Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/aeb1cc-2c4b-46ed-bc23-f35f0c6c46a9/1/rnIxk3EEsmkAemyoPH_ZKes59Hc.mft
File: rnIxk3EEsmkAemyoPH_ZKes59Hc.mft (raw, json)
Hash identifier: OaZMIg7JHP3qKS7Q8QvZC4E5NrLDL1BaRULSFko91Jo=
Subject key identifier: DC:26:3E:9E:B1:28:8B:63:1F:20:7D:56:4B:9C:0E:C7:79:F0:42:4F
Authority key identifier: AE:72:31:93:71:04:B2:69:00:7A:6C:A8:3C:7F:D9:29:EB:39:F4:77
Certificate issuer: /CN=ae7231937104b269007a6ca83c7fd929eb39f477
Certificate serial: 019A4F628496F73A897262302E6C7DFE4B20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rnIxk3EEsmkAemyoPH_ZKes59Hc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/aeb1cc-2c4b-46ed-bc23-f35f0c6c46a9/1/rnIxk3EEsmkAemyoPH_ZKes59Hc.mft
Manifest number: 169D
Signing time: Tue 04 Nov 2025 15:00:47 +0000
Manifest this update: Tue 04 Nov 2025 15:00:47 +0000
Manifest next update: Wed 05 Nov 2025 15:00:47 +0000
Files and hashes: 1: rnIxk3EEsmkAemyoPH_ZKes59Hc.crl (hash: rJVJ+o8mqyNQ3GvMhBlpEjGHjc5tn9ZmeCAKrHL58ac=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/aeb1cc-2c4b-46ed-bc23-f35f0c6c46a9/1/rnIxk3EEsmkAemyoPH_ZKes59Hc.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/aeb1cc-2c4b-46ed-bc23-f35f0c6c46a9/1/rnIxk3EEsmkAemyoPH_ZKes59Hc.mft
rsync://rpki.ripe.net/repository/DEFAULT/rnIxk3EEsmkAemyoPH_ZKes59Hc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:84:96:f7:3a:89:72:62:30:2e:6c:7d:fe:4b:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae7231937104b269007a6ca83c7fd929eb39f477
Validity
Not Before: Nov 4 15:00:47 2025 GMT
Not After : Nov 5 15:00:47 2025 GMT
Subject: CN=dc263e9eb1288b631f207d564b9c0ec779f0424f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:98:98:51:47:62:bf:e6:18:22:51:02:8f:06:
15:07:7e:50:1c:79:2e:24:76:78:17:ae:4b:67:2c:
32:21:0d:bf:27:1b:18:0d:48:a2:6a:73:03:00:f7:
ba:d3:61:2d:13:6b:00:44:3a:24:f4:36:70:64:e1:
e1:6c:2f:87:fc:ad:e8:6d:5b:dc:cc:67:9b:c0:3d:
4c:36:de:e2:32:c0:d7:d7:e6:dc:0c:2d:1d:4b:d8:
81:4a:c4:bd:0e:06:42:fe:fa:f8:02:a3:e0:ca:ea:
89:ac:c8:c9:1e:98:32:75:7e:6e:e0:db:97:d3:08:
5f:74:1e:be:93:02:ef:b3:02:b6:58:29:77:ed:2e:
2b:1d:a0:e7:b9:56:c0:e2:7c:27:e6:39:85:e1:22:
7b:2b:0a:e9:ad:f3:db:56:c2:ef:c6:54:02:70:a6:
54:7c:17:c4:12:e8:67:16:3b:fb:d6:87:9a:bc:ba:
79:f3:7b:30:c6:db:23:c4:cf:87:b6:ac:09:e1:9a:
1c:e9:d2:33:42:2b:bc:c7:0b:d0:c4:8b:40:94:87:
d4:0a:cd:f8:13:d6:02:f7:35:cf:b6:1c:7d:ae:5c:
cf:0a:ef:c6:ce:e2:70:db:88:73:1e:76:b7:99:97:
ff:e8:57:32:b4:06:4d:d9:51:92:66:d6:ff:06:e5:
24:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:26:3E:9E:B1:28:8B:63:1F:20:7D:56:4B:9C:0E:C7:79:F0:42:4F
X509v3 Authority Key Identifier:
keyid:AE:72:31:93:71:04:B2:69:00:7A:6C:A8:3C:7F:D9:29:EB:39:F4:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rnIxk3EEsmkAemyoPH_ZKes59Hc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/aeb1cc-2c4b-46ed-bc23-f35f0c6c46a9/1/rnIxk3EEsmkAemyoPH_ZKes59Hc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/aeb1cc-2c4b-46ed-bc23-f35f0c6c46a9/1/rnIxk3EEsmkAemyoPH_ZKes59Hc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:cf:37:53:03:12:fb:12:b3:35:64:9a:6e:f2:ad:cc:d3:9f:
cc:da:3c:23:04:00:0b:b8:72:67:75:fc:eb:3f:71:0d:a0:e6:
f1:0d:bd:a8:45:79:7c:52:9e:f7:c6:0e:ad:b7:1d:d0:5b:69:
ce:62:c8:6c:33:ba:10:7b:24:50:d2:b8:89:6c:1b:15:56:2c:
8a:5a:47:8f:af:0e:ca:e9:94:da:d1:40:54:03:40:57:d0:82:
0a:c3:aa:86:62:9d:cc:d2:fd:0a:37:6b:b4:01:03:2d:da:68:
5c:e9:2d:e4:96:1e:b9:64:4a:bd:fa:97:2b:33:38:4c:01:f1:
d0:46:de:ad:d3:b1:8d:dd:55:d8:f0:27:a3:8b:74:2d:07:48:
3f:63:3b:c4:fc:54:68:b1:fe:53:cd:09:68:5b:1c:90:21:54:
18:22:34:ac:d4:b2:c9:01:fb:79:ed:db:ee:0f:cc:0f:46:04:
81:d0:a6:5d:79:0b:24:72:0f:56:2e:e4:89:1c:22:2e:9c:99:
95:4e:9d:2c:e2:e2:ab:de:46:1c:87:cf:4a:f4:4e:99:a9:d8:
23:e3:a1:3f:14:07:c0:4a:ad:85:cf:78:f1:af:92:cf:c6:58:
65:eb:b5:43:f4:ca:e7:20:f3:10:8b:f7:cf:2c:f4:63:5e:c3:
b1:ce:c2:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:16:00 2025 by rpki-client