
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/b49562-f157-4382-998e-8f934e71767c/1/RpR8XD1ML8TEpKdCi2Iqf-85Lik.mft
File: RpR8XD1ML8TEpKdCi2Iqf-85Lik.mft (raw, json)
Hash identifier: 5L6pv/dc03KtTyiXDFNV9qjui3q7bVyCnYTSn1gmRpo=
Subject key identifier: 25:79:75:9A:AD:39:5A:13:D0:DA:13:74:C1:CC:B6:84:F0:A0:B0:21
Authority key identifier: 46:94:7C:5C:3D:4C:2F:C4:C4:A4:A7:42:8B:62:2A:7F:EF:39:2E:29
Certificate issuer: /CN=46947c5c3d4c2fc4c4a4a7428b622a7fef392e29
Certificate serial: 019A4EF46429CB216A3A7CD99F2949E01D57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RpR8XD1ML8TEpKdCi2Iqf-85Lik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/b49562-f157-4382-998e-8f934e71767c/1/RpR8XD1ML8TEpKdCi2Iqf-85Lik.mft
Manifest number: 096F
Signing time: Tue 04 Nov 2025 13:00:30 +0000
Manifest this update: Tue 04 Nov 2025 13:00:30 +0000
Manifest next update: Wed 05 Nov 2025 13:00:30 +0000
Files and hashes: 1: RpR8XD1ML8TEpKdCi2Iqf-85Lik.crl (hash: 8F9oWnrR/TnbEMtEOhuNBTxv7Jkl5atOAwGbHwHaA7E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/b49562-f157-4382-998e-8f934e71767c/1/RpR8XD1ML8TEpKdCi2Iqf-85Lik.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/b49562-f157-4382-998e-8f934e71767c/1/RpR8XD1ML8TEpKdCi2Iqf-85Lik.mft
rsync://rpki.ripe.net/repository/DEFAULT/RpR8XD1ML8TEpKdCi2Iqf-85Lik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:64:29:cb:21:6a:3a:7c:d9:9f:29:49:e0:1d:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46947c5c3d4c2fc4c4a4a7428b622a7fef392e29
Validity
Not Before: Nov 4 13:00:30 2025 GMT
Not After : Nov 5 13:00:30 2025 GMT
Subject: CN=2579759aad395a13d0da1374c1ccb684f0a0b021
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c8:d6:25:00:4d:cd:51:69:cd:32:21:ca:2b:
7e:27:48:d8:1d:33:e8:a2:1c:8d:2c:9f:0f:b4:ad:
ab:0a:c2:72:a8:ee:98:e1:58:d7:19:7d:5e:4c:5a:
23:4d:58:a1:9e:2d:93:7d:b9:17:ce:f5:e2:8a:b6:
44:de:bf:d4:eb:78:4f:d3:58:a9:49:5e:f0:5e:c8:
69:24:07:b0:57:40:ef:9c:e0:28:6b:24:6b:49:d7:
11:95:7b:27:2e:60:f9:fa:04:9f:8e:f6:58:03:af:
de:da:fb:01:44:76:ff:d0:4e:40:46:50:ba:6b:d8:
dd:70:ee:0f:73:2c:0d:92:c6:aa:ba:1a:4f:24:ee:
f0:b8:48:5d:a9:08:04:8d:59:d7:87:72:c9:e4:27:
1a:9a:6a:2d:6b:56:1f:a8:a7:39:ad:b2:35:bd:94:
7e:8b:0e:b5:eb:82:75:99:e8:ad:0f:55:b2:02:ad:
7e:4f:3b:67:2c:d0:4e:52:7e:46:eb:32:65:85:68:
19:a4:93:c2:c4:92:51:bc:4c:e4:0c:22:c6:a2:6b:
85:71:72:49:67:6b:b2:65:fc:3d:35:eb:e7:ae:03:
9c:12:ec:fa:1a:c5:b4:1f:6c:01:9b:ea:24:cb:57:
9d:d4:29:d0:5a:9f:fb:49:73:66:de:7f:c7:2b:a9:
7a:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:79:75:9A:AD:39:5A:13:D0:DA:13:74:C1:CC:B6:84:F0:A0:B0:21
X509v3 Authority Key Identifier:
keyid:46:94:7C:5C:3D:4C:2F:C4:C4:A4:A7:42:8B:62:2A:7F:EF:39:2E:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RpR8XD1ML8TEpKdCi2Iqf-85Lik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/b49562-f157-4382-998e-8f934e71767c/1/RpR8XD1ML8TEpKdCi2Iqf-85Lik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/b49562-f157-4382-998e-8f934e71767c/1/RpR8XD1ML8TEpKdCi2Iqf-85Lik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:04:08:84:9e:a0:06:5d:82:66:1a:a2:68:bc:42:a5:6f:37:
be:e9:95:df:5b:78:ab:a5:f6:a7:ef:c8:98:70:5a:b9:a8:d3:
f1:99:f4:f1:33:15:3d:37:51:02:e3:e7:1a:07:08:e9:4d:c9:
02:c0:23:5a:05:6f:55:44:be:90:35:b3:e9:6c:d5:6a:11:20:
d0:85:a8:5c:c7:ff:2f:eb:a0:4d:eb:b2:43:7a:4b:3c:e5:7c:
4a:6c:64:73:99:94:c7:cb:cc:b4:20:1f:5e:bc:ed:64:f6:dc:
04:61:8d:e9:bd:92:25:82:78:3b:cf:cd:0c:7c:15:14:a8:60:
bb:ae:83:61:7b:4d:0a:6b:5e:1c:06:8f:4d:5f:fa:7a:65:29:
66:b3:f0:fa:70:93:c7:df:b2:4d:4f:00:45:08:17:77:ea:2b:
62:92:1e:be:78:25:95:a3:5c:b5:57:ab:67:83:d3:53:c6:24:
76:0f:fa:11:0b:6b:47:b6:fe:72:bc:55:69:b5:7f:46:6e:cd:
d9:d5:4b:c6:17:fb:1f:9b:ab:78:d8:64:63:0c:d0:00:51:59:
16:bf:37:07:89:0d:29:da:b3:5f:a8:9b:b0:cd:a1:8a:06:f9:
7f:5e:7c:6a:59:fd:a7:ce:b1:8e:10:94:77:de:f4:2a:15:28:
4c:23:94:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:14:51 2025 by rpki-client