Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/f7d8ce-140f-41d7-8dc3-6de5cbde6b4b/1/2enzHGJtN3F1eG4UnTJmx1PQBk4.mft
File: 2enzHGJtN3F1eG4UnTJmx1PQBk4.mft (raw, json)
Hash identifier: sqGoMDPLL0mfbL3NAXXTSEavcV8D4Jq4Ne1EueiEx6k=
Subject key identifier: 06:69:0C:18:9B:CE:7C:A2:16:1F:9D:4E:F0:E3:FE:B9:4D:B3:FC:C2
Authority key identifier: D9:E9:F3:1C:62:6D:37:71:75:78:6E:14:9D:32:66:C7:53:D0:06:4E
Certificate issuer: /CN=d9e9f31c626d377175786e149d3266c753d0064e
Certificate serial: 0199FCFD9A30371A652BE72ED7881AA3AD12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2enzHGJtN3F1eG4UnTJmx1PQBk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/f7d8ce-140f-41d7-8dc3-6de5cbde6b4b/1/2enzHGJtN3F1eG4UnTJmx1PQBk4.mft
Manifest number: 0156
Signing time: Sun 19 Oct 2025 15:01:42 +0000
Manifest this update: Sun 19 Oct 2025 15:01:42 +0000
Manifest next update: Mon 20 Oct 2025 15:01:42 +0000
Files and hashes: 1: 2enzHGJtN3F1eG4UnTJmx1PQBk4.crl (hash: kfRCe5Ee4Yya0XbFUHHiiz3iDZrCKw4uuosN6OEBKhE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/f7d8ce-140f-41d7-8dc3-6de5cbde6b4b/1/2enzHGJtN3F1eG4UnTJmx1PQBk4.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/f7d8ce-140f-41d7-8dc3-6de5cbde6b4b/1/2enzHGJtN3F1eG4UnTJmx1PQBk4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2enzHGJtN3F1eG4UnTJmx1PQBk4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:9a:30:37:1a:65:2b:e7:2e:d7:88:1a:a3:ad:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9e9f31c626d377175786e149d3266c753d0064e
Validity
Not Before: Oct 19 15:01:42 2025 GMT
Not After : Oct 20 15:01:42 2025 GMT
Subject: CN=06690c189bce7ca2161f9d4ef0e3feb94db3fcc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:b0:ce:74:18:32:8c:4c:7f:a5:b2:8b:82:6d:
19:57:37:94:84:2f:cd:80:00:a9:fd:56:08:96:2e:
6a:0a:06:10:dd:ae:39:18:f3:a0:0d:31:9d:ac:98:
58:d0:46:14:16:5e:86:97:b7:fd:bc:9a:9f:09:81:
00:0d:f9:31:2c:b4:87:18:12:16:a7:5d:90:ca:8d:
f5:a6:64:93:23:ae:35:60:f9:60:dc:34:b3:97:05:
62:ba:30:60:e1:57:58:57:2a:c1:c2:3e:6f:06:ab:
b4:95:f8:5f:c6:33:16:09:f3:7f:45:08:fb:09:d4:
fe:70:a9:80:4b:aa:12:3f:63:85:6d:6a:69:22:ff:
5e:f5:2a:cf:31:6a:99:c0:d3:57:76:39:7f:02:f0:
cf:5f:10:7b:7c:32:56:14:ab:05:0b:b8:71:a9:c4:
0a:4c:63:cc:0b:b6:e9:49:8b:c0:98:21:75:35:b7:
43:35:6d:35:c9:e5:6c:fe:11:0f:22:25:fa:96:93:
35:6e:77:9f:01:3a:87:af:3e:97:bd:c2:6b:cd:7a:
31:8b:04:0e:07:da:2c:03:db:e8:5c:ee:88:16:29:
03:8b:d5:66:83:fe:12:42:50:1a:da:7d:a8:0b:54:
ca:b5:3e:92:17:ce:9d:25:f2:d5:a8:b3:f3:4c:a5:
ea:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:69:0C:18:9B:CE:7C:A2:16:1F:9D:4E:F0:E3:FE:B9:4D:B3:FC:C2
X509v3 Authority Key Identifier:
keyid:D9:E9:F3:1C:62:6D:37:71:75:78:6E:14:9D:32:66:C7:53:D0:06:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2enzHGJtN3F1eG4UnTJmx1PQBk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f7d8ce-140f-41d7-8dc3-6de5cbde6b4b/1/2enzHGJtN3F1eG4UnTJmx1PQBk4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f7d8ce-140f-41d7-8dc3-6de5cbde6b4b/1/2enzHGJtN3F1eG4UnTJmx1PQBk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:7d:f5:a8:97:d5:d3:57:cb:4c:aa:71:94:33:1a:89:cc:c6:
20:41:53:16:06:9c:18:a5:de:49:5d:cc:e9:2e:8f:38:6d:bb:
99:8e:1f:ea:e0:46:fb:a7:6c:dc:f8:df:3c:d5:f1:66:82:66:
a2:5e:8f:d9:f7:b6:6c:39:65:92:4a:eb:3c:11:82:99:ef:92:
15:4d:d5:38:96:22:a9:9e:3f:cd:95:e8:7f:1c:11:3c:21:b4:
9b:6d:71:46:8d:4c:73:6d:c8:96:e7:fb:83:25:99:24:e5:79:
e3:8c:af:3f:ba:8b:6c:8f:0c:fa:12:66:53:29:c5:e6:52:e2:
88:91:a5:3e:7c:5e:c2:70:19:99:d6:63:d3:e0:36:2d:3a:bb:
d4:57:c3:dc:d2:a6:8c:a9:3d:c4:e9:7e:9d:51:03:db:5b:f3:
f6:78:28:70:3c:ce:92:80:4f:7c:3e:32:84:b2:54:d2:98:fa:
46:ef:60:5e:25:3d:a4:13:57:47:aa:a7:db:30:75:b4:4c:e8:
5f:08:e8:cb:97:99:f5:cb:65:7c:57:51:c2:6f:25:bd:42:49:
09:9d:1a:dc:84:48:89:65:48:3b:a3:9b:ea:0c:a0:79:dc:5f:
a5:dc:48:f1:83:1e:15:3c:a8:2e:9d:60:db:5d:87:ca:e4:5f:
c5:5b:50:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:33:03 2025 by rpki-client