Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/dee8b9-c300-45eb-89e1-80699529cceb/1/cRcdWnbTurk3KszJJz66ffHFnPI.mft
File: cRcdWnbTurk3KszJJz66ffHFnPI.mft (raw, json)
Hash identifier: YR/SrCZCd9aezm9UUimq8mFVthZJI/JEpRigxPz7d/Q=
Subject key identifier: 50:BB:DE:A4:37:23:C8:59:D4:17:F5:69:5F:41:0C:FD:BE:68:8F:29
Authority key identifier: 71:17:1D:5A:76:D3:BA:B9:37:2A:CC:C9:27:3E:BA:7D:F1:C5:9C:F2
Certificate issuer: /CN=71171d5a76d3bab9372accc9273eba7df1c59cf2
Certificate serial: 019A52D2AE27AEE97001972DF04B2A1CCED8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cRcdWnbTurk3KszJJz66ffHFnPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/dee8b9-c300-45eb-89e1-80699529cceb/1/cRcdWnbTurk3KszJJz66ffHFnPI.mft
Manifest number: 170C
Signing time: Wed 05 Nov 2025 07:02:10 +0000
Manifest this update: Wed 05 Nov 2025 07:02:10 +0000
Manifest next update: Thu 06 Nov 2025 07:02:10 +0000
Files and hashes: 1: cRcdWnbTurk3KszJJz66ffHFnPI.crl (hash: vwblDMvsp/fNxKO1vEvnMn5LBULWZBVqn1RHmDLkgJg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/dee8b9-c300-45eb-89e1-80699529cceb/1/cRcdWnbTurk3KszJJz66ffHFnPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/dee8b9-c300-45eb-89e1-80699529cceb/1/cRcdWnbTurk3KszJJz66ffHFnPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/cRcdWnbTurk3KszJJz66ffHFnPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d2:ae:27:ae:e9:70:01:97:2d:f0:4b:2a:1c:ce:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71171d5a76d3bab9372accc9273eba7df1c59cf2
Validity
Not Before: Nov 5 07:02:10 2025 GMT
Not After : Nov 6 07:02:10 2025 GMT
Subject: CN=50bbdea43723c859d417f5695f410cfdbe688f29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:76:09:a5:6b:fa:16:ed:47:31:b4:a3:56:2a:
6e:2b:08:b4:9f:53:ab:c4:00:31:0c:ab:e1:87:18:
a5:3b:2f:f8:7a:e2:e2:f3:57:f2:9e:94:00:d7:64:
b6:24:a0:72:fc:ee:64:e0:b7:9a:df:4b:36:04:a6:
d8:e7:da:1f:53:30:6f:5e:d7:63:ca:3f:f2:24:57:
1d:aa:cb:a5:0b:55:3e:14:77:58:0e:3a:29:4e:8a:
05:62:a8:12:dc:a3:f7:b4:78:71:27:27:57:93:92:
3b:24:f2:2a:c6:c4:91:0b:a1:68:cc:c4:c9:51:76:
b4:dc:75:56:e8:76:2d:96:e4:c2:2c:11:cb:67:78:
8a:8c:ff:c9:45:a7:f8:69:a9:ab:21:e9:19:b4:eb:
fe:7e:55:9e:87:62:64:14:2b:cd:a8:a3:71:da:4e:
eb:67:99:17:8e:b7:03:ed:96:90:19:52:a0:eb:95:
27:c3:8f:89:7a:3b:0b:59:76:cf:e3:42:ec:e1:ba:
f3:3f:6c:e4:5a:60:a8:09:4b:fc:1f:1b:e8:26:40:
25:34:8e:58:a7:27:1b:78:a3:ec:40:9d:40:0c:50:
77:c8:87:7a:4a:32:96:cd:95:92:ee:4d:86:b4:cc:
5e:a6:1a:44:6f:59:e9:e1:7d:09:66:bb:7f:c8:20:
92:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:BB:DE:A4:37:23:C8:59:D4:17:F5:69:5F:41:0C:FD:BE:68:8F:29
X509v3 Authority Key Identifier:
keyid:71:17:1D:5A:76:D3:BA:B9:37:2A:CC:C9:27:3E:BA:7D:F1:C5:9C:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cRcdWnbTurk3KszJJz66ffHFnPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/dee8b9-c300-45eb-89e1-80699529cceb/1/cRcdWnbTurk3KszJJz66ffHFnPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/dee8b9-c300-45eb-89e1-80699529cceb/1/cRcdWnbTurk3KszJJz66ffHFnPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:d0:b5:e3:b9:b0:ee:e0:ef:81:b1:ce:51:13:95:15:b6:92:
db:07:6d:8f:3c:45:f7:eb:19:41:3a:2b:05:88:6a:cc:52:d9:
d4:95:ba:9e:9e:e3:29:39:34:c5:ee:aa:4e:21:23:cf:87:ac:
6b:eb:b7:d6:2c:dd:4a:95:84:f9:64:1e:78:1f:40:ad:1e:7c:
aa:b6:67:e9:d9:9b:18:1c:04:b3:bf:77:ba:6d:68:60:c9:d4:
0f:47:f9:12:2d:1d:3a:03:f1:ad:5d:ca:90:04:bf:32:55:03:
d5:62:1d:39:8c:cc:9e:91:24:ee:0a:2e:8f:25:3e:2e:a2:72:
20:4f:30:1b:62:85:82:00:7e:89:3a:17:1c:73:c5:01:bf:ba:
17:67:a6:9a:4c:ab:95:3b:40:a8:20:b8:90:78:17:5c:83:93:
15:75:0c:c0:10:c5:52:06:a7:81:54:c9:d6:ff:81:37:85:82:
e6:97:1a:07:62:60:dc:c9:01:77:55:2a:04:71:da:60:bd:14:
eb:ea:3a:0c:0a:a3:9b:76:d1:3c:7f:51:27:b8:66:25:c1:07:
85:46:39:00:6d:22:91:ed:0d:61:a6:ea:ed:a6:c0:79:78:fc:
a5:c5:60:89:75:f0:0b:72:74:bd:64:52:76:e1:49:f2:5c:f9:
a1:87:87:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 12:44:55 2025 by rpki-client