Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/ca46fb-3734-4a92-87cb-65f12b2e7970/1/cT5FABqFXik4GRnXmdzLbBGQtaw.mft
File: cT5FABqFXik4GRnXmdzLbBGQtaw.mft (raw, json)
Hash identifier: q2vwFbQ3FbQYLlZM/JFZodTiukXoVpHxj4+zyYq6r9Y=
Subject key identifier: 7B:BA:0F:F0:EA:82:5A:51:6A:2B:60:C4:2F:9E:7B:89:69:78:C6:F7
Authority key identifier: 71:3E:45:00:1A:85:5E:29:38:19:19:D7:99:DC:CB:6C:11:90:B5:AC
Certificate issuer: /CN=713e45001a855e29381919d799dccb6c1190b5ac
Certificate serial: 019A4EF56FB1B9BD2FAFA61332CE31D14211
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cT5FABqFXik4GRnXmdzLbBGQtaw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/ca46fb-3734-4a92-87cb-65f12b2e7970/1/cT5FABqFXik4GRnXmdzLbBGQtaw.mft
Manifest number: 0A3F
Signing time: Tue 04 Nov 2025 13:01:39 +0000
Manifest this update: Tue 04 Nov 2025 13:01:39 +0000
Manifest next update: Wed 05 Nov 2025 13:01:39 +0000
Files and hashes: 1: cT5FABqFXik4GRnXmdzLbBGQtaw.crl (hash: x4MDLVWdFWrdH4/8aUSWnYMtTCuDYSz0SiZnqfcZKrE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/ca46fb-3734-4a92-87cb-65f12b2e7970/1/cT5FABqFXik4GRnXmdzLbBGQtaw.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/ca46fb-3734-4a92-87cb-65f12b2e7970/1/cT5FABqFXik4GRnXmdzLbBGQtaw.mft
rsync://rpki.ripe.net/repository/DEFAULT/cT5FABqFXik4GRnXmdzLbBGQtaw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:6f:b1:b9:bd:2f:af:a6:13:32:ce:31:d1:42:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=713e45001a855e29381919d799dccb6c1190b5ac
Validity
Not Before: Nov 4 13:01:39 2025 GMT
Not After : Nov 5 13:01:39 2025 GMT
Subject: CN=7bba0ff0ea825a516a2b60c42f9e7b896978c6f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:39:39:46:de:b6:30:80:4d:0c:a0:c3:db:c5:
95:a6:fb:38:16:d3:21:d3:77:66:1c:10:ca:58:37:
ea:3f:23:e5:ff:23:28:85:a5:4e:5b:82:d9:78:12:
33:fd:14:bd:5e:aa:fa:09:33:6e:ea:a4:34:fb:04:
8f:58:9b:00:58:2a:fa:d6:5d:f6:bb:51:9d:87:51:
8b:df:56:5e:a3:57:db:86:fc:7c:10:79:59:10:0d:
e3:37:49:81:55:66:18:16:e0:e9:07:8d:c8:31:f0:
0c:f7:36:6c:ec:ec:3d:24:07:88:a6:f5:b9:13:23:
42:8a:15:61:19:6a:64:b3:83:97:a5:95:e6:c4:b2:
66:ed:5e:d4:5c:3e:e5:ef:fc:7c:cf:be:28:d2:8e:
98:fb:71:c9:6a:37:7d:01:52:af:4d:b6:09:0d:36:
da:12:f0:57:a3:de:77:1a:f1:7c:23:bb:64:3b:0b:
46:01:33:c4:49:1b:60:59:26:1e:46:44:92:34:9a:
f6:c1:ef:2d:a6:4d:8b:94:2c:90:09:76:d8:2e:26:
f4:19:a5:94:72:ac:c3:09:f2:7b:88:53:cd:92:c7:
0c:69:e2:03:5c:19:c1:ec:92:51:45:74:6f:f9:3b:
3d:26:99:7f:22:73:b4:af:bb:fe:7f:95:66:65:e8:
4a:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:BA:0F:F0:EA:82:5A:51:6A:2B:60:C4:2F:9E:7B:89:69:78:C6:F7
X509v3 Authority Key Identifier:
keyid:71:3E:45:00:1A:85:5E:29:38:19:19:D7:99:DC:CB:6C:11:90:B5:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cT5FABqFXik4GRnXmdzLbBGQtaw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/ca46fb-3734-4a92-87cb-65f12b2e7970/1/cT5FABqFXik4GRnXmdzLbBGQtaw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/ca46fb-3734-4a92-87cb-65f12b2e7970/1/cT5FABqFXik4GRnXmdzLbBGQtaw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:7a:2d:a7:87:bd:bd:2d:99:e8:1f:b7:6a:a9:06:10:59:cf:
14:22:ea:02:f7:ab:f7:ae:d9:37:52:69:81:a3:00:e4:a8:77:
02:ce:d7:5e:01:cb:d9:68:d2:2d:1e:63:57:70:45:aa:bd:49:
8d:01:12:1f:f8:c5:0a:58:c4:f0:2b:35:47:12:3b:c6:db:48:
99:2d:ad:d9:1f:2e:c3:f2:39:d5:63:d3:32:15:0e:75:23:5c:
b0:07:d4:74:ef:bc:df:38:55:96:5c:13:54:5f:4f:7c:be:77:
85:aa:68:73:4d:dd:36:ae:70:3e:c3:cd:f9:88:ef:22:e1:e8:
85:8b:cf:33:fd:e7:46:33:a7:0a:db:a1:0d:de:cf:30:63:00:
b2:74:ed:f6:c6:cd:8d:ba:2c:fd:24:54:a3:3f:f1:b6:01:f2:
86:73:d1:cb:ed:51:a6:66:54:78:33:17:9b:c8:7f:b9:60:3e:
2b:62:73:3a:e1:9b:d8:b3:e4:b5:b5:ae:c0:77:a1:00:6b:90:
4f:28:f2:66:63:78:c6:cc:dc:ac:3b:fd:8b:50:80:ab:c9:9b:
38:07:e4:bf:8b:29:2a:48:e3:35:b6:3a:62:30:fd:73:55:50:
4d:c7:16:5c:3c:52:25:52:c6:2f:ad:53:5e:b4:6d:20:16:86:
b9:c5:9e:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:38:53 2025 by rpki-client