Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/62a73d-d354-4853-b42e-c66e0878dd27/1/eIxPX0SmYGp2F6ls7BhJAKym-A4.mft
File: eIxPX0SmYGp2F6ls7BhJAKym-A4.mft (raw, json)
Hash identifier: 1Zaa6NoaEANIX845NwfAmdmKusWkisuQIuybyNejjTA=
Subject key identifier: 05:6B:46:FF:D1:B9:FB:8A:F4:38:18:D3:7F:85:31:41:A5:5E:68:62
Authority key identifier: 78:8C:4F:5F:44:A6:60:6A:76:17:A9:6C:EC:18:49:00:AC:A6:F8:0E
Certificate issuer: /CN=788c4f5f44a6606a7617a96cec184900aca6f80e
Certificate serial: 019A503E4304DA5E0413718BFCF101A3CE07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eIxPX0SmYGp2F6ls7BhJAKym-A4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/62a73d-d354-4853-b42e-c66e0878dd27/1/eIxPX0SmYGp2F6ls7BhJAKym-A4.mft
Manifest number: 0CCC
Signing time: Tue 04 Nov 2025 19:00:48 +0000
Manifest this update: Tue 04 Nov 2025 19:00:48 +0000
Manifest next update: Wed 05 Nov 2025 19:00:48 +0000
Files and hashes: 1: eIxPX0SmYGp2F6ls7BhJAKym-A4.crl (hash: bCiCFx63jGhbhLBdsyKITlpBmaxFyG78f4rWxmKx+PY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/62a73d-d354-4853-b42e-c66e0878dd27/1/eIxPX0SmYGp2F6ls7BhJAKym-A4.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/62a73d-d354-4853-b42e-c66e0878dd27/1/eIxPX0SmYGp2F6ls7BhJAKym-A4.mft
rsync://rpki.ripe.net/repository/DEFAULT/eIxPX0SmYGp2F6ls7BhJAKym-A4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3e:43:04:da:5e:04:13:71:8b:fc:f1:01:a3:ce:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=788c4f5f44a6606a7617a96cec184900aca6f80e
Validity
Not Before: Nov 4 19:00:48 2025 GMT
Not After : Nov 5 19:00:48 2025 GMT
Subject: CN=056b46ffd1b9fb8af43818d37f853141a55e6862
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:5f:17:29:43:bf:3e:3e:49:46:07:e5:f2:20:
35:63:19:12:48:e3:a8:7c:a1:27:c5:64:ab:a9:ea:
04:f5:17:48:32:1c:3a:69:f3:db:c2:4a:7e:52:cf:
30:a4:22:e6:1b:12:d6:79:8c:30:b9:2f:6d:eb:68:
db:8d:fc:4e:91:4a:9f:02:88:cf:4c:92:75:08:32:
cc:a2:41:b6:01:aa:e7:6d:92:a8:05:43:56:f6:42:
99:4b:0e:03:d5:ff:23:89:75:0d:77:73:cc:9c:aa:
24:28:e7:9c:95:77:5f:ca:5c:5b:95:ad:cd:49:43:
79:f7:c6:b6:81:1c:e9:2e:79:d9:19:ac:2a:4f:d5:
10:13:fe:b7:46:47:63:74:8b:5a:7a:14:2a:61:b9:
fb:c8:a4:df:69:ca:89:92:20:7f:c7:47:75:a7:7d:
ff:42:ee:70:a4:c6:64:c5:9c:ba:94:67:cb:a4:ce:
1c:9b:9f:54:2e:61:e6:ac:53:24:9a:32:35:57:1c:
eb:55:61:18:4d:44:04:3e:a0:17:20:f8:05:a2:3b:
9a:09:1f:74:7b:ac:ae:3b:04:f6:51:19:12:e0:b8:
82:21:e9:e1:64:9a:aa:c2:93:74:ba:01:b8:08:8b:
30:9d:1c:9d:7c:2b:0a:69:35:85:6f:83:ed:99:96:
2a:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:6B:46:FF:D1:B9:FB:8A:F4:38:18:D3:7F:85:31:41:A5:5E:68:62
X509v3 Authority Key Identifier:
keyid:78:8C:4F:5F:44:A6:60:6A:76:17:A9:6C:EC:18:49:00:AC:A6:F8:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eIxPX0SmYGp2F6ls7BhJAKym-A4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/62a73d-d354-4853-b42e-c66e0878dd27/1/eIxPX0SmYGp2F6ls7BhJAKym-A4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/62a73d-d354-4853-b42e-c66e0878dd27/1/eIxPX0SmYGp2F6ls7BhJAKym-A4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:9f:cb:1f:92:7b:b0:61:d5:66:6c:e8:c0:59:09:29:9c:c5:
1e:b3:5c:55:2d:8f:ff:52:3d:9d:2a:f2:a4:de:37:d6:b3:fd:
34:2f:22:a6:79:bc:aa:72:a4:db:23:d5:c8:6d:09:13:14:44:
d0:9f:f8:3b:4f:96:47:6f:c2:a9:ca:3e:1b:3b:2a:3a:6d:9b:
67:0c:f9:92:0e:a0:78:17:2d:29:d4:24:82:15:46:cd:6d:7a:
9d:7f:ac:11:47:98:c5:1a:0c:ec:42:69:8c:02:68:c3:0c:07:
d1:52:15:ce:03:fa:b1:7b:1d:5d:b3:46:94:19:db:29:54:3b:
9b:41:ac:d4:67:20:60:f9:89:83:3b:2a:4c:b2:31:d8:a9:1f:
50:aa:0f:b2:e5:7a:a3:76:32:66:32:96:8b:bc:82:cf:cb:ab:
5f:45:98:86:e6:b2:6b:75:32:75:20:a2:f8:a5:76:61:4e:59:
ff:51:11:a1:75:69:b6:0a:97:57:dc:b2:83:2b:67:75:7f:0d:
3e:d3:bb:f9:65:a7:67:9b:e4:90:f8:55:9c:37:9a:b0:ec:f9:
f3:7c:d7:12:9a:25:02:d2:e4:94:6f:c0:e3:14:77:7f:e6:a2:
83:25:48:d7:7d:0a:9f:02:c1:f0:01:98:74:b1:a1:ce:5f:a8:
15:8b:18:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:20:54 2025 by rpki-client