Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/265062-d6ae-4582-aacd-ec76901b6f31/1/65fOljUzDxRxFMZG72qTR9aJFjs.mft
File: 65fOljUzDxRxFMZG72qTR9aJFjs.mft (raw, json)
Hash identifier: +j/px/ZxxIwTQaO3JBnPfOrHQl7bYGnWeDRi04FGeO0=
Subject key identifier: 76:D4:AC:34:91:7D:ED:FB:21:80:AE:64:EE:DF:51:6C:25:E3:A0:AA
Authority key identifier: EB:97:CE:96:35:33:0F:14:71:14:C6:46:EF:6A:93:47:D6:89:16:3B
Certificate issuer: /CN=eb97ce9635330f147114c646ef6a9347d689163b
Certificate serial: 019A4DE180075B7FCDDD4304C08DC4F0B52A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/65fOljUzDxRxFMZG72qTR9aJFjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/265062-d6ae-4582-aacd-ec76901b6f31/1/65fOljUzDxRxFMZG72qTR9aJFjs.mft
Manifest number: 169B
Signing time: Tue 04 Nov 2025 08:00:15 +0000
Manifest this update: Tue 04 Nov 2025 08:00:15 +0000
Manifest next update: Wed 05 Nov 2025 08:00:15 +0000
Files and hashes: 1: 65fOljUzDxRxFMZG72qTR9aJFjs.crl (hash: PlZ8EQs2aae/PNPcHfdKtuGSlVIE/xtFuxk1VbSWRN4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/265062-d6ae-4582-aacd-ec76901b6f31/1/65fOljUzDxRxFMZG72qTR9aJFjs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/265062-d6ae-4582-aacd-ec76901b6f31/1/65fOljUzDxRxFMZG72qTR9aJFjs.mft
rsync://rpki.ripe.net/repository/DEFAULT/65fOljUzDxRxFMZG72qTR9aJFjs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:80:07:5b:7f:cd:dd:43:04:c0:8d:c4:f0:b5:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb97ce9635330f147114c646ef6a9347d689163b
Validity
Not Before: Nov 4 08:00:15 2025 GMT
Not After : Nov 5 08:00:15 2025 GMT
Subject: CN=76d4ac34917dedfb2180ae64eedf516c25e3a0aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:f2:0c:78:ef:6b:66:e5:51:b2:af:f1:7f:b7:
90:6e:22:d8:c5:eb:bd:7e:9e:73:90:1c:58:8b:f3:
eb:be:04:51:ce:e6:6c:6c:5e:95:4d:3b:2b:45:58:
cf:78:3b:73:06:b0:d3:5f:76:d4:5e:f7:5e:09:05:
38:8b:5f:51:0c:33:26:8e:0f:08:2f:51:1c:81:0f:
19:e9:6c:6b:33:7e:3a:29:f4:1a:5c:7e:35:9e:11:
b4:36:d1:ac:ab:7a:a8:82:fe:7c:7a:e4:4c:8e:ae:
d4:ea:8d:e1:b1:a3:11:ca:66:40:92:c9:ad:bf:80:
6a:eb:f2:02:c9:e5:c8:9f:92:9c:55:5a:bf:4e:7d:
56:da:d3:a9:2c:e0:53:f0:5b:57:52:31:6c:0c:2c:
d7:8a:c9:14:ba:fe:2b:18:17:0d:67:70:f7:7f:5b:
14:17:93:a3:83:6b:95:01:cc:05:8b:8b:8c:1b:fa:
88:bd:90:04:20:be:d2:3e:51:25:f7:2c:12:08:36:
52:94:8f:7e:5a:a6:e5:4c:1c:fb:a3:2f:57:75:25:
de:df:93:12:3d:4d:7b:d2:75:bf:d8:a8:bd:d7:d8:
79:89:b5:b6:4f:da:c7:98:fd:b7:4a:54:56:e9:72:
42:bb:e6:f3:db:a5:76:45:75:53:57:0d:bf:41:06:
98:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:D4:AC:34:91:7D:ED:FB:21:80:AE:64:EE:DF:51:6C:25:E3:A0:AA
X509v3 Authority Key Identifier:
keyid:EB:97:CE:96:35:33:0F:14:71:14:C6:46:EF:6A:93:47:D6:89:16:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/65fOljUzDxRxFMZG72qTR9aJFjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/265062-d6ae-4582-aacd-ec76901b6f31/1/65fOljUzDxRxFMZG72qTR9aJFjs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/265062-d6ae-4582-aacd-ec76901b6f31/1/65fOljUzDxRxFMZG72qTR9aJFjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:d2:81:27:aa:04:7f:4f:15:ce:78:dd:dc:84:97:40:74:6e:
db:44:a4:94:d5:44:ef:ec:b2:19:df:5f:19:3a:3e:40:88:87:
c7:bf:2c:b1:67:db:11:93:04:f6:d4:5c:c3:d1:46:2a:98:ba:
de:cb:c7:e4:4e:55:7c:ae:2c:8b:85:14:74:04:ea:4a:c3:e0:
2c:c8:20:44:57:1d:79:fc:e7:e5:ed:8c:16:b5:f8:d0:ef:77:
7e:97:fd:0f:c8:3b:ca:ca:1c:c7:d5:7e:1f:64:2c:15:3b:04:
4c:8e:f1:9b:16:9a:6b:8d:65:c4:8f:a9:c7:9e:c0:b4:f3:10:
9a:5d:f7:48:34:00:be:6c:fe:1b:73:3a:24:df:5f:6e:07:c9:
40:eb:ce:55:c3:6d:c6:01:9b:57:b9:f2:49:73:b9:88:e4:c7:
6f:1b:f4:0b:00:8d:b6:1e:41:cf:1c:fd:a6:89:2f:dc:eb:eb:
2c:1e:8b:e0:70:96:dd:2e:03:a6:2d:98:a4:e5:53:a1:e3:7f:
c1:bd:54:0a:28:90:f8:77:a1:8e:af:75:49:e1:3d:00:56:7e:
bf:50:ba:f1:8b:54:0f:97:aa:cb:1d:12:17:b1:64:70:a4:c7:
a1:4e:83:17:a2:21:4b:27:c5:13:69:76:67:e2:d9:bc:a0:81:
2c:0a:4e:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:53:56 2025 by rpki-client