Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/2ae088-69c8-477d-a4bf-877d3fac2667/1/44VzMhOzQjYBmhQP8ZxTmO1xcw4.mft
File: 44VzMhOzQjYBmhQP8ZxTmO1xcw4.mft (raw, json)
Hash identifier: YoQ9YxikRn8mDWQBqwzRABHKsAn9xB/Gx7Z59yNHUug=
Subject key identifier: D7:5B:75:87:57:C6:37:28:D2:D3:2F:E5:CC:0F:9E:EB:EC:84:6A:5E
Authority key identifier: E3:85:73:32:13:B3:42:36:01:9A:14:0F:F1:9C:53:98:ED:71:73:0E
Certificate issuer: /CN=e385733213b34236019a140ff19c5398ed71730e
Certificate serial: 019A4DE21936CA827C2345798C94396B59EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/44VzMhOzQjYBmhQP8ZxTmO1xcw4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/2ae088-69c8-477d-a4bf-877d3fac2667/1/44VzMhOzQjYBmhQP8ZxTmO1xcw4.mft
Manifest number: 0DDE
Signing time: Tue 04 Nov 2025 08:00:54 +0000
Manifest this update: Tue 04 Nov 2025 08:00:54 +0000
Manifest next update: Wed 05 Nov 2025 08:00:54 +0000
Files and hashes: 1: 44VzMhOzQjYBmhQP8ZxTmO1xcw4.crl (hash: g/mYmyuxtRRUaduJDaciJo/5pnlAzB47MUVOWCi1PLk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/2ae088-69c8-477d-a4bf-877d3fac2667/1/44VzMhOzQjYBmhQP8ZxTmO1xcw4.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/2ae088-69c8-477d-a4bf-877d3fac2667/1/44VzMhOzQjYBmhQP8ZxTmO1xcw4.mft
rsync://rpki.ripe.net/repository/DEFAULT/44VzMhOzQjYBmhQP8ZxTmO1xcw4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e2:19:36:ca:82:7c:23:45:79:8c:94:39:6b:59:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e385733213b34236019a140ff19c5398ed71730e
Validity
Not Before: Nov 4 08:00:54 2025 GMT
Not After : Nov 5 08:00:54 2025 GMT
Subject: CN=d75b758757c63728d2d32fe5cc0f9eebec846a5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:b2:30:06:3c:1b:0f:ef:7c:e6:c9:1e:2d:c2:
14:4e:23:8b:56:e4:38:7c:94:c2:c7:30:29:2d:56:
a8:16:b2:53:52:1f:08:f2:ec:89:e3:46:c6:c2:dc:
93:da:e8:6c:ac:2d:d7:bb:10:1f:34:34:7e:02:47:
2e:0a:b7:0d:21:10:be:82:71:ae:68:ea:df:29:7c:
67:30:57:8b:78:b6:89:5b:3a:69:28:af:9f:8e:03:
b7:46:45:2e:69:47:16:eb:49:ca:b9:1a:9b:80:ef:
06:b6:ca:40:ec:90:1a:41:9c:e0:72:95:91:1b:64:
d3:24:47:2f:7f:43:b8:fa:24:0a:2a:55:a2:89:5e:
6b:32:11:c5:fb:89:dc:28:d4:23:c2:38:55:b7:16:
8c:66:9f:3b:40:bb:08:a5:6f:02:82:50:1a:9e:d9:
a2:dc:01:40:47:ce:da:17:e1:ac:82:5d:01:b0:68:
96:7f:70:9c:45:cb:e7:d2:84:5f:5e:4b:41:c9:1c:
53:bc:aa:a7:8c:9a:f1:a9:ed:64:7c:4f:88:e0:50:
93:1e:99:dc:98:b3:6c:52:41:96:2a:89:53:8f:30:
03:b1:1f:af:b6:9d:d4:e6:08:d1:47:f3:bd:5e:f5:
d6:36:c1:16:1e:f9:68:67:e5:42:70:d3:dd:8e:f8:
58:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:5B:75:87:57:C6:37:28:D2:D3:2F:E5:CC:0F:9E:EB:EC:84:6A:5E
X509v3 Authority Key Identifier:
keyid:E3:85:73:32:13:B3:42:36:01:9A:14:0F:F1:9C:53:98:ED:71:73:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/44VzMhOzQjYBmhQP8ZxTmO1xcw4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/2ae088-69c8-477d-a4bf-877d3fac2667/1/44VzMhOzQjYBmhQP8ZxTmO1xcw4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/2ae088-69c8-477d-a4bf-877d3fac2667/1/44VzMhOzQjYBmhQP8ZxTmO1xcw4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:ee:ca:5a:92:c8:cc:f2:68:e6:be:9a:ac:fe:84:13:d4:75:
d9:55:25:e5:d5:d8:51:51:d8:b8:5e:88:3e:2e:76:fe:b3:60:
94:af:f6:81:1f:1b:6e:73:58:50:e4:f7:25:de:d4:4b:cb:78:
bb:03:b0:cb:ea:bd:36:54:ee:df:88:4f:46:e9:de:62:d0:e6:
94:c2:b6:e4:3f:7d:79:1b:98:bf:72:00:6c:42:74:01:fb:96:
38:18:e3:02:a8:a4:43:d5:aa:f7:fe:c6:4d:4c:31:a9:23:53:
c2:96:24:95:b1:49:db:f5:a3:48:eb:db:02:dc:35:08:bb:12:
0e:fa:37:ec:e8:28:60:3b:99:a0:6d:3e:f6:f7:43:d7:99:e2:
bf:08:8b:79:5d:ba:fc:83:29:7b:a9:a5:f9:5b:10:08:7a:ed:
cd:29:33:c0:a5:09:e2:b1:56:72:18:f1:15:ec:c9:b5:90:a9:
f7:00:27:51:a8:ea:69:ad:b6:f1:0e:2c:6f:6a:03:87:5c:41:
8d:70:8d:29:93:7e:2a:22:6b:94:38:2f:35:6d:78:a8:6a:57:
a4:92:18:4f:7c:f3:64:ab:c8:83:38:3f:96:5f:c1:08:38:0e:
8e:7a:61:1a:21:0b:57:bf:dd:2b:93:95:0c:e2:96:26:ad:8e:
30:e4:a2:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:48:48 2025 by rpki-client