Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/3cbb1b-6927-45c9-b1d4-1d7d55b22cc9/1/dGNy_s6bo5ZuFegFXAWHxQPAOas.mft
File: dGNy_s6bo5ZuFegFXAWHxQPAOas.mft (raw, json)
Hash identifier: eFrbpbUVnup2K74tuM/rkqgh373Wlc2y0taRi6/T0Kg=
Subject key identifier: BE:82:CE:7C:DC:46:3C:15:37:96:6D:CC:6E:DB:46:EA:49:51:11:E7
Authority key identifier: 74:63:72:FE:CE:9B:A3:96:6E:15:E8:05:5C:05:87:C5:03:C0:39:AB
Certificate issuer: /CN=746372fece9ba3966e15e8055c0587c503c039ab
Certificate serial: 019A4EF4D7F7278015307FBEA86594D9937D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dGNy_s6bo5ZuFegFXAWHxQPAOas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/3cbb1b-6927-45c9-b1d4-1d7d55b22cc9/1/dGNy_s6bo5ZuFegFXAWHxQPAOas.mft
Manifest number: 11B4
Signing time: Tue 04 Nov 2025 13:01:00 +0000
Manifest this update: Tue 04 Nov 2025 13:01:00 +0000
Manifest next update: Wed 05 Nov 2025 13:01:00 +0000
Files and hashes: 1: dGNy_s6bo5ZuFegFXAWHxQPAOas.crl (hash: I5pkx14Nqn1Czg9b9vkiYu2mHkStpXDafrcgBP7lYwU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/3cbb1b-6927-45c9-b1d4-1d7d55b22cc9/1/dGNy_s6bo5ZuFegFXAWHxQPAOas.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/3cbb1b-6927-45c9-b1d4-1d7d55b22cc9/1/dGNy_s6bo5ZuFegFXAWHxQPAOas.mft
rsync://rpki.ripe.net/repository/DEFAULT/dGNy_s6bo5ZuFegFXAWHxQPAOas.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:d7:f7:27:80:15:30:7f:be:a8:65:94:d9:93:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=746372fece9ba3966e15e8055c0587c503c039ab
Validity
Not Before: Nov 4 13:01:00 2025 GMT
Not After : Nov 5 13:01:00 2025 GMT
Subject: CN=be82ce7cdc463c1537966dcc6edb46ea495111e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:75:58:a6:b4:d0:ce:9e:91:e9:ca:96:3b:21:
41:e9:e7:78:51:1a:ae:a1:fa:39:c9:72:6d:ac:58:
07:10:b7:9d:24:08:e6:b9:8f:eb:9d:9d:a6:01:df:
01:f4:1a:12:66:1a:a1:ff:22:0a:59:76:aa:63:5c:
8c:07:19:42:5e:66:14:d5:3a:c1:5e:27:a2:ab:84:
7e:f1:6f:27:a9:80:9f:38:c7:ee:d9:3c:03:ec:27:
af:ec:31:e4:78:20:60:cf:9b:cf:16:ec:30:e9:af:
f2:1f:5e:43:dd:13:88:de:fa:f9:32:54:d0:67:e3:
98:41:90:21:0f:36:96:04:6e:3a:a9:a8:2f:82:60:
b2:1a:ff:0b:1f:b6:54:03:cd:29:03:40:f1:b0:70:
3d:d0:b6:98:2d:79:d3:39:7b:21:be:d2:e3:76:6d:
a6:d7:c9:c4:53:31:bb:02:27:71:de:09:22:66:8b:
b2:ac:a0:84:61:80:26:5b:f0:3f:80:8e:b1:38:3f:
13:4e:63:d4:e1:28:07:13:39:cc:2d:3a:76:79:46:
94:63:94:e1:5d:09:5c:ba:40:56:8b:57:b4:b1:a9:
d6:58:56:b8:ce:1d:12:f3:94:74:6b:ac:57:0e:40:
40:eb:13:41:f1:c3:56:bb:ab:61:7e:c6:d1:3e:30:
fa:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:82:CE:7C:DC:46:3C:15:37:96:6D:CC:6E:DB:46:EA:49:51:11:E7
X509v3 Authority Key Identifier:
keyid:74:63:72:FE:CE:9B:A3:96:6E:15:E8:05:5C:05:87:C5:03:C0:39:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGNy_s6bo5ZuFegFXAWHxQPAOas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/3cbb1b-6927-45c9-b1d4-1d7d55b22cc9/1/dGNy_s6bo5ZuFegFXAWHxQPAOas.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/3cbb1b-6927-45c9-b1d4-1d7d55b22cc9/1/dGNy_s6bo5ZuFegFXAWHxQPAOas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:c8:24:3c:9c:71:42:05:44:cc:41:9d:e6:31:19:ec:64:74:
0a:a5:1f:bb:a3:ec:8d:41:2c:45:65:8b:72:00:91:60:94:be:
6a:f8:f2:20:fb:3a:9d:d0:0f:34:cb:7f:55:cb:5b:7e:9b:24:
3d:8a:78:f6:46:dc:ab:c0:29:b8:26:64:54:51:f8:7a:f6:4e:
bf:12:b7:2a:46:9e:93:fd:d7:42:98:9e:cc:5c:74:66:7f:ea:
d6:f7:90:a9:d0:00:b8:ab:04:de:31:9e:2d:e8:44:44:b4:15:
aa:b5:f1:a5:1c:52:b0:80:88:3d:9f:4a:84:b2:48:54:30:55:
50:78:96:8b:5f:77:60:10:4c:03:c0:80:71:62:6b:9c:4c:9d:
33:20:2b:9a:fc:e4:97:99:d2:c7:3e:f0:31:30:c6:dc:25:c0:
27:bf:53:56:ed:63:46:43:38:e9:54:36:71:3e:f8:5f:cd:9d:
79:9c:a3:ee:0e:d7:02:44:f4:cc:0e:4d:24:e2:06:86:39:97:
79:56:8e:ff:82:b7:8a:74:cb:e6:a9:a3:ff:f3:f2:99:82:74:
39:0f:ab:2e:80:45:c6:d6:50:e2:b4:bf:9d:d2:a8:12:26:bc:
ec:93:ce:7c:e7:f2:9d:94:4c:03:68:d6:f4:85:5a:dc:ca:df:
98:cd:65:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:42:04 2025 by rpki-client