Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/311aef-3bfc-43e9-955c-9b0b3f024829/1/Rc2B9JhmGA_L3Tt3XnnWGb_bV-Y.mft
File: Rc2B9JhmGA_L3Tt3XnnWGb_bV-Y.mft (raw, json)
Hash identifier: OAd/g1GzVIfVUkQ+umbGtOru7FxoxVpSyjxCtkcxdo8=
Subject key identifier: EC:17:B6:DC:A5:72:03:4A:FD:65:17:9F:67:AB:35:3F:69:FB:B7:BE
Authority key identifier: 45:CD:81:F4:98:66:18:0F:CB:DD:3B:77:5E:79:D6:19:BF:DB:57:E6
Certificate issuer: /CN=45cd81f49866180fcbdd3b775e79d619bfdb57e6
Certificate serial: 019A4EF52A4F4416D1CB0D5CF06D2D6B0F71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rc2B9JhmGA_L3Tt3XnnWGb_bV-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/311aef-3bfc-43e9-955c-9b0b3f024829/1/Rc2B9JhmGA_L3Tt3XnnWGb_bV-Y.mft
Manifest number: 1141
Signing time: Tue 04 Nov 2025 13:01:21 +0000
Manifest this update: Tue 04 Nov 2025 13:01:21 +0000
Manifest next update: Wed 05 Nov 2025 13:01:21 +0000
Files and hashes: 1: Rc2B9JhmGA_L3Tt3XnnWGb_bV-Y.crl (hash: KQ7h3Y8rXjTRaLIUor9Eti/bzZaQQoQ+5aTbH5m4DqY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/311aef-3bfc-43e9-955c-9b0b3f024829/1/Rc2B9JhmGA_L3Tt3XnnWGb_bV-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/311aef-3bfc-43e9-955c-9b0b3f024829/1/Rc2B9JhmGA_L3Tt3XnnWGb_bV-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rc2B9JhmGA_L3Tt3XnnWGb_bV-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:2a:4f:44:16:d1:cb:0d:5c:f0:6d:2d:6b:0f:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45cd81f49866180fcbdd3b775e79d619bfdb57e6
Validity
Not Before: Nov 4 13:01:21 2025 GMT
Not After : Nov 5 13:01:21 2025 GMT
Subject: CN=ec17b6dca572034afd65179f67ab353f69fbb7be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f4:9a:44:94:9d:e4:fe:58:fb:c0:66:39:98:
bc:91:2d:ac:85:95:f2:39:fa:e2:1e:08:e9:bb:03:
2a:43:fd:d8:c2:c4:be:0d:77:c2:f9:2e:8e:1d:f9:
2e:76:b0:9e:88:56:fd:ea:a4:8b:06:3a:8b:41:23:
ea:ed:c9:c9:73:fa:de:d6:51:24:24:16:5d:01:44:
e0:65:67:52:f5:73:83:5b:25:a0:c6:67:a1:61:e6:
e1:ad:de:90:67:b7:c3:eb:ad:61:70:7e:94:03:34:
7e:4b:37:21:3a:a4:56:7c:0b:39:75:51:f9:b1:6a:
0f:05:78:4b:e5:0d:c7:6b:aa:1a:9e:86:d1:db:6b:
04:f4:20:04:ba:38:5d:8a:dd:69:9d:3b:f6:c9:5a:
5c:48:71:e6:a4:79:ff:71:d8:45:15:4f:ef:13:02:
79:32:ab:35:a8:60:76:33:66:67:36:31:3a:17:d2:
91:96:a6:f4:3b:b2:e2:a1:f2:ed:38:a7:25:51:6a:
99:02:e2:77:5f:33:30:ff:9f:3a:7d:7e:77:10:b2:
08:66:8e:e0:5d:6f:0f:00:f6:17:3c:49:0b:4d:db:
6b:61:c2:c5:bc:eb:be:94:af:10:41:b2:c4:a5:bb:
92:22:9b:79:83:c6:5c:df:a8:f0:07:46:9f:29:8a:
87:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:17:B6:DC:A5:72:03:4A:FD:65:17:9F:67:AB:35:3F:69:FB:B7:BE
X509v3 Authority Key Identifier:
keyid:45:CD:81:F4:98:66:18:0F:CB:DD:3B:77:5E:79:D6:19:BF:DB:57:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rc2B9JhmGA_L3Tt3XnnWGb_bV-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/311aef-3bfc-43e9-955c-9b0b3f024829/1/Rc2B9JhmGA_L3Tt3XnnWGb_bV-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/311aef-3bfc-43e9-955c-9b0b3f024829/1/Rc2B9JhmGA_L3Tt3XnnWGb_bV-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:0d:48:3f:bb:f4:1d:50:ac:42:3f:e0:b3:c4:28:c1:4e:02:
c7:00:61:84:82:83:da:97:b1:83:70:70:11:ff:c2:3a:67:e4:
02:cd:65:62:d4:cc:c5:7b:9a:08:67:5e:53:b6:43:68:8b:3c:
be:9b:75:03:a0:dd:ea:e0:a9:46:4d:80:bd:5b:5d:8a:09:b8:
9d:0d:98:aa:96:08:ab:8f:34:56:7f:ed:42:42:50:33:cf:48:
ce:27:0c:b5:40:79:b5:bd:13:f6:41:60:c2:0e:5f:91:8c:21:
56:59:0d:72:cf:d0:61:51:ea:89:16:fb:aa:7e:04:0e:f0:95:
c5:f5:0b:be:35:51:a1:ce:03:03:ad:90:7a:5d:0d:32:75:dd:
8c:31:18:a0:04:b0:56:7b:11:af:44:c6:d9:df:1f:9d:cc:61:
84:af:b2:7d:84:5b:de:2b:30:23:2d:be:d0:9b:a2:70:91:0d:
1c:32:56:64:da:08:7c:f4:50:43:05:db:ce:e5:9e:98:9a:23:
d2:1e:69:1f:10:c9:0e:c5:52:12:56:a9:ed:9b:21:29:4f:95:
30:04:b4:39:da:7a:83:5b:23:6d:02:2a:96:9b:dd:69:16:77:
4b:a1:64:af:1a:1a:df:e5:c6:4c:7c:cc:68:e2:c5:3a:9f:a5:
11:2b:38:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:01:04 2025 by rpki-client