Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/fdb9b7-95ba-4c13-b396-8dbc7466afe3/1/Eht9Dci8pP9OdTa9OANAJCLo4mw.mft
File: Eht9Dci8pP9OdTa9OANAJCLo4mw.mft (raw, json)
Hash identifier: lTsjwybGi2ldDdSf2TmbKQLVqJwe7RQSA1vx2SMBNaQ=
Subject key identifier: D2:42:D4:41:6A:B6:71:C1:66:77:56:0B:07:F7:33:9C:F4:3B:13:4B
Authority key identifier: 12:1B:7D:0D:C8:BC:A4:FF:4E:75:36:BD:38:03:40:24:22:E8:E2:6C
Certificate issuer: /CN=121b7d0dc8bca4ff4e7536bd3803402422e8e26c
Certificate serial: 019A4DAA98AC6428D3D03D82EB273798B200
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eht9Dci8pP9OdTa9OANAJCLo4mw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/fdb9b7-95ba-4c13-b396-8dbc7466afe3/1/Eht9Dci8pP9OdTa9OANAJCLo4mw.mft
Manifest number: 0A8B
Signing time: Tue 04 Nov 2025 07:00:16 +0000
Manifest this update: Tue 04 Nov 2025 07:00:16 +0000
Manifest next update: Wed 05 Nov 2025 07:00:16 +0000
Files and hashes: 1: Eht9Dci8pP9OdTa9OANAJCLo4mw.crl (hash: N1bA0kNW1dHGstjmda04WQSOPzVkpNZV8i60dEfYXpE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/fdb9b7-95ba-4c13-b396-8dbc7466afe3/1/Eht9Dci8pP9OdTa9OANAJCLo4mw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/fdb9b7-95ba-4c13-b396-8dbc7466afe3/1/Eht9Dci8pP9OdTa9OANAJCLo4mw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Eht9Dci8pP9OdTa9OANAJCLo4mw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:aa:98:ac:64:28:d3:d0:3d:82:eb:27:37:98:b2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=121b7d0dc8bca4ff4e7536bd3803402422e8e26c
Validity
Not Before: Nov 4 07:00:16 2025 GMT
Not After : Nov 5 07:00:16 2025 GMT
Subject: CN=d242d4416ab671c16677560b07f7339cf43b134b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:f3:f0:e4:9f:12:07:1f:75:f8:6f:f5:c5:cb:
5e:bc:1e:00:ef:e7:47:37:c0:0d:b4:51:fe:76:48:
90:38:d8:9f:a4:25:cd:9f:6b:71:1b:d2:ee:f1:a8:
f9:75:ff:40:75:ba:af:c9:2d:8f:1c:59:51:01:05:
8a:56:a0:b9:45:94:fe:ba:06:ce:43:28:c4:96:38:
d7:b0:a8:2a:62:b9:5a:93:21:be:20:ee:5e:b7:79:
b8:4c:30:7a:4b:14:65:24:80:ff:10:b3:e6:d8:b8:
41:11:a8:24:1a:d6:77:d1:95:ba:d8:51:95:34:51:
7e:11:9f:79:7c:df:f8:f7:45:31:ca:ce:fe:5d:68:
63:24:b6:24:26:ee:53:09:a1:3a:21:a0:0e:80:54:
80:e2:3c:33:66:46:5b:6f:2b:f9:61:04:91:fc:b4:
05:3c:e6:cf:d2:b0:c2:85:4a:55:9a:2a:b1:e9:18:
bf:3f:6c:4b:f0:ac:32:33:7e:be:67:1c:54:dd:33:
87:a5:9b:3b:28:af:6c:67:16:6d:d8:96:44:2e:b0:
89:fa:64:07:61:b8:8c:d1:5d:df:c2:a1:cc:2c:b2:
dc:fa:f3:d3:a6:a7:67:09:f4:51:7d:79:63:d9:fa:
fb:13:a3:a3:5e:78:19:3a:92:98:51:29:9e:3a:6c:
92:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:42:D4:41:6A:B6:71:C1:66:77:56:0B:07:F7:33:9C:F4:3B:13:4B
X509v3 Authority Key Identifier:
keyid:12:1B:7D:0D:C8:BC:A4:FF:4E:75:36:BD:38:03:40:24:22:E8:E2:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eht9Dci8pP9OdTa9OANAJCLo4mw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/fdb9b7-95ba-4c13-b396-8dbc7466afe3/1/Eht9Dci8pP9OdTa9OANAJCLo4mw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/fdb9b7-95ba-4c13-b396-8dbc7466afe3/1/Eht9Dci8pP9OdTa9OANAJCLo4mw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:c4:3b:36:56:e0:76:1d:7d:dc:59:e2:c1:c7:00:e3:1c:07:
02:84:04:0f:b0:1e:eb:8c:c5:94:73:9c:b2:c7:06:aa:a2:ab:
e5:b0:a4:ff:c2:d8:5c:18:e3:49:ed:74:a0:bf:ab:0f:22:7f:
54:6d:8e:19:2c:1f:59:02:54:7a:17:51:7b:d3:0b:f9:ba:9b:
9f:28:9d:23:47:19:b9:a3:de:95:e1:52:8b:2b:dc:71:f8:b5:
cc:36:29:2c:eb:43:52:23:96:29:5e:d4:93:68:19:66:11:73:
9b:5d:0d:95:15:c3:d0:3b:5a:ba:42:80:4e:49:94:56:06:f3:
3b:15:00:3c:54:37:1e:2c:3c:05:36:f8:5b:92:c4:85:4d:32:
fb:da:e8:5e:13:5b:98:ac:2b:93:40:1f:91:43:70:33:e3:d5:
7f:47:db:01:b7:54:68:dc:19:67:a6:f8:6a:63:15:f1:a5:71:
e2:ee:a2:89:66:a4:05:0e:2a:3f:f8:db:48:40:e6:82:d2:23:
58:bf:96:4d:74:61:76:2f:c5:ff:e7:4c:9a:83:df:b7:98:e7:
fc:96:6d:fb:d2:51:f9:76:c1:3c:18:30:11:15:e4:39:f8:7a:
b4:1e:b4:ec:40:6c:ac:c3:32:dd:a1:8a:1a:f4:ba:de:3b:b8:
26:67:2c:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:41:36 2025 by rpki-client