Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/0edb38-c0f8-441b-acbf-61b0e369c8fd/1/d8FVIf7ZDRFOdjUxCzB_VT9X0mw.mft
File: d8FVIf7ZDRFOdjUxCzB_VT9X0mw.mft (raw, json)
Hash identifier: RXTVnvAOF2rcUecQ+KCaKsm4B6J+jgQuNc9gb2U7LhI=
Subject key identifier: 42:17:E2:C0:8C:E6:0F:1F:7C:09:60:E6:37:B0:AF:3E:53:07:1C:89
Authority key identifier: 77:C1:55:21:FE:D9:0D:11:4E:76:35:31:0B:30:7F:55:3F:57:D2:6C
Certificate issuer: /CN=77c15521fed90d114e7635310b307f553f57d26c
Certificate serial: 019A4EF466AC322B52CF3AAE1D585123B66A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d8FVIf7ZDRFOdjUxCzB_VT9X0mw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/0edb38-c0f8-441b-acbf-61b0e369c8fd/1/d8FVIf7ZDRFOdjUxCzB_VT9X0mw.mft
Manifest number: 0EF6
Signing time: Tue 04 Nov 2025 13:00:31 +0000
Manifest this update: Tue 04 Nov 2025 13:00:31 +0000
Manifest next update: Wed 05 Nov 2025 13:00:31 +0000
Files and hashes: 1: d8FVIf7ZDRFOdjUxCzB_VT9X0mw.crl (hash: Z2mHYAPyfebA6Y1/stRSvzusgPKLFTG4SMrRPa0NUGU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/0edb38-c0f8-441b-acbf-61b0e369c8fd/1/d8FVIf7ZDRFOdjUxCzB_VT9X0mw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/0edb38-c0f8-441b-acbf-61b0e369c8fd/1/d8FVIf7ZDRFOdjUxCzB_VT9X0mw.mft
rsync://rpki.ripe.net/repository/DEFAULT/d8FVIf7ZDRFOdjUxCzB_VT9X0mw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:66:ac:32:2b:52:cf:3a:ae:1d:58:51:23:b6:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77c15521fed90d114e7635310b307f553f57d26c
Validity
Not Before: Nov 4 13:00:31 2025 GMT
Not After : Nov 5 13:00:31 2025 GMT
Subject: CN=4217e2c08ce60f1f7c0960e637b0af3e53071c89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:fe:50:04:e1:52:5c:1f:78:6c:dc:22:4e:fc:
a7:13:0c:a5:35:a8:c3:f1:76:33:d4:2a:54:e9:cb:
ba:e0:31:b0:44:9b:f6:bf:68:27:34:6a:fa:52:28:
ab:47:fe:31:92:d6:5c:da:00:90:95:61:a0:98:b3:
cd:11:9f:db:57:9b:d0:8b:2b:c8:e1:79:4d:df:50:
42:75:40:ed:6a:cf:1c:00:4d:b9:56:07:fc:db:9a:
4f:a3:ed:76:2e:c0:5b:3e:5a:83:14:74:7c:25:62:
2f:4b:b7:e4:20:c3:28:3a:98:bf:95:1b:7c:75:ef:
d7:f1:e0:5b:e1:1d:3b:4e:6c:ca:b0:50:74:58:92:
ad:13:c6:d5:72:6d:b4:60:68:03:4a:62:f7:e0:fa:
eb:c6:ae:f7:3f:b2:6f:7b:c3:d2:f9:c7:7f:51:b8:
56:11:da:df:57:4f:26:de:bd:4d:a4:40:26:b8:fe:
1d:26:cb:a0:cd:5d:15:d3:5a:95:c7:49:47:bd:36:
82:ce:8b:6b:b9:ef:d5:1d:a2:75:01:3f:30:e2:74:
69:4f:04:71:09:14:d1:d9:61:06:70:43:58:78:56:
6a:ac:4c:1a:7b:ed:19:0d:63:fc:df:da:94:71:d8:
aa:1d:3c:3d:c7:ec:35:59:74:64:10:18:80:de:56:
6f:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:17:E2:C0:8C:E6:0F:1F:7C:09:60:E6:37:B0:AF:3E:53:07:1C:89
X509v3 Authority Key Identifier:
keyid:77:C1:55:21:FE:D9:0D:11:4E:76:35:31:0B:30:7F:55:3F:57:D2:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8FVIf7ZDRFOdjUxCzB_VT9X0mw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/0edb38-c0f8-441b-acbf-61b0e369c8fd/1/d8FVIf7ZDRFOdjUxCzB_VT9X0mw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/0edb38-c0f8-441b-acbf-61b0e369c8fd/1/d8FVIf7ZDRFOdjUxCzB_VT9X0mw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:e1:aa:86:b8:ac:06:e4:67:65:6d:15:2e:54:a5:c5:56:cd:
7c:21:f5:84:b9:63:06:8b:30:0f:5a:39:6c:9f:e2:60:48:f8:
6c:98:74:fd:c1:5f:06:9a:a9:47:54:5e:cc:01:7d:39:f0:f3:
98:0b:13:c6:5e:bb:98:2b:c0:89:a2:8f:88:9a:df:21:20:4f:
85:a1:6a:b8:1f:59:ed:dc:46:87:52:c2:91:ef:33:fb:6f:68:
4e:2f:1e:9c:12:bd:3e:4c:e5:70:d8:0c:8c:a5:ec:a6:ed:7b:
1f:42:3e:3a:3d:d6:98:7d:ce:86:34:d2:79:25:7d:d8:46:da:
00:b2:68:58:10:14:88:cc:11:54:65:ae:ff:98:71:7b:25:59:
08:0c:58:66:5e:36:a3:e5:8a:47:5d:8f:47:f3:ba:23:75:c6:
a7:70:88:f0:82:bb:ac:cf:4b:ad:dd:21:a9:c0:65:59:be:97:
ab:46:ff:b3:c1:1d:ba:6e:09:9b:f7:fd:fc:a8:95:b4:d4:de:
22:ab:7a:2f:24:46:9c:65:bb:e6:eb:ad:5e:77:b7:e0:f1:a4:
47:99:fb:30:8a:9e:ab:3a:f6:b9:89:36:e7:ef:80:e9:6e:7d:
60:b6:cd:a8:76:44:db:ab:c9:f1:24:65:96:db:34:0e:5f:54:
42:73:15:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:44:44 2025 by rpki-client