Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/ee0113-8162-4d0a-85eb-ab76a098aebb/1/12UrrkezA7urED_3ukWgqQYMPcw.mft
File: 12UrrkezA7urED_3ukWgqQYMPcw.mft (raw, json)
Hash identifier: zEBKOsSslGsibfOBcx6bSfexbj1OXymfveJ8h6U+Kqw=
Subject key identifier: 0E:5D:36:0B:69:B1:95:82:CC:EA:39:08:19:0D:76:72:99:69:D8:8A
Authority key identifier: D7:65:2B:AE:47:B3:03:BB:AB:10:3F:F7:BA:45:A0:A9:06:0C:3D:CC
Certificate issuer: /CN=d7652bae47b303bbab103ff7ba45a0a9060c3dcc
Certificate serial: 019A50071DD3E18B57A43617A943F5001338
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12UrrkezA7urED_3ukWgqQYMPcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/ee0113-8162-4d0a-85eb-ab76a098aebb/1/12UrrkezA7urED_3ukWgqQYMPcw.mft
Manifest number: 169E
Signing time: Tue 04 Nov 2025 18:00:34 +0000
Manifest this update: Tue 04 Nov 2025 18:00:34 +0000
Manifest next update: Wed 05 Nov 2025 18:00:34 +0000
Files and hashes: 1: 12UrrkezA7urED_3ukWgqQYMPcw.crl (hash: C3k5oS7q+nTE9hYxBBrSpgHIxN+feHHenq65+WBMaIA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/ee0113-8162-4d0a-85eb-ab76a098aebb/1/12UrrkezA7urED_3ukWgqQYMPcw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/ee0113-8162-4d0a-85eb-ab76a098aebb/1/12UrrkezA7urED_3ukWgqQYMPcw.mft
rsync://rpki.ripe.net/repository/DEFAULT/12UrrkezA7urED_3ukWgqQYMPcw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:07:1d:d3:e1:8b:57:a4:36:17:a9:43:f5:00:13:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7652bae47b303bbab103ff7ba45a0a9060c3dcc
Validity
Not Before: Nov 4 18:00:34 2025 GMT
Not After : Nov 5 18:00:34 2025 GMT
Subject: CN=0e5d360b69b19582ccea3908190d76729969d88a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ed:86:15:d0:41:a8:df:24:26:a8:be:db:a9:
7e:b8:f0:b5:82:3c:fa:8c:3c:31:33:c4:76:a2:d0:
bc:d3:16:8b:16:f9:3d:d1:e6:e5:7a:e8:3c:98:2e:
f3:d1:9c:da:b6:29:cb:35:76:d9:ff:d1:f2:a7:b7:
78:a0:0e:a4:d8:4a:a4:c2:8c:70:e5:94:4f:88:ad:
df:95:b3:bc:24:bb:db:45:23:6b:65:f2:14:6f:29:
4c:e6:8b:59:68:7c:b5:7a:ae:00:39:2b:29:3e:79:
12:26:33:4e:f9:58:ac:13:26:89:ca:4b:57:bb:cb:
dc:5d:cc:9b:a1:ee:76:de:ea:39:80:5b:14:a8:05:
0c:a1:2b:04:38:b6:49:c5:4e:21:58:cf:55:fb:37:
99:55:6f:ae:8a:82:ce:56:a5:54:6f:56:d6:0f:91:
77:66:f5:ce:66:cf:bc:c2:08:cd:3a:8d:ec:3e:7d:
0d:0f:87:73:dd:cf:a7:d2:7c:7b:ba:b1:95:63:99:
f0:4d:6a:f7:13:28:59:b3:cf:ed:96:80:aa:93:26:
02:4e:08:80:ec:3d:c7:c2:65:02:b0:0f:fe:3a:4e:
d8:93:28:06:89:f3:22:9f:c6:42:ad:0c:94:a6:ba:
ad:54:ff:8f:cc:3e:b4:f7:35:6a:3e:18:58:e8:9a:
7f:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:5D:36:0B:69:B1:95:82:CC:EA:39:08:19:0D:76:72:99:69:D8:8A
X509v3 Authority Key Identifier:
keyid:D7:65:2B:AE:47:B3:03:BB:AB:10:3F:F7:BA:45:A0:A9:06:0C:3D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12UrrkezA7urED_3ukWgqQYMPcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ee0113-8162-4d0a-85eb-ab76a098aebb/1/12UrrkezA7urED_3ukWgqQYMPcw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ee0113-8162-4d0a-85eb-ab76a098aebb/1/12UrrkezA7urED_3ukWgqQYMPcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:b5:1b:b2:76:fb:9a:af:7c:73:15:d4:29:6a:87:4b:6b:75:
c5:26:1e:90:cc:3a:74:b6:b2:2b:ac:b3:e2:09:09:8c:d0:68:
18:4b:1e:ca:74:ff:77:2d:11:b7:07:a5:eb:0a:ed:21:67:b4:
4d:5d:c2:a9:34:0d:c8:d8:6a:7f:c4:12:bb:07:a3:5f:b0:58:
73:34:86:08:ed:ed:fd:23:3e:42:00:da:59:c4:9d:b6:e2:4d:
46:71:6a:9c:23:42:c6:3e:73:eb:bd:c3:6b:cc:b5:0b:96:fa:
a9:73:4c:14:7c:99:be:cc:b5:37:58:82:58:f4:92:92:81:da:
8e:17:30:ba:38:94:fe:3a:6f:4c:2e:b0:33:41:74:83:a7:f4:
47:58:4a:3e:3d:ec:ac:be:15:2b:a1:e3:73:7a:57:49:a3:48:
4f:8c:96:7e:6f:17:1b:fb:98:ab:e9:b6:7c:88:6a:ad:55:a7:
4c:41:3f:37:e0:5a:01:c9:b5:9d:67:f4:b1:95:36:5c:cf:87:
b1:68:7f:ee:8c:98:a7:6b:c0:f8:80:0c:12:ac:ef:df:14:ba:
ec:02:9c:df:ba:30:a7:a9:82:0e:25:2a:0b:6c:36:29:7b:cc:
ca:f3:85:53:31:b3:f6:b5:c5:2b:77:04:77:0c:a5:02:6e:27:
5b:e7:52:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:43:59 2025 by rpki-client