Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/11f004-441f-470d-8927-76a9109a62e7/1/T7murXluvL6SUPqiksQOioWIx50.mft
File: T7murXluvL6SUPqiksQOioWIx50.mft (raw, json)
Hash identifier: AmWtWtXv/MB1NVCWPHeoUCB1YBordjS0xSqdCTxBRRc=
Subject key identifier: 37:11:9D:A3:6E:56:86:E4:79:06:CB:74:65:08:AC:48:35:2E:AA:CE
Authority key identifier: 4F:B9:AE:AD:79:6E:BC:BE:92:50:FA:A2:92:C4:0E:8A:85:88:C7:9D
Certificate issuer: /CN=4fb9aead796ebcbe9250faa292c40e8a8588c79d
Certificate serial: 019A4D068BB1011B86FFCABBE35329222836
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T7murXluvL6SUPqiksQOioWIx50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/11f004-441f-470d-8927-76a9109a62e7/1/T7murXluvL6SUPqiksQOioWIx50.mft
Manifest number: 11F0
Signing time: Tue 04 Nov 2025 04:01:05 +0000
Manifest this update: Tue 04 Nov 2025 04:01:05 +0000
Manifest next update: Wed 05 Nov 2025 04:01:05 +0000
Files and hashes: 1: T7murXluvL6SUPqiksQOioWIx50.crl (hash: F5Og4OtAl640S4Q5F1iUgAfoWVUofpb06iK7SGCXk5Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/11f004-441f-470d-8927-76a9109a62e7/1/T7murXluvL6SUPqiksQOioWIx50.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/11f004-441f-470d-8927-76a9109a62e7/1/T7murXluvL6SUPqiksQOioWIx50.mft
rsync://rpki.ripe.net/repository/DEFAULT/T7murXluvL6SUPqiksQOioWIx50.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 04:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:06:8b:b1:01:1b:86:ff:ca:bb:e3:53:29:22:28:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fb9aead796ebcbe9250faa292c40e8a8588c79d
Validity
Not Before: Nov 4 04:01:05 2025 GMT
Not After : Nov 5 04:01:05 2025 GMT
Subject: CN=37119da36e5686e47906cb746508ac48352eaace
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:57:da:85:6b:ba:b6:50:9f:ed:8d:18:91:0c:
e8:94:ae:3a:c2:c1:1b:42:89:0b:32:4e:3b:6e:67:
ab:ab:45:6b:6f:e9:0d:6c:0a:67:80:ad:a4:ce:b8:
f2:4b:15:aa:44:91:d2:19:d9:a6:db:5f:02:dd:d6:
43:86:2a:60:7c:22:09:43:b9:67:bc:69:31:d8:15:
d8:6c:1d:5a:51:9f:6b:1d:5d:32:ae:93:b3:66:f5:
f1:be:36:79:5f:95:77:07:6f:b5:10:28:65:5b:bd:
5f:a1:cf:a3:6d:96:50:35:30:92:41:29:8c:05:83:
66:9e:f4:a0:41:a1:bd:04:22:8d:7e:ce:5e:e5:75:
51:ea:ec:8e:12:82:e1:cc:fe:90:88:59:65:61:b5:
70:2f:a8:06:a2:39:5d:b0:30:83:28:d2:4f:a5:dc:
15:b8:6e:f9:7f:73:61:eb:66:cc:e6:0a:fd:dd:85:
85:18:85:14:45:5a:ff:eb:b8:e1:ce:fa:c9:fe:d0:
39:e2:ef:6f:53:97:cd:37:d3:5e:c3:21:e1:7c:55:
ba:52:ed:c3:d1:93:21:39:81:b4:39:92:37:1f:c4:
85:c1:85:60:6a:e3:cb:db:53:b2:d9:4b:7a:4b:b8:
c3:50:51:8a:f8:1e:cb:5d:bb:67:7c:6f:93:73:93:
71:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:11:9D:A3:6E:56:86:E4:79:06:CB:74:65:08:AC:48:35:2E:AA:CE
X509v3 Authority Key Identifier:
keyid:4F:B9:AE:AD:79:6E:BC:BE:92:50:FA:A2:92:C4:0E:8A:85:88:C7:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T7murXluvL6SUPqiksQOioWIx50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/11f004-441f-470d-8927-76a9109a62e7/1/T7murXluvL6SUPqiksQOioWIx50.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/11f004-441f-470d-8927-76a9109a62e7/1/T7murXluvL6SUPqiksQOioWIx50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:29:bb:fa:b7:3b:bb:5b:ca:d6:08:f8:33:76:41:c5:e7:c0:
69:1f:9f:e7:2a:03:41:9c:2e:af:e6:d2:5c:26:57:71:66:9c:
ac:90:9e:49:17:e5:89:6a:72:2d:1f:43:13:27:b6:e9:41:64:
9e:f8:77:56:bd:51:7b:11:b3:ca:6e:15:27:25:04:69:a0:f1:
fe:82:ff:14:99:0d:f7:f7:23:6f:ce:0c:af:dd:67:3c:d5:1f:
44:4c:99:80:67:0b:d6:c4:bf:a7:3f:e1:48:be:84:bb:39:c4:
0d:6c:38:9a:dc:0d:8c:a8:da:77:68:17:50:ac:fc:b2:76:16:
88:0d:06:44:74:ef:1c:eb:f8:83:5f:a3:74:5d:90:ef:ce:2c:
b8:21:c1:b9:21:4b:28:af:6b:f6:d1:1e:c0:88:1f:a7:03:4f:
91:ed:b7:4f:7e:99:a3:d8:31:ac:a1:ee:84:27:7f:69:ab:3c:
20:51:31:59:5b:fb:5a:48:fe:8e:28:e2:ea:34:17:f0:a0:2b:
3a:87:0b:b1:b4:a0:75:e7:6f:39:a0:13:b8:91:49:9a:90:91:
a1:8e:80:ce:ce:61:e7:48:99:ce:79:55:d2:2e:7f:9f:27:de:
c5:59:03:80:18:8c:69:77:7d:92:8b:5d:2f:16:93:14:8f:f8:
7b:00:ed:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:47:20 2025 by rpki-client