Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/826de6-5039-4037-8802-5e2cbf942405/1/12TH8_eLh21rBDwWzdvd6x55W5w.mft
File: 12TH8_eLh21rBDwWzdvd6x55W5w.mft (raw, json)
Hash identifier: BT33mIFmXw2b5H1CMc/XpPJjNM8FMiBGWJ44IJXb/rk=
Subject key identifier: F2:18:84:BA:E6:48:EA:EF:7A:B2:E9:BB:33:9C:50:C2:F2:AA:C5:CA
Authority key identifier: D7:64:C7:F3:F7:8B:87:6D:6B:04:3C:16:CD:DB:DD:EB:1E:79:5B:9C
Certificate issuer: /CN=d764c7f3f78b876d6b043c16cddbddeb1e795b9c
Certificate serial: 019A725CDB56509EF64D9F2D6EACC95A3DE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12TH8_eLh21rBDwWzdvd6x55W5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/826de6-5039-4037-8802-5e2cbf942405/1/12TH8_eLh21rBDwWzdvd6x55W5w.mft
Manifest number: 071F
Signing time: Tue 11 Nov 2025 10:01:19 +0000
Manifest this update: Tue 11 Nov 2025 10:01:19 +0000
Manifest next update: Wed 12 Nov 2025 10:01:19 +0000
Files and hashes: 1: 12TH8_eLh21rBDwWzdvd6x55W5w.crl (hash: SI1Yrbiez1ElBaqG9Ms8CbKVsLvsAeL/Iez6G9kJ6po=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/826de6-5039-4037-8802-5e2cbf942405/1/12TH8_eLh21rBDwWzdvd6x55W5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/826de6-5039-4037-8802-5e2cbf942405/1/12TH8_eLh21rBDwWzdvd6x55W5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/12TH8_eLh21rBDwWzdvd6x55W5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:db:56:50:9e:f6:4d:9f:2d:6e:ac:c9:5a:3d:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d764c7f3f78b876d6b043c16cddbddeb1e795b9c
Validity
Not Before: Nov 11 10:01:19 2025 GMT
Not After : Nov 12 10:01:19 2025 GMT
Subject: CN=f21884bae648eaef7ab2e9bb339c50c2f2aac5ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:63:ee:f8:82:87:70:5b:97:6e:bb:8e:e7:00:
74:b8:a0:42:99:df:87:f4:b9:23:15:44:e9:4b:8a:
ec:d4:92:d9:a8:bb:1b:75:25:1a:33:37:18:1a:ac:
31:5f:fa:7d:8a:7c:f5:50:e9:ca:67:11:b7:76:84:
b3:6d:63:62:c6:39:a2:72:b2:fc:5b:04:42:5e:23:
0c:e5:88:21:1f:0c:0f:7c:c8:45:9d:fd:15:9c:31:
39:63:46:52:5e:c7:83:7a:4a:f4:d5:10:56:45:f5:
71:dc:9c:86:4f:e7:ac:6d:29:67:bc:2e:4e:c3:c0:
f1:8f:9a:75:a6:d6:69:91:2d:87:b6:7e:b3:04:4b:
bc:12:ed:91:53:54:8a:5f:ab:9a:96:ed:bb:13:55:
f5:c7:43:ff:f2:6f:6e:4d:69:07:a4:5b:90:bd:53:
5d:e4:f8:20:29:da:b7:d9:eb:2f:f9:81:2e:41:2f:
6e:bb:48:36:9a:65:b3:9b:18:d8:67:9e:42:93:bf:
66:39:d5:95:e4:a7:71:34:20:9f:e0:d4:7a:a6:1e:
71:4a:dc:52:4c:29:44:ca:f7:9a:31:1c:e0:f8:a5:
cc:85:48:19:8d:a9:1f:6b:54:e2:bb:a2:73:39:7c:
eb:8c:73:19:66:9e:ec:2c:8c:9d:0c:fc:46:37:38:
1f:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:18:84:BA:E6:48:EA:EF:7A:B2:E9:BB:33:9C:50:C2:F2:AA:C5:CA
X509v3 Authority Key Identifier:
keyid:D7:64:C7:F3:F7:8B:87:6D:6B:04:3C:16:CD:DB:DD:EB:1E:79:5B:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12TH8_eLh21rBDwWzdvd6x55W5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/826de6-5039-4037-8802-5e2cbf942405/1/12TH8_eLh21rBDwWzdvd6x55W5w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/826de6-5039-4037-8802-5e2cbf942405/1/12TH8_eLh21rBDwWzdvd6x55W5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:b2:f9:d5:c4:e1:87:4d:53:5b:9c:3f:b0:72:10:01:ec:ab:
f9:da:c0:25:68:5d:c4:a4:e3:78:76:15:79:5f:d5:8d:00:12:
37:1c:71:c6:11:6c:e0:d2:f1:48:6c:2b:f1:11:e8:d2:2f:06:
69:e6:41:2b:b7:69:83:63:73:e6:5a:f0:79:90:b9:30:f9:af:
22:ed:87:fe:af:a1:9a:a0:89:3c:db:e1:bf:4a:65:55:30:19:
ae:c6:ca:b5:5b:26:ba:e7:ed:9c:3f:83:a5:94:32:07:e1:5b:
cb:3d:a5:2e:4f:fe:07:47:1e:0e:d6:5c:ad:c7:d7:e9:5e:55:
9a:ac:80:51:8b:19:1f:7a:e3:b4:7f:7b:0a:d4:ae:5f:b3:aa:
b7:ce:de:44:3e:60:49:e2:59:29:05:c9:88:de:03:cd:1d:1d:
85:0d:ff:72:ea:66:41:12:38:ee:54:b8:22:da:5f:86:a1:2f:
25:4d:f3:89:a7:1a:d3:2b:e6:7c:ab:5c:75:c7:32:93:ec:e5:
50:15:86:22:0f:f1:73:cc:63:c4:3b:b4:c7:6f:e0:6e:6d:e0:
88:93:02:7f:ef:8b:83:38:2f:35:a5:64:60:89:99:2f:2f:77:
62:d2:f9:43:ab:a2:b9:8c:69:26:ff:ae:3d:5e:d8:4e:af:84:
56:40:ff:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:19:33 2025 by rpki-client