Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/ade60a-fd8c-422e-bca8-9a0284b3adc1/1/d4LgCn_HYX2UJguB_SKjo_PcaG0.mft
File: d4LgCn_HYX2UJguB_SKjo_PcaG0.mft (raw, json)
Hash identifier: MOZJ8JGu317nEp3kBDUaWmSVf26DzhndsIjtVvXvqVg=
Subject key identifier: D8:D6:96:54:68:CB:91:12:11:AA:3C:25:49:2B:A7:EE:FF:A8:F5:68
Authority key identifier: 77:82:E0:0A:7F:C7:61:7D:94:26:0B:81:FD:22:A3:A3:F3:DC:68:6D
Certificate issuer: /CN=7782e00a7fc7617d94260b81fd22a3a3f3dc686d
Certificate serial: 019A4D06EA740666E15910D70C0D43F18B3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d4LgCn_HYX2UJguB_SKjo_PcaG0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/ade60a-fd8c-422e-bca8-9a0284b3adc1/1/d4LgCn_HYX2UJguB_SKjo_PcaG0.mft
Manifest number: 0B9A
Signing time: Tue 04 Nov 2025 04:01:30 +0000
Manifest this update: Tue 04 Nov 2025 04:01:30 +0000
Manifest next update: Wed 05 Nov 2025 04:01:30 +0000
Files and hashes: 1: d4LgCn_HYX2UJguB_SKjo_PcaG0.crl (hash: YVZHzhjGc+Pk2Jqo/N460gqjWw0WEeOqgKW4CnP6Yio=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/ade60a-fd8c-422e-bca8-9a0284b3adc1/1/d4LgCn_HYX2UJguB_SKjo_PcaG0.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/ade60a-fd8c-422e-bca8-9a0284b3adc1/1/d4LgCn_HYX2UJguB_SKjo_PcaG0.mft
rsync://rpki.ripe.net/repository/DEFAULT/d4LgCn_HYX2UJguB_SKjo_PcaG0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 04:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:06:ea:74:06:66:e1:59:10:d7:0c:0d:43:f1:8b:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7782e00a7fc7617d94260b81fd22a3a3f3dc686d
Validity
Not Before: Nov 4 04:01:30 2025 GMT
Not After : Nov 5 04:01:30 2025 GMT
Subject: CN=d8d6965468cb911211aa3c25492ba7eeffa8f568
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:04:ca:39:bc:ed:45:43:c9:8c:31:35:53:c5:
a5:3e:c4:93:fc:69:e1:a8:9c:01:e3:de:85:7f:66:
e8:72:8d:9c:b2:ea:78:82:29:8b:d1:68:bb:8e:b6:
7c:6e:6a:c6:ad:18:16:7f:bd:dd:20:e9:b3:57:d7:
b9:58:61:cf:bf:c4:e9:31:9e:2c:25:d1:a7:48:58:
ca:af:8c:4d:77:dc:f4:e2:6c:12:a5:bf:44:fc:84:
5e:77:1f:54:a2:ad:f9:f5:7a:31:1c:8b:2b:42:cb:
e5:b9:32:24:a7:e4:c0:fb:a7:e3:06:d1:42:f1:14:
6f:79:4e:5a:d1:4c:23:a6:46:ee:2b:d0:f5:49:21:
7e:6d:80:79:b1:59:22:3d:b3:eb:1e:51:6c:af:65:
d5:55:31:f0:db:e6:b7:49:da:3c:e2:b9:d1:e2:4d:
08:c4:68:a0:98:b6:4b:29:8d:41:cc:28:ce:64:1d:
8b:11:f3:e4:76:67:5d:17:6b:3a:80:0b:c7:e3:e0:
f5:b8:92:a0:22:9c:07:d4:c0:f6:31:5a:9d:4b:ed:
ae:d0:43:15:41:26:18:f3:1f:c6:0c:76:ee:eb:88:
1b:d9:85:61:66:13:a8:61:ae:fe:f9:aa:3a:d8:fa:
21:b6:8f:45:d5:3b:2e:9f:64:01:27:55:5c:d6:46:
12:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:D6:96:54:68:CB:91:12:11:AA:3C:25:49:2B:A7:EE:FF:A8:F5:68
X509v3 Authority Key Identifier:
keyid:77:82:E0:0A:7F:C7:61:7D:94:26:0B:81:FD:22:A3:A3:F3:DC:68:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4LgCn_HYX2UJguB_SKjo_PcaG0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/ade60a-fd8c-422e-bca8-9a0284b3adc1/1/d4LgCn_HYX2UJguB_SKjo_PcaG0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/ade60a-fd8c-422e-bca8-9a0284b3adc1/1/d4LgCn_HYX2UJguB_SKjo_PcaG0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:13:a9:da:60:a9:9e:a5:14:5a:37:d1:79:a8:d4:1a:a8:c7:
3b:49:85:f7:79:eb:e7:52:eb:c1:a7:62:b8:be:3e:8f:c2:06:
ef:db:ce:c6:d1:de:b2:18:e1:dd:b0:76:65:a4:09:0f:c8:49:
73:ab:b9:00:7f:c3:46:45:41:14:bc:ca:cc:7c:f1:6d:19:0c:
7c:bf:49:1b:2e:0c:a4:a0:d7:d7:ca:ad:d0:58:9a:30:c9:fc:
8e:4b:b6:68:8c:b4:0a:e9:f8:f5:46:5f:df:33:9c:47:18:03:
90:71:fa:49:f5:53:a8:93:1d:b4:6f:11:e5:cc:af:fc:d4:4f:
6c:f4:2c:eb:c0:f1:a3:56:97:12:8b:d3:2b:2c:ad:f8:7e:23:
45:c9:8e:12:99:e8:99:55:a6:ec:64:93:5d:bf:1d:da:8a:02:
a2:34:13:da:c0:80:b5:11:58:c6:26:ec:2d:50:55:e6:e6:7e:
ef:af:eb:e5:e5:01:10:81:ea:c1:8e:78:ff:19:c2:ff:5b:47:
da:8d:c3:0f:81:3b:e6:dd:07:bb:a9:32:d2:1a:6c:3b:f8:f5:
e9:e8:51:a9:42:d5:fb:ee:0f:a7:1c:eb:da:81:27:e5:e0:64:
9f:ac:96:3a:30:33:25:ca:eb:e5:16:61:77:c9:79:57:b3:8a:
40:32:51:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:55:34 2025 by rpki-client