Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/9efe13-8b94-4b62-87ac-6a5e8ebdfd12/1/x-0gqk1F1WHiTZJvWbF1J42bAcg.mft
File: x-0gqk1F1WHiTZJvWbF1J42bAcg.mft (raw, json)
Hash identifier: EoynXtOClTHWWU1p5x6lzb/R5KVohVoy9Nh2hy4zFWI=
Subject key identifier: 4A:E9:80:C4:E8:7B:F7:24:1B:45:E4:AC:64:AC:33:37:7A:BD:24:B1
Authority key identifier: C7:ED:20:AA:4D:45:D5:61:E2:4D:92:6F:59:B1:75:27:8D:9B:01:C8
Certificate issuer: /CN=c7ed20aa4d45d561e24d926f59b175278d9b01c8
Certificate serial: 019A522C7EBE873B4BBF54D112261749EA5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x-0gqk1F1WHiTZJvWbF1J42bAcg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/9efe13-8b94-4b62-87ac-6a5e8ebdfd12/1/x-0gqk1F1WHiTZJvWbF1J42bAcg.mft
Manifest number: 137B
Signing time: Wed 05 Nov 2025 04:00:38 +0000
Manifest this update: Wed 05 Nov 2025 04:00:38 +0000
Manifest next update: Thu 06 Nov 2025 04:00:38 +0000
Files and hashes: 1: x-0gqk1F1WHiTZJvWbF1J42bAcg.crl (hash: W+g3FJYIbmDVT2/ohlzIBhnThxyMFTrqa12wJRTwOMQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/9efe13-8b94-4b62-87ac-6a5e8ebdfd12/1/x-0gqk1F1WHiTZJvWbF1J42bAcg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/9efe13-8b94-4b62-87ac-6a5e8ebdfd12/1/x-0gqk1F1WHiTZJvWbF1J42bAcg.mft
rsync://rpki.ripe.net/repository/DEFAULT/x-0gqk1F1WHiTZJvWbF1J42bAcg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:2c:7e:be:87:3b:4b:bf:54:d1:12:26:17:49:ea:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7ed20aa4d45d561e24d926f59b175278d9b01c8
Validity
Not Before: Nov 5 04:00:38 2025 GMT
Not After : Nov 6 04:00:38 2025 GMT
Subject: CN=4ae980c4e87bf7241b45e4ac64ac33377abd24b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:19:de:2f:19:8e:a0:1c:88:dd:c8:5b:46:3f:
87:28:4c:42:0a:a8:d6:e6:15:05:be:33:8a:0e:cf:
b8:b1:d7:ed:8c:22:cb:2e:d3:c5:8e:68:69:3f:10:
3e:9b:fb:64:16:cb:16:d3:1c:a9:d3:b4:03:85:25:
07:2a:25:58:34:a6:b4:14:5d:04:3f:61:7e:d0:89:
92:85:54:af:13:f5:a6:b4:57:d8:83:7c:6f:57:07:
2a:bc:12:22:e1:8b:84:76:9b:b8:40:c9:84:03:95:
ce:26:7e:f2:68:d1:46:55:a0:fc:53:8a:90:9d:60:
c0:84:c1:99:30:fa:3f:0f:94:d2:38:db:7e:c4:14:
5a:6e:cc:15:f7:14:af:85:e6:ee:50:fa:f9:f0:39:
55:d6:a0:7a:06:e0:c1:c4:cb:3a:e7:4f:4e:46:94:
72:1b:62:3b:41:0a:22:fe:f7:61:af:4f:d1:39:f9:
37:cd:6d:7e:ff:ac:a8:04:f1:a0:4d:f9:ec:14:18:
93:bf:fb:67:a8:ee:17:23:0c:bc:f6:c5:c1:d5:37:
47:f3:e5:22:ca:1f:49:2b:f9:2d:af:44:5f:e4:95:
6a:b0:47:c8:a3:f3:aa:be:1e:73:bb:a1:01:e8:15:
9c:39:22:bd:c2:85:23:fb:a8:f2:2f:75:33:5c:94:
4f:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:E9:80:C4:E8:7B:F7:24:1B:45:E4:AC:64:AC:33:37:7A:BD:24:B1
X509v3 Authority Key Identifier:
keyid:C7:ED:20:AA:4D:45:D5:61:E2:4D:92:6F:59:B1:75:27:8D:9B:01:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x-0gqk1F1WHiTZJvWbF1J42bAcg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/9efe13-8b94-4b62-87ac-6a5e8ebdfd12/1/x-0gqk1F1WHiTZJvWbF1J42bAcg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/9efe13-8b94-4b62-87ac-6a5e8ebdfd12/1/x-0gqk1F1WHiTZJvWbF1J42bAcg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:c9:2c:85:41:9f:17:73:c1:ff:e7:8e:77:58:e2:c2:57:8f:
c5:3c:56:db:3c:ee:ce:f4:aa:f5:22:56:dd:aa:80:1a:98:ba:
b3:17:40:16:46:d7:0d:cd:be:3a:01:e4:74:e5:d2:16:f2:83:
f2:2c:a8:6f:86:e2:b5:5f:f0:e3:97:eb:10:42:cf:e6:be:ed:
fc:4a:43:98:62:bf:8e:9e:b9:1b:1e:d8:18:67:e2:f1:25:c1:
f1:96:a2:03:a9:e8:a6:8f:fa:45:86:74:7c:04:43:e9:e8:9f:
76:a6:84:72:54:67:88:37:40:86:03:7a:85:3f:43:b1:11:e6:
9b:6a:2f:e3:6b:4d:6a:12:eb:4f:33:fb:57:03:c7:3a:65:28:
1d:e3:6c:8a:da:d0:8b:a1:a4:01:20:c0:27:03:76:c3:3e:93:
dd:90:7a:2c:6a:25:93:a7:be:4e:5d:1d:1b:fa:f0:c3:0e:81:
8e:80:ff:4a:dc:f5:ab:43:46:eb:6e:66:a6:2e:e9:56:3c:57:
26:e7:7d:91:bb:6f:c6:03:f7:6b:43:16:7c:29:a9:1c:4d:e9:
2d:aa:39:4a:ee:71:cf:7f:d2:dc:47:d3:f9:1f:a0:f7:cb:79:
fe:be:0c:bc:01:8e:0a:c0:85:33:90:1e:1a:e4:c3:68:ae:cc:
04:d7:20:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:56:13 2025 by rpki-client