Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/096cd4-1bb3-4c12-96a0-283f44240b67/1/EVWxb6nbe87sy4nR_iUmMsCXJRQ.mft
File: EVWxb6nbe87sy4nR_iUmMsCXJRQ.mft (raw, json)
Hash identifier: 3Jmy2goiCLbouCuMoCSXVEpnNPLjNXewN7iscAREGLM=
Subject key identifier: 10:2A:7A:C2:DE:A7:DA:E5:AE:8E:66:8F:A9:6E:A3:EF:00:1F:D2:0D
Authority key identifier: 11:55:B1:6F:A9:DB:7B:CE:EC:CB:89:D1:FE:25:26:32:C0:97:25:14
Certificate issuer: /CN=1155b16fa9db7bceeccb89d1fe252632c0972514
Certificate serial: 019A4D7489F87DA0E63617E447DCFE70B674
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EVWxb6nbe87sy4nR_iUmMsCXJRQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/096cd4-1bb3-4c12-96a0-283f44240b67/1/EVWxb6nbe87sy4nR_iUmMsCXJRQ.mft
Manifest number: 1104
Signing time: Tue 04 Nov 2025 06:01:14 +0000
Manifest this update: Tue 04 Nov 2025 06:01:14 +0000
Manifest next update: Wed 05 Nov 2025 06:01:14 +0000
Files and hashes: 1: EVWxb6nbe87sy4nR_iUmMsCXJRQ.crl (hash: J7iaM5rVq1YaJr1aXGuX0mf5UBssbQ5YjvpSx0YqPuU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/096cd4-1bb3-4c12-96a0-283f44240b67/1/EVWxb6nbe87sy4nR_iUmMsCXJRQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/096cd4-1bb3-4c12-96a0-283f44240b67/1/EVWxb6nbe87sy4nR_iUmMsCXJRQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/EVWxb6nbe87sy4nR_iUmMsCXJRQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:74:89:f8:7d:a0:e6:36:17:e4:47:dc:fe:70:b6:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1155b16fa9db7bceeccb89d1fe252632c0972514
Validity
Not Before: Nov 4 06:01:14 2025 GMT
Not After : Nov 5 06:01:14 2025 GMT
Subject: CN=102a7ac2dea7dae5ae8e668fa96ea3ef001fd20d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d8:b6:ad:69:2a:7c:8a:c4:74:5f:80:61:ca:
de:05:4c:fb:48:72:c2:1d:7d:79:fa:31:bf:f5:d2:
1f:36:98:fc:9c:b8:49:c9:88:bd:60:96:6e:fc:6e:
e4:fb:f0:09:22:e4:55:c0:c3:37:cb:0b:65:33:d2:
8a:b7:50:bc:12:65:4e:7c:63:ec:8e:89:f4:37:6e:
3f:54:d5:a6:f9:26:27:e5:75:37:b1:11:72:86:5f:
ca:98:6c:4d:91:ff:8e:da:1f:35:65:30:5b:fc:63:
ff:e2:dc:14:a4:89:1c:57:54:b7:01:88:71:be:16:
3e:b2:30:15:bd:9d:a0:6a:53:04:d2:3f:13:02:5f:
f3:65:b0:f5:71:28:49:e1:f3:56:5b:d4:6e:a5:fd:
d1:32:e3:fc:0b:dd:18:03:09:49:22:93:79:41:7c:
27:bc:2a:a7:b2:a8:19:ef:a1:fb:5f:d3:d7:d1:6a:
2f:93:0a:b1:54:96:ba:2b:b6:ac:48:d1:c6:ca:59:
cc:2a:ba:79:95:dc:66:b3:10:2d:17:9a:33:60:67:
55:0e:c6:5c:c5:6b:16:d5:3a:34:7c:1b:65:47:05:
82:e0:93:e2:ea:1a:ce:b1:c4:90:85:db:25:d4:17:
77:01:65:86:c9:d2:64:5e:01:6c:4d:9f:b8:b7:4f:
8e:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:2A:7A:C2:DE:A7:DA:E5:AE:8E:66:8F:A9:6E:A3:EF:00:1F:D2:0D
X509v3 Authority Key Identifier:
keyid:11:55:B1:6F:A9:DB:7B:CE:EC:CB:89:D1:FE:25:26:32:C0:97:25:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EVWxb6nbe87sy4nR_iUmMsCXJRQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/096cd4-1bb3-4c12-96a0-283f44240b67/1/EVWxb6nbe87sy4nR_iUmMsCXJRQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/096cd4-1bb3-4c12-96a0-283f44240b67/1/EVWxb6nbe87sy4nR_iUmMsCXJRQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:38:9d:fd:6c:4b:e7:5a:9e:4b:38:53:62:6b:9c:d1:a2:ac:
9c:f9:bc:48:ca:23:64:ff:c1:19:f9:68:79:d8:72:d1:71:ed:
c6:e2:5d:2c:c8:17:f7:51:c5:9c:0b:62:76:fe:e4:6d:0e:33:
6e:72:45:4b:a4:39:b2:10:59:78:99:de:4d:fe:2d:d7:28:6f:
df:b6:79:fe:32:53:53:da:be:11:42:63:5d:5e:6a:d4:44:bf:
6b:27:69:94:cd:28:50:da:d1:31:2c:c4:e7:64:88:30:54:84:
d0:1a:91:87:e9:8e:98:b5:14:d8:3c:77:46:9c:8c:61:8c:88:
5c:05:98:c6:93:12:08:3c:62:18:69:08:e5:eb:41:be:00:28:
b7:ab:2a:fc:e3:b9:95:f6:17:04:62:d6:46:0c:df:9b:d5:3c:
5d:39:02:b0:90:30:bc:1d:ef:2c:83:b1:b6:1d:0e:b6:0b:c4:
1f:ca:eb:44:4b:7f:0e:7c:71:33:f7:d2:be:b8:1c:af:c6:8b:
17:a4:3f:09:58:c1:5e:86:90:de:33:ec:21:8d:42:ac:1f:27:
2b:f8:0e:da:93:7f:7a:ae:c9:81:53:30:51:40:36:cf:86:66:
6f:89:de:d1:51:29:1f:14:17:92:6a:18:bb:3d:b8:f2:8d:82:
a3:43:42:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:42:04 2025 by rpki-client