Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/c92c58-c727-4de0-84a6-7cf4dc67aa70/1/E_-Kk0rrWapFoeVUiOO4i-HgE1s.mft
File: E_-Kk0rrWapFoeVUiOO4i-HgE1s.mft (raw, json)
Hash identifier: Y9+PH2v0oL420faMhvmP/VH1/LJCzALZF29Z9bAo2MM=
Subject key identifier: 57:AF:BA:E3:3E:62:68:42:44:6A:48:4B:9E:90:A7:D7:0A:45:5F:93
Authority key identifier: 13:FF:8A:93:4A:EB:59:AA:45:A1:E5:54:88:E3:B8:8B:E1:E0:13:5B
Certificate issuer: /CN=13ff8a934aeb59aa45a1e55488e3b88be1e0135b
Certificate serial: 019A4DAAE0CA21F5DCDEF98BD3D5B0CD6DB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E_-Kk0rrWapFoeVUiOO4i-HgE1s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/c92c58-c727-4de0-84a6-7cf4dc67aa70/1/E_-Kk0rrWapFoeVUiOO4i-HgE1s.mft
Manifest number: 0B2D
Signing time: Tue 04 Nov 2025 07:00:35 +0000
Manifest this update: Tue 04 Nov 2025 07:00:35 +0000
Manifest next update: Wed 05 Nov 2025 07:00:35 +0000
Files and hashes: 1: E_-Kk0rrWapFoeVUiOO4i-HgE1s.crl (hash: WExecel0dtryjK861+gr8+EZPXflrf+Bxs0vKOQQe2w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/c92c58-c727-4de0-84a6-7cf4dc67aa70/1/E_-Kk0rrWapFoeVUiOO4i-HgE1s.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/c92c58-c727-4de0-84a6-7cf4dc67aa70/1/E_-Kk0rrWapFoeVUiOO4i-HgE1s.mft
rsync://rpki.ripe.net/repository/DEFAULT/E_-Kk0rrWapFoeVUiOO4i-HgE1s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:aa:e0:ca:21:f5:dc:de:f9:8b:d3:d5:b0:cd:6d:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13ff8a934aeb59aa45a1e55488e3b88be1e0135b
Validity
Not Before: Nov 4 07:00:35 2025 GMT
Not After : Nov 5 07:00:35 2025 GMT
Subject: CN=57afbae33e626842446a484b9e90a7d70a455f93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:9f:f0:ba:7b:3b:04:5d:e7:01:d0:97:45:ad:
a7:1f:69:8a:e9:59:13:e7:69:08:58:65:6d:02:24:
05:be:4f:4d:e0:b0:0d:5d:94:36:7c:36:ad:21:80:
b2:4b:19:fd:95:9d:9e:6c:32:c3:04:b1:8b:b3:ea:
22:70:d2:62:66:60:5a:49:a0:e4:d0:70:fd:7b:81:
20:02:a8:89:7a:09:6e:ac:66:e2:8d:9f:e4:d2:a9:
97:6f:c9:7e:2f:94:a2:46:a0:2e:a1:2c:39:d8:80:
9f:54:86:63:90:7d:21:27:34:15:60:32:db:58:e8:
78:2d:fe:32:f4:4c:6f:09:2f:4d:7d:1c:d7:c6:12:
98:11:d4:d2:5b:49:62:f3:89:1b:a9:ce:3a:0b:42:
0d:00:f1:74:2f:60:40:f4:39:da:9f:3c:42:3f:17:
51:9a:c4:fb:f1:0e:2e:8a:d3:57:f6:a6:6c:ce:22:
02:b9:54:47:7d:f2:09:50:2d:d4:08:4e:a0:30:f7:
38:5f:8c:90:eb:f5:58:3a:9a:20:33:35:29:e1:7f:
91:e2:7b:16:ab:10:43:9a:5a:ec:14:fa:b7:89:0a:
69:01:e4:62:73:a0:9e:a4:4c:fb:d2:6d:31:dc:24:
a1:58:3e:be:09:69:82:6b:bb:90:65:d2:5c:ae:40:
c4:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:AF:BA:E3:3E:62:68:42:44:6A:48:4B:9E:90:A7:D7:0A:45:5F:93
X509v3 Authority Key Identifier:
keyid:13:FF:8A:93:4A:EB:59:AA:45:A1:E5:54:88:E3:B8:8B:E1:E0:13:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E_-Kk0rrWapFoeVUiOO4i-HgE1s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/c92c58-c727-4de0-84a6-7cf4dc67aa70/1/E_-Kk0rrWapFoeVUiOO4i-HgE1s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/c92c58-c727-4de0-84a6-7cf4dc67aa70/1/E_-Kk0rrWapFoeVUiOO4i-HgE1s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:31:6a:0e:23:ce:df:4f:7d:fb:f5:8f:0d:95:82:7b:64:ec:
15:98:9b:9c:5d:02:78:e5:af:2a:b1:21:44:c9:21:15:23:36:
02:37:c6:50:59:56:d4:e1:2f:66:78:af:49:16:a4:f7:d9:2c:
60:e0:4d:16:ef:59:f1:58:ac:2a:3b:a5:8f:12:1e:25:d8:96:
2a:a0:d1:4c:2e:d4:22:19:61:5e:d0:08:10:39:e4:0b:4d:c7:
53:6c:c5:2d:88:c2:45:b1:9d:83:b7:67:ab:1f:58:9a:41:16:
19:ec:5f:c4:91:4a:89:0d:88:98:c9:8d:8c:97:d9:f1:63:aa:
29:c8:1b:28:29:f2:51:60:ee:df:6d:ec:1e:3c:48:4f:b4:bd:
10:04:dc:cc:aa:3d:cf:28:f8:cd:d0:37:3a:83:03:b3:ad:0f:
dc:df:44:91:16:0d:fb:23:61:b3:b7:93:d9:6a:50:bb:e1:03:
04:0d:11:a9:98:75:3f:f6:24:97:b5:07:72:a8:db:06:25:90:
31:e5:b9:1b:e5:04:f0:59:a3:35:89:9f:c3:19:78:e0:8c:ec:
4d:49:f0:20:e7:3d:6e:83:f7:16:b6:5d:c2:be:29:71:b1:6b:
28:09:78:20:b5:0c:09:17:aa:bf:f6:cd:5f:5f:67:16:38:7a:
8c:b2:34:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNquDKIfXc3vmL09WwzW21MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzZmY4YTkzNGFlYjU5YWE0NWExZTU1NDg4ZTNiODhiZTFl
MDEzNWIwHhcNMjUxMTA0MDcwMDM1WhcNMjUxMTA1MDcwMDM1WjAzMTEwLwYDVQQD
Eyg1N2FmYmFlMzNlNjI2ODQyNDQ2YTQ4NGI5ZTkwYTdkNzBhNDU1ZjkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxJ/wuns7BF3nAdCXRa2nH2mK6VkT
52kIWGVtAiQFvk9N4LANXZQ2fDatIYCySxn9lZ2ebDLDBLGLs+oicNJiZmBaSaDk
0HD9e4EgAqiJeglurGbijZ/k0qmXb8l+L5SiRqAuoSw52ICfVIZjkH0hJzQVYDLb
WOh4Lf4y9ExvCS9NfRzXxhKYEdTSW0li84kbqc46C0INAPF0L2BA9DnanzxCPxdR
msT78Q4uitNX9qZsziICuVRHffIJUC3UCE6gMPc4X4yQ6/VYOpogMzUp4X+R4nsW
qxBDmlrsFPq3iQppAeRic6CepEz70m0x3CShWD6+CWmCa7uQZdJcrkDE3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFevuuM+YmhCRGpIS56Qp9cKRV+TMB8GA1UdIwQY
MBaAFBP/ipNK61mqRaHlVIjjuIvh4BNbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRV8tS2swcnJXYXBGb2VWVWlPTzRpLUhnRTFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC9jOTJjNTgtYzcyNy00ZGUwLTg0YTYt
N2NmNGRjNjdhYTcwLzEvRV8tS2swcnJXYXBGb2VWVWlPTzRpLUhnRTFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC9jOTJjNTgtYzcyNy00ZGUwLTg0YTYtN2NmNGRjNjdhYTcw
LzEvRV8tS2swcnJXYXBGb2VWVWlPTzRpLUhnRTFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASDFqDiPO
3099+/WPDZWCe2TsFZibnF0CeOWvKrEhRMkhFSM2AjfGUFlW1OEvZnivSRak99ks
YOBNFu9Z8VisKjuljxIeJdiWKqDRTC7UIhlhXtAIEDnkC03HU2zFLYjCRbGdg7dn
qx9YmkEWGexfxJFKiQ2ImMmNjJfZ8WOqKcgbKCnyUWDu323sHjxIT7S9EATczKo9
zyj4zdA3OoMDs60P3N9EkRYN+yNhs7eT2WpQu+EDBA0RqZh1P/Ykl7UHcqjbBiWQ
MeW5G+UE8FmjNYmfwxl44IzsTUnwIOc9boP3FrZdwr4pcbFrKAl4ILUMCReqv/bN
X19nFjh6jLI06g==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:48:55 2025 by rpki-client