Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f62ef-32ef-44f7-b412-1b186b6fcf41/1/1-cEFknmJ7EHAiQOtjNVqidrovl0.mft
File: 1-cEFknmJ7EHAiQOtjNVqidrovl0.mft (raw, json)
Hash identifier: Eb1iCNUHin6Z6Pq0VtiY0ILtCRUdro/tYJgeiZlt7lY=
Subject key identifier: 16:C1:27:01:75:9D:81:AB:2B:F1:52:DC:25:58:3E:A0:EB:B0:E1:E7
Authority key identifier: F9:C1:05:92:79:89:EC:41:C0:89:03:AD:8C:D5:6A:89:DA:E8:BE:5D
Certificate issuer: /CN=f9c105927989ec41c08903ad8cd56a89dae8be5d
Certificate serial: 019A4EF55BB452423B38475E9EB8F32A22A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-cEFknmJ7EHAiQOtjNVqidrovl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f62ef-32ef-44f7-b412-1b186b6fcf41/1/1-cEFknmJ7EHAiQOtjNVqidrovl0.mft
Manifest number: 170A
Signing time: Tue 04 Nov 2025 13:01:33 +0000
Manifest this update: Tue 04 Nov 2025 13:01:33 +0000
Manifest next update: Wed 05 Nov 2025 13:01:33 +0000
Files and hashes: 1: 1-cEFknmJ7EHAiQOtjNVqidrovl0.crl (hash: v0z8lguJKjeIO8wNbmAW1VOchEW9XZ0USUEK6RMEiFg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/5f62ef-32ef-44f7-b412-1b186b6fcf41/1/1-cEFknmJ7EHAiQOtjNVqidrovl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/5f62ef-32ef-44f7-b412-1b186b6fcf41/1/1-cEFknmJ7EHAiQOtjNVqidrovl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-cEFknmJ7EHAiQOtjNVqidrovl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:5b:b4:52:42:3b:38:47:5e:9e:b8:f3:2a:22:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9c105927989ec41c08903ad8cd56a89dae8be5d
Validity
Not Before: Nov 4 13:01:33 2025 GMT
Not After : Nov 5 13:01:33 2025 GMT
Subject: CN=16c12701759d81ab2bf152dc25583ea0ebb0e1e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:37:fc:73:19:df:b6:a4:4d:33:1e:b0:1e:41:
c4:bc:77:6f:68:ad:5c:76:fd:65:d5:ad:da:78:1c:
91:ff:50:b9:69:7c:80:1b:90:f4:7b:97:04:3f:f0:
2e:39:33:14:47:8f:89:5e:8f:28:4e:df:49:ca:cc:
11:1c:14:7f:d6:eb:ee:b0:2b:b9:71:6c:e3:31:4f:
ca:87:d5:22:3f:b8:aa:91:b4:62:8b:23:91:4e:d4:
1b:11:d5:73:8e:d1:7c:5f:e1:a6:ed:34:30:77:ee:
51:57:08:4b:39:70:e8:62:e1:56:91:96:72:d2:dd:
9f:ab:df:e1:fa:3e:ec:27:3e:1a:3d:90:0d:3a:84:
b7:e7:37:65:7e:95:a4:09:cd:45:5a:e2:1f:58:d0:
91:ae:5a:90:ac:66:22:85:ae:b1:ba:55:bd:05:67:
f0:c3:b6:3a:4a:de:e4:b3:eb:41:b3:60:33:7f:60:
64:14:f2:ba:4e:86:87:59:d8:22:78:70:b6:57:27:
80:43:92:ec:a9:4e:35:b8:3d:28:52:55:f0:d7:a9:
81:5c:13:3e:5e:10:f8:d3:f8:31:82:e4:ba:ee:9b:
56:71:7e:83:d5:bf:76:5c:24:81:80:46:43:4e:bf:
71:53:d1:e8:49:f9:cd:55:ba:25:a1:83:de:d2:8e:
ca:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:C1:27:01:75:9D:81:AB:2B:F1:52:DC:25:58:3E:A0:EB:B0:E1:E7
X509v3 Authority Key Identifier:
keyid:F9:C1:05:92:79:89:EC:41:C0:89:03:AD:8C:D5:6A:89:DA:E8:BE:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-cEFknmJ7EHAiQOtjNVqidrovl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f62ef-32ef-44f7-b412-1b186b6fcf41/1/1-cEFknmJ7EHAiQOtjNVqidrovl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f62ef-32ef-44f7-b412-1b186b6fcf41/1/1-cEFknmJ7EHAiQOtjNVqidrovl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:21:cd:5e:2e:49:51:52:06:4e:e0:bc:ac:d4:4b:8b:68:83:
c1:64:8b:86:80:7c:2f:dc:4a:ff:98:26:f4:d0:14:7a:17:69:
f2:d0:c4:67:74:e3:db:bf:df:08:7e:38:58:3c:39:24:3c:20:
ba:77:20:b4:88:00:4b:bd:b4:e7:ad:e0:fd:b5:7f:76:98:62:
fe:9b:31:b8:0a:ec:a2:d1:09:dc:9a:f7:63:44:e1:9e:3b:be:
b4:fa:8c:d1:19:0c:04:97:da:75:60:d4:11:dc:39:f4:58:68:
2d:1c:59:7c:cd:3f:41:7c:c2:2c:4c:8d:a8:a4:f8:40:15:b2:
34:2e:25:2d:a2:6d:72:79:b2:25:1d:c3:61:db:9f:c3:fa:12:
77:bf:42:c6:ef:fd:42:f3:bf:42:1f:51:eb:b3:7f:f7:95:37:
67:ec:56:03:35:4c:22:68:a4:e9:c0:33:4c:4c:f7:e7:48:9e:
76:8d:83:97:88:9e:a8:0f:22:f2:84:02:db:8d:26:2b:86:17:
a2:43:c9:28:2b:7b:31:ab:4d:b1:51:c9:43:5d:81:27:40:df:
83:ce:ee:d1:e3:10:fc:4f:77:9c:d0:fc:a2:f6:98:00:b6:9a:
7a:7c:58:9a:ff:15:cc:1c:72:0a:1d:22:3d:77:d2:5f:ac:8c:
75:e6:2d:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:54:34 2025 by rpki-client