Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/37a002-2071-44ec-bf50-29ca16576ede/1/r2sB3cUdknQsPMSisx3H_Bg75X8.mft
File: r2sB3cUdknQsPMSisx3H_Bg75X8.mft (raw, json)
Hash identifier: chYg9TobxJh7qFxLZE3DVFLc1BVQfkmzugHdoqcFlT8=
Subject key identifier: 0B:FF:DC:32:B0:84:59:B2:D6:26:50:44:89:AE:6C:B2:15:65:1E:34
Authority key identifier: AF:6B:01:DD:C5:1D:92:74:2C:3C:C4:A2:B3:1D:C7:FC:18:3B:E5:7F
Certificate issuer: /CN=af6b01ddc51d92742c3cc4a2b31dc7fc183be57f
Certificate serial: 019A4C61130B4A740D58BD6FC3D36B767C30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r2sB3cUdknQsPMSisx3H_Bg75X8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/37a002-2071-44ec-bf50-29ca16576ede/1/r2sB3cUdknQsPMSisx3H_Bg75X8.mft
Manifest number: 0C61
Signing time: Tue 04 Nov 2025 01:00:21 +0000
Manifest this update: Tue 04 Nov 2025 01:00:21 +0000
Manifest next update: Wed 05 Nov 2025 01:00:21 +0000
Files and hashes: 1: r2sB3cUdknQsPMSisx3H_Bg75X8.crl (hash: 3uOaDaSWf1/vA5CgWnufehWDB7ITIwCDmAeJj55tjKA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/37a002-2071-44ec-bf50-29ca16576ede/1/r2sB3cUdknQsPMSisx3H_Bg75X8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/37a002-2071-44ec-bf50-29ca16576ede/1/r2sB3cUdknQsPMSisx3H_Bg75X8.mft
rsync://rpki.ripe.net/repository/DEFAULT/r2sB3cUdknQsPMSisx3H_Bg75X8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 01:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4c:61:13:0b:4a:74:0d:58:bd:6f:c3:d3:6b:76:7c:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af6b01ddc51d92742c3cc4a2b31dc7fc183be57f
Validity
Not Before: Nov 4 01:00:21 2025 GMT
Not After : Nov 5 01:00:21 2025 GMT
Subject: CN=0bffdc32b08459b2d626504489ae6cb215651e34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:6e:35:77:55:24:08:35:95:f2:3a:69:4b:7e:
b4:f9:3f:9a:e7:10:0b:b2:49:09:b3:5d:3e:13:70:
39:1d:21:c1:d3:2a:b6:bc:0d:55:6c:26:6c:29:a9:
d6:ea:88:0f:5e:30:ec:7c:d6:71:38:c3:77:7e:1d:
21:ab:85:52:22:c1:53:73:6c:a8:29:19:d3:19:de:
fe:c5:f8:5a:1a:50:3d:a3:a0:7e:06:c4:24:d5:0d:
18:fb:3b:39:49:ec:d3:f4:7a:13:db:88:b8:4b:ab:
c5:d7:f7:14:5c:30:0f:f5:09:71:c8:cb:8e:ff:4a:
9b:d5:89:56:81:78:83:33:74:88:99:8f:c3:a1:91:
c4:78:23:cf:b0:75:3d:8c:4e:62:6b:db:39:bc:fe:
2a:8d:30:6e:bf:41:fa:39:82:50:72:a8:60:b5:c9:
f3:26:80:0d:56:68:b2:cc:96:e6:f0:7f:7f:61:38:
12:b5:5f:00:4e:8e:9c:6a:10:ec:fd:8a:4e:f9:12:
d8:b1:63:cc:0d:85:20:95:a5:8a:85:cc:02:e7:d7:
f0:4b:2b:81:94:7f:6b:db:15:83:b6:5c:63:46:1e:
f2:47:8d:73:27:c6:d4:c4:75:40:0e:a9:06:99:56:
b4:00:c0:1f:6a:c2:96:06:bb:a5:7f:d0:5c:31:8f:
91:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:FF:DC:32:B0:84:59:B2:D6:26:50:44:89:AE:6C:B2:15:65:1E:34
X509v3 Authority Key Identifier:
keyid:AF:6B:01:DD:C5:1D:92:74:2C:3C:C4:A2:B3:1D:C7:FC:18:3B:E5:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r2sB3cUdknQsPMSisx3H_Bg75X8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/37a002-2071-44ec-bf50-29ca16576ede/1/r2sB3cUdknQsPMSisx3H_Bg75X8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/37a002-2071-44ec-bf50-29ca16576ede/1/r2sB3cUdknQsPMSisx3H_Bg75X8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:fb:c1:ac:44:d1:bf:a5:3d:59:c9:36:34:db:f2:0c:ca:86:
57:a0:2e:6a:fd:d4:f2:de:4a:ce:d1:54:02:82:3c:ad:20:50:
1b:e6:e4:cd:f0:01:49:2a:f2:c2:a1:f3:6e:2a:9e:e3:6d:21:
0f:67:2c:61:a9:17:cd:41:c3:03:22:3f:c8:85:6b:e0:7a:a2:
a9:6e:8a:6e:e7:19:9f:46:ff:ab:97:9f:5e:67:cf:23:63:77:
34:14:37:3b:ae:06:b6:42:32:46:43:2c:7f:93:c6:16:55:98:
a8:e2:25:64:2b:7a:49:c5:e8:35:18:ff:31:2e:38:6d:da:6f:
a1:2a:86:14:45:18:d1:a7:fd:a0:88:2e:b3:a5:50:c2:0c:1d:
4e:d2:ad:f9:99:56:ba:94:b5:4e:70:91:a0:ea:02:61:7d:82:
2c:8d:55:f9:67:b2:b0:80:5a:42:b0:f1:1e:85:88:d3:f0:7c:
36:8d:71:dc:c7:70:13:1f:1e:c6:f8:29:36:94:30:46:cd:a5:
27:90:dc:78:de:cb:2a:1f:eb:20:2e:55:cb:58:6d:1b:e3:80:
18:fd:92:5f:ac:83:8b:bb:fc:b3:0f:ae:d8:4f:a7:20:5d:db:
c8:e8:bb:81:00:d2:50:a5:7a:d0:87:a7:98:85:dc:58:5b:54:
66:79:1e:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:52:37 2025 by rpki-client