Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/455702-5d5d-466b-b13a-f3b9b0b8dd70/1/DTr3NGYY2GMOAUanZREkQ-DCyP8.mft
File: DTr3NGYY2GMOAUanZREkQ-DCyP8.mft (raw, json)
Hash identifier: 53D3brV9ZD1HpLOd6rN2yvzM2wkCv/pYAV4BznyqpFM=
Subject key identifier: 01:71:C4:23:BE:9F:C7:3C:E1:A9:55:4D:F1:86:82:AD:4F:D9:BA:17
Authority key identifier: 0D:3A:F7:34:66:18:D8:63:0E:01:46:A7:65:11:24:43:E0:C2:C8:FF
Certificate issuer: /CN=0d3af7346618d8630e0146a765112443e0c2c8ff
Certificate serial: 019A4EF577A53EA6276C9F8868C54FE3354B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DTr3NGYY2GMOAUanZREkQ-DCyP8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/455702-5d5d-466b-b13a-f3b9b0b8dd70/1/DTr3NGYY2GMOAUanZREkQ-DCyP8.mft
Manifest number: 07A0
Signing time: Tue 04 Nov 2025 13:01:41 +0000
Manifest this update: Tue 04 Nov 2025 13:01:41 +0000
Manifest next update: Wed 05 Nov 2025 13:01:41 +0000
Files and hashes: 1: DTr3NGYY2GMOAUanZREkQ-DCyP8.crl (hash: HwU/2fnU+YDgbfShOIBj6vZUgaAnPZ79UM4weoy/5Xk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/455702-5d5d-466b-b13a-f3b9b0b8dd70/1/DTr3NGYY2GMOAUanZREkQ-DCyP8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/455702-5d5d-466b-b13a-f3b9b0b8dd70/1/DTr3NGYY2GMOAUanZREkQ-DCyP8.mft
rsync://rpki.ripe.net/repository/DEFAULT/DTr3NGYY2GMOAUanZREkQ-DCyP8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:77:a5:3e:a6:27:6c:9f:88:68:c5:4f:e3:35:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d3af7346618d8630e0146a765112443e0c2c8ff
Validity
Not Before: Nov 4 13:01:41 2025 GMT
Not After : Nov 5 13:01:41 2025 GMT
Subject: CN=0171c423be9fc73ce1a9554df18682ad4fd9ba17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:67:8c:51:ab:fa:8f:90:b1:04:3c:f8:eb:1f:
52:0e:32:d3:8c:94:4b:e6:ff:2e:d6:cd:91:af:bd:
9e:0d:0f:39:bd:b3:96:41:c7:c5:7b:a1:ae:23:55:
2c:2e:8b:49:f0:b0:6a:48:bb:c8:0e:2a:76:3e:71:
9a:3f:a3:06:74:6f:bb:d5:f4:36:38:37:d6:61:14:
86:d1:a0:bf:79:8d:66:92:0d:67:2f:82:c0:e0:de:
a8:8b:c7:7d:34:29:fe:1a:ac:38:1b:da:0e:b3:de:
7c:42:32:8f:5b:fa:ca:e6:0e:17:17:e8:74:9d:df:
2a:12:75:ca:6e:68:80:a6:67:09:5c:1c:b8:0f:9f:
4c:f8:c0:da:16:3d:46:4c:33:c5:20:fd:71:03:5c:
29:08:8a:f8:31:c1:43:2f:8b:5f:6f:26:c7:55:ae:
24:4c:bd:83:49:2f:b9:2a:00:a7:28:ea:6d:8c:37:
38:68:78:72:c8:dc:bd:3c:49:84:53:c6:45:0f:c9:
b7:9d:f7:61:1a:3a:a3:e9:8a:9c:5e:50:e5:f9:fc:
22:89:46:bd:dd:1e:a1:6a:da:6c:94:d1:e9:60:fe:
ba:8a:67:7c:fc:76:59:df:48:5d:5b:71:65:06:e2:
6b:f4:01:23:20:f6:8b:f2:4e:e4:cd:14:b5:d1:5c:
2f:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:71:C4:23:BE:9F:C7:3C:E1:A9:55:4D:F1:86:82:AD:4F:D9:BA:17
X509v3 Authority Key Identifier:
keyid:0D:3A:F7:34:66:18:D8:63:0E:01:46:A7:65:11:24:43:E0:C2:C8:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DTr3NGYY2GMOAUanZREkQ-DCyP8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/455702-5d5d-466b-b13a-f3b9b0b8dd70/1/DTr3NGYY2GMOAUanZREkQ-DCyP8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/455702-5d5d-466b-b13a-f3b9b0b8dd70/1/DTr3NGYY2GMOAUanZREkQ-DCyP8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:18:7c:33:74:49:a5:fc:32:20:5c:54:e9:3a:64:5b:da:29:
e5:46:64:cc:5a:ad:3d:d7:db:c4:66:88:2b:82:da:f8:3c:52:
b4:62:21:3d:1c:b8:f0:8b:29:29:f2:bf:2e:66:99:0c:b5:24:
f7:db:55:68:ae:fc:37:40:a1:28:8b:45:95:55:2a:bf:4d:85:
29:eb:51:45:71:89:0d:15:c7:78:67:ff:e7:0d:3d:78:d6:85:
0b:87:ac:45:16:c4:4e:69:83:16:cd:1f:7e:30:05:79:a8:81:
14:9c:6d:92:e2:5b:2a:72:ef:2f:89:6f:57:ed:93:5a:0c:6e:
d4:2b:a6:86:52:92:f2:8b:a6:4f:1a:26:56:a6:87:5d:36:60:
ad:24:bd:72:61:70:cd:91:53:33:a3:5d:8f:41:dc:18:1c:cc:
29:70:e1:8c:17:25:9e:02:1d:e8:78:46:03:60:90:8f:43:ae:
08:fa:d5:4c:ad:60:f2:8e:85:c5:db:d6:c5:b4:14:ab:e3:1a:
3f:4f:10:98:f0:da:66:66:0b:fa:45:f4:0f:87:19:26:04:25:
a7:34:b5:f5:40:9c:77:ad:e1:cb:f7:1d:ce:c4:c1:d4:02:bf:
2e:af:80:f0:d7:25:a7:ca:fc:7c:0e:19:97:bd:95:63:b6:24:
e1:63:f2:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:48:53 2025 by rpki-client