Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/c636cc-405a-4f1e-936a-8437cc92282a/1/E93mmrzMZdCGiMqDVCYzohkpMic.mft
File: E93mmrzMZdCGiMqDVCYzohkpMic.mft (raw, json)
Hash identifier: xvF2RiMvzXKmfvvBGs+7c0tT0rYTtX6JltWDP+qkS8Q=
Subject key identifier: 49:31:EA:A4:C8:C9:2A:30:AD:A6:63:57:33:ED:52:5B:FD:64:25:48
Authority key identifier: 13:DD:E6:9A:BC:CC:65:D0:86:88:CA:83:54:26:33:A2:19:29:32:27
Certificate issuer: /CN=13dde69abccc65d08688ca83542633a219293227
Certificate serial: 019A522CDD49B6D2AC288462BDE1824F7D4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E93mmrzMZdCGiMqDVCYzohkpMic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/c636cc-405a-4f1e-936a-8437cc92282a/1/E93mmrzMZdCGiMqDVCYzohkpMic.mft
Manifest number: 0D3B
Signing time: Wed 05 Nov 2025 04:01:03 +0000
Manifest this update: Wed 05 Nov 2025 04:01:03 +0000
Manifest next update: Thu 06 Nov 2025 04:01:03 +0000
Files and hashes: 1: E93mmrzMZdCGiMqDVCYzohkpMic.crl (hash: kdtLAVNWQ7nynnvq43s/0amWlhB1i5DBXGDnhO4+V58=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/c636cc-405a-4f1e-936a-8437cc92282a/1/E93mmrzMZdCGiMqDVCYzohkpMic.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/c636cc-405a-4f1e-936a-8437cc92282a/1/E93mmrzMZdCGiMqDVCYzohkpMic.mft
rsync://rpki.ripe.net/repository/DEFAULT/E93mmrzMZdCGiMqDVCYzohkpMic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:2c:dd:49:b6:d2:ac:28:84:62:bd:e1:82:4f:7d:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13dde69abccc65d08688ca83542633a219293227
Validity
Not Before: Nov 5 04:01:03 2025 GMT
Not After : Nov 6 04:01:03 2025 GMT
Subject: CN=4931eaa4c8c92a30ada6635733ed525bfd642548
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:81:af:ce:f7:6b:a5:7a:aa:40:01:ab:59:8e:
e2:ff:18:20:07:28:ab:c4:11:53:c2:1c:4a:e6:ee:
17:77:31:50:31:cb:bc:9d:67:0d:2c:2b:1e:89:bc:
cf:ec:fb:34:18:98:ae:d4:bb:ea:b6:ed:60:75:a5:
44:72:c0:a3:29:75:9b:29:0d:ad:65:cb:8c:c5:3b:
09:df:82:dd:80:c1:c2:eb:d9:41:6d:81:6c:ac:b3:
6e:90:da:35:1b:bc:8b:1e:85:24:c6:2f:49:f3:5d:
ff:34:49:52:60:31:b9:85:4c:24:80:a2:eb:6b:0c:
46:00:91:a5:ca:11:66:67:4d:f2:14:96:c6:7f:86:
f8:c2:87:02:12:41:02:41:94:e3:50:30:f5:c3:d7:
6f:2c:3d:c2:89:df:6f:f3:be:84:0b:7c:96:dc:83:
17:14:b6:6a:f4:d0:d2:e8:dc:da:10:ae:bf:b8:c9:
2a:85:2a:3d:c9:d4:7d:98:fb:d1:f2:de:c9:19:28:
d1:45:a9:c3:c9:a6:09:30:c4:bd:cc:fd:67:92:76:
2f:af:39:23:9b:9d:fd:53:c7:09:83:ce:41:d5:7d:
4f:d0:75:27:28:c0:96:26:eb:cc:60:9d:28:2a:06:
50:38:ea:d2:02:41:9a:b0:a6:7c:ea:94:06:26:4a:
85:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:31:EA:A4:C8:C9:2A:30:AD:A6:63:57:33:ED:52:5B:FD:64:25:48
X509v3 Authority Key Identifier:
keyid:13:DD:E6:9A:BC:CC:65:D0:86:88:CA:83:54:26:33:A2:19:29:32:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E93mmrzMZdCGiMqDVCYzohkpMic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/c636cc-405a-4f1e-936a-8437cc92282a/1/E93mmrzMZdCGiMqDVCYzohkpMic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/c636cc-405a-4f1e-936a-8437cc92282a/1/E93mmrzMZdCGiMqDVCYzohkpMic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:ce:29:3c:bf:22:7a:a3:89:0b:a4:e4:02:2b:df:13:fe:7d:
24:85:57:77:cc:33:2b:88:0b:c2:1e:ea:0f:6b:8c:3a:53:f5:
9e:ed:d6:92:b1:8b:7e:14:b0:e4:7d:92:4b:06:2f:37:ce:cf:
48:75:c6:1b:dd:85:32:4f:6b:a5:df:e5:5f:c9:d6:c6:48:59:
6b:e8:9c:9c:b6:d8:93:3e:4c:c5:28:61:53:28:57:cc:50:b3:
7f:ca:f7:c2:19:f4:5a:33:9d:16:34:38:26:e5:8f:b8:21:1d:
2e:b8:b5:3e:50:9d:1a:91:ac:ed:84:5b:d4:ff:bf:d8:8a:11:
50:c7:a7:7a:9c:c4:d4:3c:eb:e5:c5:5d:d1:2e:f8:67:19:fc:
74:25:db:fd:a2:98:99:1f:0c:94:2e:cd:1d:98:65:d1:bb:53:
f1:f8:65:cf:b5:a9:19:75:1d:4f:ab:a0:82:ab:af:8d:ed:13:
de:c3:1b:67:87:79:0b:dc:ad:20:e8:fd:33:b5:64:d1:46:4a:
06:45:e6:06:86:02:aa:55:59:13:ad:07:ec:53:00:88:76:81:
ef:03:ba:85:42:46:e1:92:49:29:c7:b4:9a:54:bf:0b:c1:c6:
5e:f1:34:c6:1b:b9:6a:7d:04:a4:ef:6a:71:8d:31:4c:d9:31:
ad:37:64:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 06:07:16 2025 by rpki-client