Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/65ea32-6fd3-4c85-92d6-b00c1c145fe7/1/F9hzEgZTs8_lUXKp3GBX6MzQy1w.mft
File: F9hzEgZTs8_lUXKp3GBX6MzQy1w.mft (raw, json)
Hash identifier: kzhr7Oarj3akd79Cl1vH/LRslSmR91AApLNRGZVA0Ps=
Subject key identifier: 83:32:7F:3E:0E:46:E4:0F:32:FC:8A:13:32:20:7B:FA:6A:07:A3:9F
Authority key identifier: 17:D8:73:12:06:53:B3:CF:E5:51:72:A9:DC:60:57:E8:CC:D0:CB:5C
Certificate issuer: /CN=17d873120653b3cfe55172a9dc6057e8ccd0cb5c
Certificate serial: 019A4EF5A6BAC2FF9FEBAA80DE9CA379461E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9hzEgZTs8_lUXKp3GBX6MzQy1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/65ea32-6fd3-4c85-92d6-b00c1c145fe7/1/F9hzEgZTs8_lUXKp3GBX6MzQy1w.mft
Manifest number: 0EAE
Signing time: Tue 04 Nov 2025 13:01:53 +0000
Manifest this update: Tue 04 Nov 2025 13:01:53 +0000
Manifest next update: Wed 05 Nov 2025 13:01:53 +0000
Files and hashes: 1: F9hzEgZTs8_lUXKp3GBX6MzQy1w.crl (hash: xOYECO+Enhyhj7rPBUlTkStd4Uizdqq80bVU3DsZVoo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/65ea32-6fd3-4c85-92d6-b00c1c145fe7/1/F9hzEgZTs8_lUXKp3GBX6MzQy1w.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/65ea32-6fd3-4c85-92d6-b00c1c145fe7/1/F9hzEgZTs8_lUXKp3GBX6MzQy1w.mft
rsync://rpki.ripe.net/repository/DEFAULT/F9hzEgZTs8_lUXKp3GBX6MzQy1w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:01:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:a6:ba:c2:ff:9f:eb:aa:80:de:9c:a3:79:46:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d873120653b3cfe55172a9dc6057e8ccd0cb5c
Validity
Not Before: Nov 4 13:01:53 2025 GMT
Not After : Nov 5 13:01:53 2025 GMT
Subject: CN=83327f3e0e46e40f32fc8a1332207bfa6a07a39f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:c1:b9:43:16:63:2a:40:12:f9:e6:5c:29:bb:
5a:b7:f6:d6:f2:b6:b9:28:e9:34:9b:bd:2a:be:b1:
bf:41:89:e3:16:e2:1f:7b:e8:ea:ef:fc:0d:88:3e:
5b:65:16:e4:56:e1:eb:6c:e4:df:d7:96:8f:cb:28:
f3:1a:72:77:51:7b:99:89:fc:c0:05:2f:d2:f1:d9:
f2:0e:69:73:ac:60:96:1c:ab:f1:9a:92:4e:27:8b:
7d:b6:d1:67:e8:67:e6:7a:14:d8:59:36:cf:df:98:
f4:3b:b2:05:38:45:fe:78:79:c4:0a:1c:d1:0f:f6:
93:1a:7b:da:a5:2d:8d:29:cd:2e:37:ba:4f:88:1e:
73:73:4f:a8:b0:35:72:a5:11:96:ad:e8:89:8a:0b:
3b:33:55:c6:aa:ad:f3:a0:71:b9:45:ea:fd:0d:ed:
61:24:1d:72:07:13:5c:31:02:8c:06:29:5a:d4:18:
49:48:46:aa:b7:ca:eb:94:ce:2b:5d:e6:9a:44:d9:
ec:d6:e7:0d:87:e3:9d:9a:12:14:c8:95:31:aa:5b:
4c:b7:bd:fd:5f:99:64:76:44:c2:20:43:15:9f:90:
4a:8d:47:8b:b0:6f:98:69:9a:38:21:ea:d2:f1:ab:
a1:1b:24:12:d8:2e:dc:6b:50:52:70:76:13:7d:17:
3d:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:32:7F:3E:0E:46:E4:0F:32:FC:8A:13:32:20:7B:FA:6A:07:A3:9F
X509v3 Authority Key Identifier:
keyid:17:D8:73:12:06:53:B3:CF:E5:51:72:A9:DC:60:57:E8:CC:D0:CB:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9hzEgZTs8_lUXKp3GBX6MzQy1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/65ea32-6fd3-4c85-92d6-b00c1c145fe7/1/F9hzEgZTs8_lUXKp3GBX6MzQy1w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/65ea32-6fd3-4c85-92d6-b00c1c145fe7/1/F9hzEgZTs8_lUXKp3GBX6MzQy1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:60:b0:aa:81:e5:4c:8c:f3:aa:a3:48:b0:24:22:07:a0:6e:
d2:75:49:c7:ad:ae:16:1e:9a:dd:6e:56:df:31:73:b1:43:96:
09:98:ed:1b:dd:a1:44:05:77:16:ce:84:b8:7e:ae:d9:f3:e1:
65:7e:1f:03:e4:04:2b:2c:11:4e:47:0a:51:de:14:1b:eb:3a:
4d:4e:30:67:a5:01:b6:0a:f9:fe:75:ae:4e:18:1a:95:ec:9d:
14:72:18:fb:9c:c1:a2:57:9d:94:00:75:1e:35:2b:ec:2e:f9:
a3:57:10:f2:10:fe:40:2e:58:fa:ee:17:8d:54:ac:9e:98:af:
f0:48:fa:23:17:8c:c6:8d:3a:9c:82:67:0a:6b:78:dc:bc:30:
fc:b2:a7:60:fc:51:cd:8d:1f:bf:a5:bb:cb:51:36:87:fc:5e:
8b:df:ae:f3:2f:f9:4b:e0:9e:fc:c3:f2:9e:6a:cb:89:c7:ad:
ee:2c:d1:54:df:d8:64:0d:2d:42:fa:5b:e9:00:87:1f:c0:fb:
a8:50:26:e3:d5:1b:8c:b0:84:4f:25:63:41:b4:3a:12:1f:74:
06:07:21:93:77:61:3a:5e:3b:03:24:db:3f:07:c3:95:f1:9a:
d5:26:3e:89:a8:9f:8a:b8:5a:7e:c2:e3:83:f8:46:60:3b:fb:
86:90:c6:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:43:18 2025 by rpki-client