Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/be439e-d3c8-48a1-a7b7-c296ec4b2170/1/r5aNFt0rQdNStf0zxJs-xP2tQlg.mft
File: r5aNFt0rQdNStf0zxJs-xP2tQlg.mft (raw, json)
Hash identifier: Lcpn1/dwW3IWfenu2EIJrw1QOp1xN6yj1YSrA9Q5rDE=
Subject key identifier: C1:8D:E8:24:58:38:A5:88:C2:15:44:44:B7:25:10:68:C2:BF:4C:A1
Authority key identifier: AF:96:8D:16:DD:2B:41:D3:52:B5:FD:33:C4:9B:3E:C4:FD:AD:42:58
Certificate issuer: /CN=af968d16dd2b41d352b5fd33c49b3ec4fdad4258
Certificate serial: 019A4E4FEF796C687CE266A3001285CBD55E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r5aNFt0rQdNStf0zxJs-xP2tQlg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/be439e-d3c8-48a1-a7b7-c296ec4b2170/1/r5aNFt0rQdNStf0zxJs-xP2tQlg.mft
Manifest number: 101D
Signing time: Tue 04 Nov 2025 10:00:52 +0000
Manifest this update: Tue 04 Nov 2025 10:00:52 +0000
Manifest next update: Wed 05 Nov 2025 10:00:52 +0000
Files and hashes: 1: r5aNFt0rQdNStf0zxJs-xP2tQlg.crl (hash: +fdcCjIoHXAc8CIijZG2z5KtEaw0YX1HD9F/R5ltSz8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/be439e-d3c8-48a1-a7b7-c296ec4b2170/1/r5aNFt0rQdNStf0zxJs-xP2tQlg.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/be439e-d3c8-48a1-a7b7-c296ec4b2170/1/r5aNFt0rQdNStf0zxJs-xP2tQlg.mft
rsync://rpki.ripe.net/repository/DEFAULT/r5aNFt0rQdNStf0zxJs-xP2tQlg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:ef:79:6c:68:7c:e2:66:a3:00:12:85:cb:d5:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af968d16dd2b41d352b5fd33c49b3ec4fdad4258
Validity
Not Before: Nov 4 10:00:52 2025 GMT
Not After : Nov 5 10:00:52 2025 GMT
Subject: CN=c18de8245838a588c2154444b7251068c2bf4ca1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c6:f1:09:b8:e3:25:c8:e2:85:71:78:02:95:
1a:49:74:82:bf:69:0c:4e:27:3c:03:75:be:eb:8f:
11:b3:68:c5:5b:88:a3:41:c4:20:1c:23:f9:0c:56:
91:2f:89:70:4f:21:04:b7:37:03:f5:e6:33:9f:93:
62:ed:9e:cf:96:9e:df:60:ab:f9:36:15:3e:60:cc:
e2:c2:7b:45:9e:91:31:f8:6a:13:f9:10:f7:e7:0d:
be:df:dd:9e:f4:1a:b4:3d:b7:44:10:eb:cc:2e:50:
4c:db:05:7f:43:66:10:26:0a:ed:80:39:bf:68:5f:
8e:a6:72:64:7e:be:1a:88:de:0b:dc:67:56:40:f3:
23:ce:7a:58:07:69:85:3c:20:cc:a2:9f:ac:17:bd:
1b:16:bc:a5:71:9c:c2:9f:0f:a4:20:55:31:a4:ba:
1b:e5:d3:17:75:4b:02:73:6e:94:9f:47:21:cb:ff:
96:85:b0:6f:88:47:8f:ae:19:25:6b:e5:d3:69:53:
46:17:3f:58:7f:f2:2a:02:2d:5c:cc:7c:41:89:f3:
b2:80:72:3e:b4:db:e1:28:ff:67:ea:f1:4c:35:44:
3a:ab:74:e9:ce:c1:a4:e9:a4:71:2c:c5:d7:9c:58:
75:96:ae:be:95:0f:08:e5:e2:f9:38:f4:58:ed:1f:
fd:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:8D:E8:24:58:38:A5:88:C2:15:44:44:B7:25:10:68:C2:BF:4C:A1
X509v3 Authority Key Identifier:
keyid:AF:96:8D:16:DD:2B:41:D3:52:B5:FD:33:C4:9B:3E:C4:FD:AD:42:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r5aNFt0rQdNStf0zxJs-xP2tQlg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/be439e-d3c8-48a1-a7b7-c296ec4b2170/1/r5aNFt0rQdNStf0zxJs-xP2tQlg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/be439e-d3c8-48a1-a7b7-c296ec4b2170/1/r5aNFt0rQdNStf0zxJs-xP2tQlg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:04:c7:ed:41:b1:1a:e3:54:4c:18:90:ee:6d:4d:30:ea:7f:
34:7b:66:01:2d:8f:f4:9b:fa:f0:37:45:c4:23:4e:f9:1f:84:
10:fc:07:0d:6d:29:35:84:59:44:f5:55:a7:60:2a:af:22:28:
df:e8:e4:a6:f3:04:b6:ee:58:3f:62:f5:06:8b:d0:a7:e4:9d:
f6:5b:29:82:78:61:17:f3:e5:1d:bc:5f:f1:07:67:4b:18:6d:
5d:e5:6b:0e:a4:ac:fe:ce:6a:ab:9e:24:7b:83:39:3f:8c:7f:
25:3b:ab:bd:53:07:8b:a8:01:cb:2d:1f:e6:ad:21:6f:c9:e4:
dd:80:92:28:cc:a5:b0:b1:88:ba:a2:54:a5:58:eb:40:e1:5e:
e9:a0:5b:44:cd:5f:a9:81:ca:88:28:ed:94:a6:6f:aa:b3:c9:
da:33:2b:6a:af:e1:4e:49:a7:7b:04:e1:06:25:22:d5:31:eb:
e6:13:bf:a0:b7:2b:1c:e9:fa:85:18:6e:70:20:58:1f:ac:b1:
34:7f:4d:94:b9:0e:c8:a6:6b:84:ae:72:11:c1:87:93:2c:a6:
fc:5c:1c:28:ff:78:a5:13:45:bd:6d:86:46:91:43:0a:98:3e:
c1:4d:fc:65:0a:6c:6b:bc:5d:8d:0e:6f:8d:c3:f4:48:07:d4:
5a:c9:3e:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:54:06 2025 by rpki-client