Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/fb147f-04ee-48f0-807d-fe3db5253eb0/1/DtlRtDq5cf2S62PsJqWyJu0Tx1I.mft
File: DtlRtDq5cf2S62PsJqWyJu0Tx1I.mft (raw, json)
Hash identifier: oa7noZh/DZy8pDm6Db0mcnhCgJ7xxKvFZp2MhBupAeM=
Subject key identifier: FC:30:83:DD:F6:05:12:2C:77:75:80:F7:22:03:D9:CD:EF:B4:E3:65
Authority key identifier: 0E:D9:51:B4:3A:B9:71:FD:92:EB:63:EC:26:A5:B2:26:ED:13:C7:52
Certificate issuer: /CN=0ed951b43ab971fd92eb63ec26a5b226ed13c752
Certificate serial: 019A50E39DFE90D3C9749B98E038FEDDA939
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DtlRtDq5cf2S62PsJqWyJu0Tx1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/fb147f-04ee-48f0-807d-fe3db5253eb0/1/DtlRtDq5cf2S62PsJqWyJu0Tx1I.mft
Manifest number: 04EF
Signing time: Tue 04 Nov 2025 22:01:25 +0000
Manifest this update: Tue 04 Nov 2025 22:01:25 +0000
Manifest next update: Wed 05 Nov 2025 22:01:25 +0000
Files and hashes: 1: DtlRtDq5cf2S62PsJqWyJu0Tx1I.crl (hash: IFCg9TIOZ2pxbVu4MJR4Oroz/EAB9dmdB8bczWZrpnI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/fb147f-04ee-48f0-807d-fe3db5253eb0/1/DtlRtDq5cf2S62PsJqWyJu0Tx1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/fb147f-04ee-48f0-807d-fe3db5253eb0/1/DtlRtDq5cf2S62PsJqWyJu0Tx1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/DtlRtDq5cf2S62PsJqWyJu0Tx1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e3:9d:fe:90:d3:c9:74:9b:98:e0:38:fe:dd:a9:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ed951b43ab971fd92eb63ec26a5b226ed13c752
Validity
Not Before: Nov 4 22:01:25 2025 GMT
Not After : Nov 5 22:01:25 2025 GMT
Subject: CN=fc3083ddf605122c777580f72203d9cdefb4e365
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:77:7d:22:4f:9a:5d:02:5b:36:af:b4:2d:51:
98:02:f2:6f:47:7f:d2:a0:ba:32:12:28:b1:35:11:
b4:5d:6e:99:46:a7:c6:e6:72:fd:bb:ed:e2:7b:01:
9d:61:66:4e:03:10:75:36:76:87:17:29:b9:90:f7:
ef:86:64:52:a8:c8:9c:33:14:02:f3:3b:41:e3:40:
72:2f:95:34:b6:c1:e2:c0:cf:9f:18:55:46:9a:fe:
95:49:fc:37:24:ca:0b:1b:a3:31:ad:d9:34:bf:64:
01:49:0e:d5:b2:7b:2a:d7:26:26:fc:4e:4d:a0:f2:
22:6a:8d:d4:76:49:48:24:99:93:45:eb:de:46:48:
a8:56:90:ce:2f:b7:49:86:87:a1:ce:30:05:b0:cd:
ff:6b:f5:22:42:0a:42:c4:b4:0e:25:8a:9d:25:21:
8b:aa:59:f9:a5:f1:4d:df:a3:de:40:15:d4:9c:b4:
e5:cf:6d:5a:59:3c:db:23:e2:ee:3e:f5:43:e1:31:
dc:0e:68:03:4e:e8:2d:8e:86:52:de:6f:8b:3e:90:
f9:15:6b:ef:66:8a:62:19:5b:ad:8f:52:83:dd:35:
6b:54:38:a4:64:17:1c:53:67:c4:95:a8:ba:9d:32:
2e:3c:02:51:6d:05:b8:50:3b:6d:99:4d:5b:14:97:
b9:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:30:83:DD:F6:05:12:2C:77:75:80:F7:22:03:D9:CD:EF:B4:E3:65
X509v3 Authority Key Identifier:
keyid:0E:D9:51:B4:3A:B9:71:FD:92:EB:63:EC:26:A5:B2:26:ED:13:C7:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DtlRtDq5cf2S62PsJqWyJu0Tx1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/fb147f-04ee-48f0-807d-fe3db5253eb0/1/DtlRtDq5cf2S62PsJqWyJu0Tx1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/fb147f-04ee-48f0-807d-fe3db5253eb0/1/DtlRtDq5cf2S62PsJqWyJu0Tx1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:78:ac:61:80:88:d1:60:b0:fd:e8:eb:f2:b2:5c:5b:2a:ca:
6a:56:e5:04:04:d6:3d:ff:6c:ed:1f:7b:41:02:1a:6a:e4:a1:
81:51:0d:a5:bc:7a:39:08:02:fb:2f:f0:47:7d:22:e9:e3:11:
f4:08:21:8b:f7:fc:2f:07:50:70:aa:97:5f:3a:7c:47:5b:0e:
e7:ed:fc:c7:15:c0:f6:2a:00:85:64:2c:a7:e9:1d:50:a1:98:
5f:38:8d:eb:73:4d:6e:d3:f5:64:01:42:bb:16:64:57:fd:82:
be:4f:5f:ce:01:c7:55:6b:7c:13:53:04:43:6b:26:fc:f9:7b:
f2:21:f6:d7:b8:d0:cc:f1:d8:1d:fe:5f:d9:f2:a6:af:e4:9a:
c5:38:49:ce:39:b6:b9:ec:87:c7:92:05:78:10:bd:1a:51:43:
61:14:3d:f2:4d:9b:27:52:74:a0:5d:ca:e3:be:15:c3:4f:03:
9e:0a:dd:5f:9a:04:31:b5:1e:f1:f5:24:da:e9:7e:50:24:ab:
d3:8b:b7:7f:9a:66:2f:95:f4:c4:ee:38:98:8c:f9:f0:5d:68:
2e:5e:aa:2f:60:a6:fd:cd:f5:71:c6:71:d0:e7:d3:a9:be:e9:
b2:a1:a4:2e:5c:23:2b:ea:bd:8c:13:22:b1:bb:d2:41:88:c7:
0e:32:ab:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:17:08 2025 by rpki-client