Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/65d6a2-a22c-4e9e-acdf-8e0c6ff00b78/1/RNC2iz7BebNdz_XEZdwtBGGZJ24.mft
File: RNC2iz7BebNdz_XEZdwtBGGZJ24.mft (raw, json)
Hash identifier: 3Tw5Uc0ekvUlRkS+bXDGWCNZvcQxz1kjgm0ixSxXw/Y=
Subject key identifier: 25:AD:C6:97:F3:5E:79:E8:8C:A5:54:CB:D0:0C:75:CE:F5:BB:53:C9
Authority key identifier: 44:D0:B6:8B:3E:C1:79:B3:5D:CF:F5:C4:65:DC:2D:04:61:99:27:6E
Certificate issuer: /CN=44d0b68b3ec179b35dcff5c465dc2d046199276e
Certificate serial: 019A4F6297A396101515AA5FDE80A8E8F9B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RNC2iz7BebNdz_XEZdwtBGGZJ24.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/65d6a2-a22c-4e9e-acdf-8e0c6ff00b78/1/RNC2iz7BebNdz_XEZdwtBGGZJ24.mft
Manifest number: 170A
Signing time: Tue 04 Nov 2025 15:00:52 +0000
Manifest this update: Tue 04 Nov 2025 15:00:52 +0000
Manifest next update: Wed 05 Nov 2025 15:00:52 +0000
Files and hashes: 1: RNC2iz7BebNdz_XEZdwtBGGZJ24.crl (hash: SJs1fUa+vMmX5wOy7UZg061lBgtGMGeavWdKAmH+hlc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/65d6a2-a22c-4e9e-acdf-8e0c6ff00b78/1/RNC2iz7BebNdz_XEZdwtBGGZJ24.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/65d6a2-a22c-4e9e-acdf-8e0c6ff00b78/1/RNC2iz7BebNdz_XEZdwtBGGZJ24.mft
rsync://rpki.ripe.net/repository/DEFAULT/RNC2iz7BebNdz_XEZdwtBGGZJ24.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:97:a3:96:10:15:15:aa:5f:de:80:a8:e8:f9:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44d0b68b3ec179b35dcff5c465dc2d046199276e
Validity
Not Before: Nov 4 15:00:52 2025 GMT
Not After : Nov 5 15:00:52 2025 GMT
Subject: CN=25adc697f35e79e88ca554cbd00c75cef5bb53c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ef:62:46:fa:86:ba:cc:e5:8e:da:da:e7:3f:
22:3b:fa:a8:85:ed:cb:93:5b:1d:52:3b:88:33:0d:
4b:05:b7:a9:b2:59:ac:b2:63:14:49:6c:ff:ea:4d:
a3:0c:9f:6d:44:e9:3e:79:ac:7d:5c:79:24:96:50:
dd:2e:bc:5e:a9:3b:d8:45:cf:3e:8d:96:c9:97:5f:
ec:69:79:ea:9c:1c:3b:48:bf:7c:39:bc:ee:08:d8:
02:6a:3a:f4:b1:20:87:42:1b:2c:63:36:c5:45:06:
a1:fe:44:d4:12:ce:bc:76:39:43:e2:ff:db:aa:d5:
44:d2:36:4c:2e:8c:e8:c0:22:db:fd:10:35:2c:a9:
c2:56:d6:93:75:e9:33:ff:a3:19:00:6f:1d:47:d1:
0b:22:30:3f:8f:86:a8:a6:b3:de:f5:04:18:a2:61:
90:45:dd:8a:c2:ed:8c:07:16:1f:9b:6c:b9:a2:bf:
ed:d7:0d:d3:c7:70:54:fe:8c:51:3d:2d:b6:d0:36:
24:e6:91:9d:b4:a4:98:9d:a6:b9:d8:7d:c2:c4:13:
e8:af:aa:b0:0c:2e:6c:c1:79:c9:c8:f0:2d:f3:18:
d3:df:b1:bd:54:9f:82:2c:1a:ad:c4:dc:f6:81:29:
29:28:7e:8f:e3:57:ea:b5:1d:2f:54:34:92:b1:70:
34:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:AD:C6:97:F3:5E:79:E8:8C:A5:54:CB:D0:0C:75:CE:F5:BB:53:C9
X509v3 Authority Key Identifier:
keyid:44:D0:B6:8B:3E:C1:79:B3:5D:CF:F5:C4:65:DC:2D:04:61:99:27:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RNC2iz7BebNdz_XEZdwtBGGZJ24.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/65d6a2-a22c-4e9e-acdf-8e0c6ff00b78/1/RNC2iz7BebNdz_XEZdwtBGGZJ24.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/65d6a2-a22c-4e9e-acdf-8e0c6ff00b78/1/RNC2iz7BebNdz_XEZdwtBGGZJ24.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:42:52:cc:73:be:53:88:cb:98:f7:23:69:28:69:4e:e6:09:
4d:ca:ff:a8:9d:a0:6d:d9:2c:53:29:de:4c:d8:be:dc:55:cd:
e4:d3:65:d4:97:97:91:e2:19:28:b1:2c:8c:4a:bc:2c:2f:19:
72:b4:62:9e:d5:c5:1b:48:68:13:9f:02:d9:ae:8b:72:80:42:
b6:29:9f:64:27:54:59:ef:b0:e9:4f:a1:c8:2c:b0:0e:6c:69:
30:ec:e8:ab:eb:c0:a3:bd:ec:a5:72:aa:6f:0b:07:d6:a9:6c:
06:b1:08:28:c8:3c:f1:1b:1c:4b:36:29:9a:ee:5a:d0:38:ed:
a1:d9:48:49:87:4a:e3:0e:4b:5b:56:6e:0e:0e:00:7b:79:39:
ff:d5:41:ca:95:08:09:b5:c1:b5:62:b7:70:c0:de:cc:69:db:
28:0c:5e:af:cd:4f:49:0f:41:12:2a:42:e5:89:63:9b:18:77:
e6:a8:ce:33:08:44:8f:d4:51:35:20:14:e6:01:55:c5:ff:f8:
43:6d:95:d4:b8:70:6e:f8:5b:17:a1:ae:ff:43:55:5f:af:19:
99:52:4f:da:84:a6:de:26:16:13:a3:22:0e:7d:db:2f:18:1c:
67:a9:cf:dc:9c:78:c3:f6:01:c1:86:83:ac:0a:92:47:8e:ae:
11:0a:a7:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:32:40 2025 by rpki-client