Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/38eee8-7b5b-4323-8fa5-4cac2c20753a/1/MfEkvY8Uu5ikiEnFIFg3Mjv8-Ew.mft
File: MfEkvY8Uu5ikiEnFIFg3Mjv8-Ew.mft (raw, json)
Hash identifier: Jw+xRB30xcBRcawyoz5wkFrG08Y7kyie5CIICqq2M0w=
Subject key identifier: 26:59:30:CA:1F:A0:D0:E3:7B:1A:EE:0A:20:9D:D5:BC:6C:57:68:83
Authority key identifier: 31:F1:24:BD:8F:14:BB:98:A4:88:49:C5:20:58:37:32:3B:FC:F8:4C
Certificate issuer: /CN=31f124bd8f14bb98a48849c5205837323bfcf84c
Certificate serial: 019A4DE217B163889905731255C7331F156D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MfEkvY8Uu5ikiEnFIFg3Mjv8-Ew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/38eee8-7b5b-4323-8fa5-4cac2c20753a/1/MfEkvY8Uu5ikiEnFIFg3Mjv8-Ew.mft
Manifest number: 052D
Signing time: Tue 04 Nov 2025 08:00:54 +0000
Manifest this update: Tue 04 Nov 2025 08:00:54 +0000
Manifest next update: Wed 05 Nov 2025 08:00:54 +0000
Files and hashes: 1: MfEkvY8Uu5ikiEnFIFg3Mjv8-Ew.crl (hash: YElpGoX4PXFVVDS0CRnN5x/egkaQaWCi2GyMSM4gTJE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/38eee8-7b5b-4323-8fa5-4cac2c20753a/1/MfEkvY8Uu5ikiEnFIFg3Mjv8-Ew.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/38eee8-7b5b-4323-8fa5-4cac2c20753a/1/MfEkvY8Uu5ikiEnFIFg3Mjv8-Ew.mft
rsync://rpki.ripe.net/repository/DEFAULT/MfEkvY8Uu5ikiEnFIFg3Mjv8-Ew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e2:17:b1:63:88:99:05:73:12:55:c7:33:1f:15:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31f124bd8f14bb98a48849c5205837323bfcf84c
Validity
Not Before: Nov 4 08:00:54 2025 GMT
Not After : Nov 5 08:00:54 2025 GMT
Subject: CN=265930ca1fa0d0e37b1aee0a209dd5bc6c576883
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:b3:1a:18:3c:85:5f:b9:5c:13:23:8e:d6:0f:
3c:99:81:1e:34:cb:de:79:13:49:b4:75:64:9f:11:
6c:aa:fd:ca:05:55:7d:81:a5:ec:d0:95:f7:fa:50:
71:1c:52:b7:e4:e4:a0:fa:b7:bd:52:31:ef:49:23:
3b:2a:61:a3:c1:2f:0a:6f:ac:aa:13:a3:7a:ea:5c:
e0:34:55:07:66:8b:5f:94:06:b5:2f:1a:4f:86:f3:
18:fb:31:c8:2b:0a:fb:72:5f:2f:99:d3:bb:11:f0:
e9:a7:b0:b3:30:32:b8:17:ca:d6:08:64:b4:af:eb:
4d:8f:46:b5:5a:ca:7d:0f:40:6c:62:f0:3d:e0:03:
4a:ac:fd:0e:c1:80:2e:7d:1e:76:64:fb:02:de:e4:
9d:f6:36:5f:43:9f:82:b4:be:9b:34:dc:58:52:ef:
9a:3a:3a:e3:02:3e:3b:ad:ec:30:7f:f2:ba:79:12:
55:40:2f:43:f2:09:38:c7:61:10:36:af:e7:09:a8:
0d:1f:65:6f:98:b3:3a:00:cf:9a:b7:e5:6a:35:05:
3d:3c:9f:f8:91:15:e0:49:6d:fc:b8:f5:51:58:d8:
14:41:69:0f:8e:e5:73:53:25:e5:78:31:ae:e0:73:
1b:35:be:d0:d4:96:3d:fd:8e:4a:84:cf:07:e8:8f:
06:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:59:30:CA:1F:A0:D0:E3:7B:1A:EE:0A:20:9D:D5:BC:6C:57:68:83
X509v3 Authority Key Identifier:
keyid:31:F1:24:BD:8F:14:BB:98:A4:88:49:C5:20:58:37:32:3B:FC:F8:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MfEkvY8Uu5ikiEnFIFg3Mjv8-Ew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/38eee8-7b5b-4323-8fa5-4cac2c20753a/1/MfEkvY8Uu5ikiEnFIFg3Mjv8-Ew.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/38eee8-7b5b-4323-8fa5-4cac2c20753a/1/MfEkvY8Uu5ikiEnFIFg3Mjv8-Ew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:81:ff:8b:9d:93:e2:5a:57:eb:cc:97:66:a2:d3:aa:23:02:
fe:9b:53:96:3d:aa:c8:74:56:bd:4e:ca:78:af:83:a5:97:11:
cf:f7:36:21:99:44:7f:69:3d:32:ca:ba:4d:25:30:6f:98:e5:
26:2d:ae:ac:c3:b3:b4:22:a1:cd:ac:a0:a7:8e:87:3c:69:25:
1c:cf:dc:53:21:07:57:e9:2a:73:ae:c1:48:8f:fb:06:c9:3b:
81:df:6e:36:10:b7:24:07:94:70:3c:52:69:ff:71:05:c6:fd:
2f:18:17:5b:47:cf:97:62:d6:c3:da:28:86:ef:79:63:68:0a:
e4:a9:52:a7:ae:00:d9:57:74:88:09:7f:41:8f:0b:4b:64:0e:
31:aa:5d:8a:51:2b:d6:3f:b4:64:16:b8:38:ba:4d:89:77:88:
05:0a:55:35:a8:11:33:3c:fb:0f:a1:62:34:de:11:e7:eb:4b:
fa:51:db:ad:49:5b:fb:5f:fb:f0:f7:53:58:26:e9:77:33:2b:
83:f6:7c:88:fd:a6:00:b1:fc:3e:6a:93:31:96:18:6b:d1:e9:
fc:16:d5:93:c8:b8:8b:27:1c:bb:33:01:14:df:59:1a:43:16:
95:18:44:66:e6:78:ac:e3:28:e0:8f:16:f1:ce:a6:6d:ea:ac:
c4:10:ff:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:51:15 2025 by rpki-client