMZdCGiMqDVCYzohkpMic.mft
Manifest number: 0D4B
Signing time: Tue 11 Nov 2025 04:01:12 +0000
Manifest this update: Tue 11 Nov 2025 04:01:12 +0000
Manifest next update: Wed 12 Nov 2025 04:01:12 +0000
Files and hashes: 1: E93mmrzMZdCGiMqDVCYzohkpMic.crl (hash: vCtCznxQjWek17s2ISWdunb9IL+3iM3shu2QoQ0Ely4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/c636cc-405a-4f1e-936a-8437cc92282a/1/E93mmrzMZdCGiMqDVCYzohkpMic.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/c636cc-405a-4f1e-936a-8437cc92282a/1/E93mmrzMZdCGiMqDVCYzohkpMic.mft
rsync://rpki.ripe.net/repository/DEFAULT/E93mmrzMZdCGiMqDVCYzohkpMic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:28:5b:dd:6a:80:46:73:3e:6b:33:d5:11:dc:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13dde69abccc65d08688ca83542633a219293227
Validity
Not Before: Nov 11 04:01:12 2025 GMT
Not After : Nov 12 04:01:12 2025 GMT
Subject: CN=f240c2c34fe692d2c6ccf8e358fb78a404ee3cf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:e3:14:0a:fa:cd:60:fb:cf:ad:df:06:3d:e2:
ed:3e:de:23:2d:52:88:1a:30:14:bb:92:09:10:62:
e2:8b:ee:05:ad:98:a9:bb:4d:25:35:2c:ec:9c:3b:
ff:42:b6:52:0f:14:c3:1f:ee:2c:d0:85:25:d3:20:
5f:6e:a8:90:ed:6b:90:0c:99:dd:ec:45:e6:0b:6c:
15:f9:86:c1:49:b7:88:76:45:4a:61:70:0c:72:ac:
9a:65:db:a1:27:c9:b0:0d:1e:99:1a:2b:76:64:52:
33:ee:3f:1a:7d:a6:34:1e:b3:01:da:98:2e:e4:33:
79:ba:72:75:03:8e:2a:04:3a:ee:af:c4:aa:77:5c:
3b:2a:17:eb:38:d9:0f:2d:b6:90:2c:d6:a3:7b:b9:
6d:86:90:54:bf:be:76:be:a2:7c:86:c8:59:b5:c4:
5e:cf:42:ca:3e:d3:c6:bb:85:a8:57:83:1f:9a:af:
09:10:cb:9f:68:6c:51:56:c5:0c:d2:14:1d:cd:a4:
a8:3d:f5:67:b4:9e:c2:31:5d:3d:e3:6e:35:1b:b0:
80:50:4c:4e:92:1b:0b:c8:5f:f6:de:99:90:d5:71:
d9:93:35:7b:16:60:a6:e0:11:e5:a6:40:b3:1e:24:
e5:59:f4:77:29:1e:07:1b:6b:32:24:c4:62:2f:43:
e9:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:40:C2:C3:4F:E6:92:D2:C6:CC:F8:E3:58:FB:78:A4:04:EE:3C:F8
X509v3 Authority Key Identifier:
keyid:13:DD:E6:9A:BC:CC:65:D0:86:88:CA:83:54:26:33:A2:19:29:32:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E93mmrzMZdCGiMqDVCYzohkpMic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/c636cc-405a-4f1e-936a-8437cc92282a/1/E93mmrzMZdCGiMqDVCYzohkpMic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/c636cc-405a-4f1e-936a-8437cc92282a/1/E93mmrzMZdCGiMqDVCYzohkpMic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:76:30:8a:e6:d9:61:61:19:ae:41:5e:ff:cf:c5:9f:ee:78:
33:13:4f:74:bd:88:4a:9d:e0:38:ad:54:06:71:7f:4b:8c:ea:
c9:bd:af:c9:a6:60:44:80:3e:dd:eb:28:ed:4d:4e:f6:96:de:
65:c5:4f:f7:4d:12:90:4b:ee:dd:4b:36:3a:89:2d:b9:a1:32:
ab:5d:a5:2c:45:05:85:fa:b9:95:43:b5:67:e0:f0:bc:2a:01:
ce:28:fd:99:58:42:c9:9f:8b:6e:e9:68:9f:7c:54:b2:b2:5b:
e9:46:db:eb:f2:bf:93:6a:c9:58:eb:8c:48:fc:8f:38:c4:74:
e1:6f:be:6e:b5:e8:f8:8d:d4:6d:f2:fa:40:79:27:2a:e4:27:
95:80:1e:6e:b2:8b:68:f0:8b:6d:02:4d:0a:cf:91:06:6e:b0:
6d:fe:1b:ca:e1:75:78:9b:8d:1c:70:2c:d9:65:a0:24:8e:46:
69:7b:91:24:36:2f:53:b8:c2:6b:10:47:fe:e2:a8:b8:42:83:
2f:97:9a:88:ba:fd:42:3f:75:75:8b:08:3b:f9:f6:4e:74:fa:
63:12:ff:b9:d9:ee:66:fb:94:78:46:74:48:a9:9b:07:2c:b3:
a3:5b:fe:3b:29:8a:28:2f:2f:76:6d:2d:dc:c1:54:b5:3c:80:
ca:c6:a5:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:41:43 2025 by rpki-client