Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/2d4858-dbcf-46d1-86d3-0c867457692b/1/RGMFqaHfoG26hXtD8N6eYi9JUaM.mft
File: RGMFqaHfoG26hXtD8N6eYi9JUaM.mft (raw, json)
Hash identifier: BPw7ybKA1ZR1Htw3r4heasP8/vBP1tli80S9bpDVjy8=
Subject key identifier: 49:87:98:5B:73:31:5D:C8:37:69:70:01:F9:2E:FE:EC:6D:01:C8:E4
Authority key identifier: 44:63:05:A9:A1:DF:A0:6D:BA:85:7B:43:F0:DE:9E:62:2F:49:51:A3
Certificate issuer: /CN=446305a9a1dfa06dba857b43f0de9e622f4951a3
Certificate serial: 019A54C0FAAC22F3F75D29CB905DFB06965A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RGMFqaHfoG26hXtD8N6eYi9JUaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/2d4858-dbcf-46d1-86d3-0c867457692b/1/RGMFqaHfoG26hXtD8N6eYi9JUaM.mft
Manifest number: 0B9E
Signing time: Wed 05 Nov 2025 16:02:04 +0000
Manifest this update: Wed 05 Nov 2025 16:02:04 +0000
Manifest next update: Thu 06 Nov 2025 16:02:04 +0000
Files and hashes: 1: RGMFqaHfoG26hXtD8N6eYi9JUaM.crl (hash: gKzZ28F+nH0qjUFnD21fVYRHFuX4ZTsn3U7V9awoslE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/2d4858-dbcf-46d1-86d3-0c867457692b/1/RGMFqaHfoG26hXtD8N6eYi9JUaM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/2d4858-dbcf-46d1-86d3-0c867457692b/1/RGMFqaHfoG26hXtD8N6eYi9JUaM.mft
rsync://rpki.ripe.net/repository/DEFAULT/RGMFqaHfoG26hXtD8N6eYi9JUaM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:c0:fa:ac:22:f3:f7:5d:29:cb:90:5d:fb:06:96:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=446305a9a1dfa06dba857b43f0de9e622f4951a3
Validity
Not Before: Nov 5 16:02:04 2025 GMT
Not After : Nov 6 16:02:04 2025 GMT
Subject: CN=4987985b73315dc837697001f92efeec6d01c8e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:de:c3:5a:8c:e5:98:ff:d0:1d:af:3b:a9:f6:
67:4b:cc:1d:6a:fa:84:a0:e8:b4:1d:81:83:b0:4a:
31:10:13:37:7f:71:bd:95:1d:81:2a:ee:7f:25:8f:
50:51:6c:fb:89:30:1e:4b:fe:42:68:8c:74:de:25:
30:57:fe:09:c8:26:30:b3:07:46:b6:2c:6b:4b:1e:
33:ff:f4:b5:fd:6e:b7:5a:67:37:d8:2d:ee:dd:d1:
97:02:67:57:6c:5a:c1:94:75:d7:4e:fa:b4:00:e6:
ae:d0:15:35:30:70:18:69:ba:13:24:53:73:47:8d:
27:dc:fc:a4:2b:fc:1c:97:9f:28:61:24:3b:86:c8:
c2:93:dc:05:84:f3:3c:9f:9a:b8:59:85:f7:b8:f2:
4f:d7:0b:db:ec:f6:4f:c0:d6:b6:f9:29:ac:84:b9:
5b:b6:0d:94:15:b9:e5:f4:1b:fc:a0:8e:55:71:3b:
b3:40:80:b8:3f:f2:2b:28:1f:29:87:92:f0:ae:b0:
48:82:e1:47:bf:ed:d8:28:94:18:9d:4d:db:56:1b:
a7:7c:3c:9a:2e:cb:77:f3:25:97:98:09:0d:19:ef:
de:78:70:91:1d:86:98:25:e1:23:fe:af:5c:21:4a:
d5:1a:49:16:73:58:2b:89:96:f7:98:d5:ad:c3:6b:
54:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:87:98:5B:73:31:5D:C8:37:69:70:01:F9:2E:FE:EC:6D:01:C8:E4
X509v3 Authority Key Identifier:
keyid:44:63:05:A9:A1:DF:A0:6D:BA:85:7B:43:F0:DE:9E:62:2F:49:51:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RGMFqaHfoG26hXtD8N6eYi9JUaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2d4858-dbcf-46d1-86d3-0c867457692b/1/RGMFqaHfoG26hXtD8N6eYi9JUaM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2d4858-dbcf-46d1-86d3-0c867457692b/1/RGMFqaHfoG26hXtD8N6eYi9JUaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:48:4a:a5:bb:b3:f6:df:40:49:9a:67:cd:95:8f:68:33:3c:
2b:98:d2:a2:20:0a:f6:3b:55:60:c5:09:20:42:f8:f2:21:84:
8b:70:18:e6:57:fe:b1:f8:ea:7c:f2:62:20:3a:bf:53:51:b1:
58:ee:34:6d:f8:96:24:2a:45:41:ee:b0:1c:c9:19:91:71:74:
5b:04:c8:db:1b:59:ca:d9:c4:03:a0:53:0c:d2:26:d4:7d:b4:
8d:d3:4c:02:01:a8:b0:4c:b7:57:4b:36:cf:1c:39:7b:fd:3d:
6e:fb:6f:7b:db:e0:86:68:5d:76:9f:6b:d6:12:63:5c:68:57:
39:93:a6:59:d4:10:f9:f7:11:20:0f:0c:de:60:fe:db:5c:df:
25:91:55:de:41:90:d6:6c:f5:ff:cd:50:47:b7:a7:0d:b1:dc:
db:56:f1:9a:90:81:cf:04:a1:6e:6d:18:ab:35:31:88:c6:18:
eb:e1:f9:83:36:cc:22:30:75:7b:b2:d4:35:21:37:20:37:d2:
a1:c2:1d:51:2a:2a:e8:99:b4:ef:64:83:14:aa:4b:84:a7:97:
c0:21:32:d8:46:91:a3:5f:f5:db:b5:af:18:77:ab:3a:71:51:
e3:85:53:77:68:30:06:c6:2f:47:bf:16:ba:a4:5e:78:a5:2e:
5b:f3:aa:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 21:31:13 2025 by rpki-client