Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/697564-0025-4f92-8dfd-ce1c03400d4d/1/dCMNFC7sf2qZsNtAlvk6BCBIP-Y.mft
File: dCMNFC7sf2qZsNtAlvk6BCBIP-Y.mft (raw, json)
Hash identifier: PHRAZmQtngtE956AFLjPhU1YKrtJsA2/ltIVIDejh80=
Subject key identifier: 96:15:56:B7:5B:78:77:48:C6:F1:3A:11:31:8C:56:54:04:41:4C:C3
Authority key identifier: 74:23:0D:14:2E:EC:7F:6A:99:B0:DB:40:96:F9:3A:04:20:48:3F:E6
Certificate issuer: /CN=74230d142eec7f6a99b0db4096f93a0420483fe6
Certificate serial: 019A4EF432972872B9E41DE1C17024CEBEC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dCMNFC7sf2qZsNtAlvk6BCBIP-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/697564-0025-4f92-8dfd-ce1c03400d4d/1/dCMNFC7sf2qZsNtAlvk6BCBIP-Y.mft
Manifest number: 0902
Signing time: Tue 04 Nov 2025 13:00:17 +0000
Manifest this update: Tue 04 Nov 2025 13:00:17 +0000
Manifest next update: Wed 05 Nov 2025 13:00:17 +0000
Files and hashes: 1: dCMNFC7sf2qZsNtAlvk6BCBIP-Y.crl (hash: Mo0NSHpJsDL9wsY4kfh0o8KOFgVn2zSGmMK8Yv9QIqc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/697564-0025-4f92-8dfd-ce1c03400d4d/1/dCMNFC7sf2qZsNtAlvk6BCBIP-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/697564-0025-4f92-8dfd-ce1c03400d4d/1/dCMNFC7sf2qZsNtAlvk6BCBIP-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/dCMNFC7sf2qZsNtAlvk6BCBIP-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:32:97:28:72:b9:e4:1d:e1:c1:70:24:ce:be:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74230d142eec7f6a99b0db4096f93a0420483fe6
Validity
Not Before: Nov 4 13:00:17 2025 GMT
Not After : Nov 5 13:00:17 2025 GMT
Subject: CN=961556b75b787748c6f13a11318c565404414cc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:0f:e1:00:a9:0d:df:95:98:90:43:d7:ec:39:
ae:ef:84:e2:54:00:eb:90:9b:31:d6:4f:45:31:71:
70:5e:f5:ea:87:f0:c0:ea:95:46:69:e6:f7:f0:bf:
de:fa:00:48:ef:7a:71:d9:f1:8e:bd:95:91:0f:08:
88:eb:e5:7f:65:b4:d9:8f:38:fe:73:e9:e5:03:5d:
69:f3:d2:e5:63:14:1b:28:81:9a:68:24:be:6d:fe:
6c:24:02:6c:f4:7c:c4:80:8b:ac:02:e0:23:01:45:
85:12:58:24:1e:be:4e:90:0f:e8:6b:ff:95:b3:96:
50:13:a6:23:c5:72:b4:e8:c2:85:78:03:fc:d8:40:
f5:25:e8:d5:00:cf:17:17:05:6f:ba:ae:b0:6c:aa:
3f:c9:33:01:3b:c2:10:1d:78:a4:c8:c3:6b:17:f6:
23:46:1d:2f:22:79:8e:86:94:d8:ef:9e:9a:b4:e6:
fc:d0:f0:76:46:7f:81:01:87:29:96:28:9f:f2:d8:
51:91:1c:95:76:bf:20:ca:e1:b0:23:c9:4c:ba:4b:
88:67:8a:dd:2c:22:bf:50:b4:68:bf:1b:8f:a2:ce:
cb:01:5c:54:84:3c:4b:e6:29:15:80:8f:8d:0f:2a:
6d:1b:54:7a:6a:8d:27:da:6a:d0:98:02:c5:d1:48:
0c:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:15:56:B7:5B:78:77:48:C6:F1:3A:11:31:8C:56:54:04:41:4C:C3
X509v3 Authority Key Identifier:
keyid:74:23:0D:14:2E:EC:7F:6A:99:B0:DB:40:96:F9:3A:04:20:48:3F:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dCMNFC7sf2qZsNtAlvk6BCBIP-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/697564-0025-4f92-8dfd-ce1c03400d4d/1/dCMNFC7sf2qZsNtAlvk6BCBIP-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/697564-0025-4f92-8dfd-ce1c03400d4d/1/dCMNFC7sf2qZsNtAlvk6BCBIP-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:ec:59:39:c1:5d:6c:f1:af:e0:3f:b5:da:2b:6a:4f:98:ef:
77:7d:c2:0f:95:fc:f7:cf:61:e8:19:97:26:0f:65:12:58:f6:
4c:2e:45:75:90:b0:e4:32:1a:57:af:94:2c:d6:7a:93:82:1d:
b1:bd:fb:79:3a:ec:6a:c9:70:f9:ce:7a:8a:e5:e7:2f:9a:a0:
db:05:27:bb:b8:65:ce:8f:59:a1:e1:76:f0:a4:7a:97:49:d9:
6d:ab:6d:74:f4:16:d3:69:61:b9:92:c5:3a:4e:ce:a8:65:4b:
6f:d9:3f:ff:6d:dc:2b:a9:55:f2:74:8a:0e:5e:3d:2d:b2:ba:
07:74:9e:e5:4e:ed:83:27:1f:52:9f:85:3b:e7:0a:c3:a4:de:
75:c3:0a:89:2f:98:a6:62:d2:35:b0:3f:53:cb:2d:72:24:ec:
7e:1b:04:e4:b6:35:8a:4a:95:c9:2a:1c:bb:a9:b4:ea:03:e6:
83:76:72:88:5e:fd:90:a3:66:1c:81:ec:f2:fe:a6:c4:e0:3c:
61:ec:fa:c9:2f:c7:c3:ad:7d:8c:dd:65:a1:db:c6:5e:ea:33:
2d:7e:ac:71:2f:75:81:6d:f5:a9:23:15:b8:34:bb:de:e2:66:
f5:b8:25:a9:59:28:18:2e:f0:6c:3f:04:40:5e:21:f2:85:fd:
7a:59:db:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:22:54 2025 by rpki-client