Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/7a83bd-2bfd-4c68-bea3-b41ad1069a3c/1/11d1Kggad4_B0s7hsNaqRdUaLEk.mft
File: 11d1Kggad4_B0s7hsNaqRdUaLEk.mft (raw, json)
Hash identifier: uP6HDij5654nltsyDr/DvMTn6lOP2FSII9JCV76v5hE=
Subject key identifier: AF:53:87:1A:C4:E6:27:EA:15:90:02:50:EB:94:95:AE:17:3F:A8:F5
Authority key identifier: D7:57:75:2A:08:1A:77:8F:C1:D2:CE:E1:B0:D6:AA:45:D5:1A:2C:49
Certificate issuer: /CN=d757752a081a778fc1d2cee1b0d6aa45d51a2c49
Certificate serial: 019A53E3B7F3D82DA0E851993DD06450B0DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/11d1Kggad4_B0s7hsNaqRdUaLEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/7a83bd-2bfd-4c68-bea3-b41ad1069a3c/1/11d1Kggad4_B0s7hsNaqRdUaLEk.mft
Manifest number: 170D
Signing time: Wed 05 Nov 2025 12:00:23 +0000
Manifest this update: Wed 05 Nov 2025 12:00:23 +0000
Manifest next update: Thu 06 Nov 2025 12:00:23 +0000
Files and hashes: 1: 11d1Kggad4_B0s7hsNaqRdUaLEk.crl (hash: wT07rwKSFRIRvA+Tl24j0PDAiFrEnNiEMG5RWoo4xVs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/7a83bd-2bfd-4c68-bea3-b41ad1069a3c/1/11d1Kggad4_B0s7hsNaqRdUaLEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/7a83bd-2bfd-4c68-bea3-b41ad1069a3c/1/11d1Kggad4_B0s7hsNaqRdUaLEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/11d1Kggad4_B0s7hsNaqRdUaLEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:e3:b7:f3:d8:2d:a0:e8:51:99:3d:d0:64:50:b0:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d757752a081a778fc1d2cee1b0d6aa45d51a2c49
Validity
Not Before: Nov 5 12:00:23 2025 GMT
Not After : Nov 6 12:00:23 2025 GMT
Subject: CN=af53871ac4e627ea15900250eb9495ae173fa8f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f8:9f:12:23:88:ae:ec:fd:4e:db:a3:63:85:
aa:98:90:84:a6:57:b9:31:6f:eb:99:8d:c3:2c:64:
53:02:80:4d:ad:9e:e9:bf:15:3e:27:d4:a1:bc:2d:
c3:11:be:cd:bc:d5:9c:de:b0:59:f2:dc:92:a2:d8:
11:dc:3a:de:cd:19:4a:34:e2:42:b0:50:4b:2e:91:
03:13:a7:4e:b5:2b:89:3b:7e:8a:47:ad:db:f9:d8:
24:d5:d0:3f:29:08:f3:7a:da:e3:aa:be:fe:54:bb:
d3:5e:92:ea:04:b2:a5:bc:b8:fd:30:ee:0a:5b:03:
ed:f4:60:28:3f:2a:e7:6b:7f:95:89:d9:7d:b0:95:
45:34:c6:30:1f:b0:93:3b:40:59:15:36:08:43:1f:
2e:e1:5f:9c:88:ed:04:08:22:e0:d7:75:44:39:18:
5e:11:6e:22:e6:97:e2:d7:27:aa:42:3e:04:90:c0:
3c:1c:b9:72:99:89:eb:60:9f:cc:1a:09:b7:12:18:
db:d1:e4:7f:6d:35:84:2f:a8:c6:1f:41:91:77:d2:
9e:af:49:0b:65:6c:d9:4f:fc:c4:3e:d4:a4:b8:2f:
4c:26:05:05:e8:96:e7:b8:62:a9:43:65:84:c4:43:
18:26:6f:37:ba:db:fe:f7:4c:ac:a6:a3:21:9f:01:
07:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:53:87:1A:C4:E6:27:EA:15:90:02:50:EB:94:95:AE:17:3F:A8:F5
X509v3 Authority Key Identifier:
keyid:D7:57:75:2A:08:1A:77:8F:C1:D2:CE:E1:B0:D6:AA:45:D5:1A:2C:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/11d1Kggad4_B0s7hsNaqRdUaLEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/7a83bd-2bfd-4c68-bea3-b41ad1069a3c/1/11d1Kggad4_B0s7hsNaqRdUaLEk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/7a83bd-2bfd-4c68-bea3-b41ad1069a3c/1/11d1Kggad4_B0s7hsNaqRdUaLEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:05:3e:c0:67:6c:be:c1:e6:8f:3e:0f:fb:13:99:05:ce:92:
4b:ac:0f:4a:cc:37:c6:ca:85:93:1f:1b:dc:78:c0:9f:10:b8:
36:b6:b2:0e:62:6e:9c:1c:58:98:72:d1:db:89:46:20:fc:db:
57:91:f1:ed:e1:03:dd:bb:8f:a6:82:4d:31:a0:ea:8c:8a:25:
00:91:13:c7:63:13:fb:cc:ba:ed:fb:a2:ee:ee:b6:f7:74:b2:
72:eb:09:83:26:f9:12:bc:0e:05:e8:f0:81:72:3f:b1:63:25:
d1:16:b7:80:d0:26:21:de:44:ad:0e:a4:9e:dc:59:50:81:35:
e6:c0:39:ce:6c:86:70:6c:db:47:ae:36:f7:77:f8:d0:0a:67:
c6:e5:31:c4:ae:f8:f8:a1:73:f6:97:b9:f3:18:5d:0a:61:61:
6b:9f:b0:f6:35:79:f6:1d:10:52:54:40:89:1d:04:4b:7c:08:
e4:30:af:5f:a0:90:d8:5c:74:7d:70:6b:c6:23:2d:75:7a:d7:
e0:f5:ef:c4:72:2d:26:77:52:0b:a7:70:6a:09:fe:bd:69:df:
5f:c3:00:49:a4:83:f0:57:ce:16:b2:d8:cf:7e:d7:0c:c9:6f:
c3:6a:68:bd:38:80:99:52:36:45:f5:3a:b9:13:e2:e5:f3:24:
5b:ae:35:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 14:04:53 2025 by rpki-client