Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/d531a8-02ae-4b0b-8f44-5287698aff3c/1/dLCDZQKVGJ8AmqdMEsvGHuI_p1M.mft
File: dLCDZQKVGJ8AmqdMEsvGHuI_p1M.mft (raw, json)
Hash identifier: NFGOSxzsFG9PuAjpUZlE6yOdk2udFaHTO74brsMjzYc=
Subject key identifier: 9F:AA:42:6A:32:8D:0B:FE:0C:CE:EA:AD:56:37:3C:64:DC:0B:0D:C5
Authority key identifier: 74:B0:83:65:02:95:18:9F:00:9A:A7:4C:12:CB:C6:1E:E2:3F:A7:53
Certificate issuer: /CN=74b083650295189f009aa74c12cbc61ee23fa753
Certificate serial: 019A4EF5D860D7E0B1851BA403241B64FE5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dLCDZQKVGJ8AmqdMEsvGHuI_p1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/d531a8-02ae-4b0b-8f44-5287698aff3c/1/dLCDZQKVGJ8AmqdMEsvGHuI_p1M.mft
Manifest number: 170B
Signing time: Tue 04 Nov 2025 13:02:05 +0000
Manifest this update: Tue 04 Nov 2025 13:02:05 +0000
Manifest next update: Wed 05 Nov 2025 13:02:05 +0000
Files and hashes: 1: dLCDZQKVGJ8AmqdMEsvGHuI_p1M.crl (hash: O/zTeki9xOJSEpNgXtjzXUSQ2Ulv0FNkVW/qZDLZGTU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/d531a8-02ae-4b0b-8f44-5287698aff3c/1/dLCDZQKVGJ8AmqdMEsvGHuI_p1M.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/d531a8-02ae-4b0b-8f44-5287698aff3c/1/dLCDZQKVGJ8AmqdMEsvGHuI_p1M.mft
rsync://rpki.ripe.net/repository/DEFAULT/dLCDZQKVGJ8AmqdMEsvGHuI_p1M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:d8:60:d7:e0:b1:85:1b:a4:03:24:1b:64:fe:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74b083650295189f009aa74c12cbc61ee23fa753
Validity
Not Before: Nov 4 13:02:05 2025 GMT
Not After : Nov 5 13:02:05 2025 GMT
Subject: CN=9faa426a328d0bfe0cceeaad56373c64dc0b0dc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:15:d6:c1:05:7f:1d:e2:8a:59:d6:de:cc:5e:
6d:f9:14:41:62:46:00:a2:1e:4c:07:9d:89:db:3e:
54:7a:a2:02:21:0b:37:d5:07:44:9a:4a:d5:6c:1e:
74:d1:4a:b8:be:fc:2e:76:bc:7d:35:8c:23:5d:c7:
52:02:e4:fa:f3:07:ac:00:52:36:d4:2e:9d:ae:d9:
c5:16:41:5c:6c:6d:dc:1e:09:16:a1:e0:61:01:f4:
ed:0c:51:95:ca:c3:2e:8e:e4:42:36:08:ad:a9:ce:
d4:7a:94:63:11:aa:cb:24:0d:c7:a5:22:a3:d7:1d:
d3:c6:59:a9:88:e0:29:1a:6e:2f:ba:74:93:1d:f7:
df:41:28:6b:ff:d6:af:89:95:ed:8a:16:86:11:ab:
8f:7b:90:21:30:cb:00:67:38:f7:9f:8e:9c:bb:38:
22:db:a3:89:4e:20:36:2d:37:bd:c5:18:18:c2:cd:
9f:f0:94:e2:13:22:70:ac:89:4c:8e:b4:f9:d7:c2:
99:6d:19:d7:b4:66:cd:4d:d5:55:74:08:34:fe:2e:
1c:07:ee:47:89:1d:89:bb:01:e6:13:d9:87:9b:92:
fb:d8:80:48:f6:ef:d4:e6:78:2d:e2:28:75:e7:6c:
79:fa:92:3a:8b:55:b4:4c:db:68:6f:39:1e:f0:f3:
eb:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:AA:42:6A:32:8D:0B:FE:0C:CE:EA:AD:56:37:3C:64:DC:0B:0D:C5
X509v3 Authority Key Identifier:
keyid:74:B0:83:65:02:95:18:9F:00:9A:A7:4C:12:CB:C6:1E:E2:3F:A7:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dLCDZQKVGJ8AmqdMEsvGHuI_p1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d531a8-02ae-4b0b-8f44-5287698aff3c/1/dLCDZQKVGJ8AmqdMEsvGHuI_p1M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d531a8-02ae-4b0b-8f44-5287698aff3c/1/dLCDZQKVGJ8AmqdMEsvGHuI_p1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:fd:24:f0:f4:0b:6e:18:c1:23:c3:10:71:97:e0:43:f3:66:
82:3c:47:1c:60:39:6a:6b:aa:f3:03:b2:c8:cf:b1:8e:ae:45:
ab:27:f5:38:4e:5b:5b:00:fc:73:66:6c:8f:a9:1c:51:43:13:
2d:ae:e7:2f:3c:43:82:01:15:d3:cf:4d:90:cf:c9:23:d3:62:
c5:87:b7:6f:82:6f:11:55:0e:04:bb:eb:b2:ce:29:e8:c4:fb:
53:3a:33:44:bd:2a:c7:b4:d3:f5:7f:63:21:92:c6:8f:54:cf:
65:e7:59:66:87:a6:31:ad:92:f4:3c:2f:f0:9a:c5:7b:0d:8a:
0d:69:e8:85:d4:1e:7c:82:27:b5:18:a8:64:b0:78:c9:6d:0e:
0c:c0:e0:5e:41:73:20:e9:53:0e:aa:2e:9e:1d:8b:88:41:dd:
85:59:bd:46:d4:b0:cf:dd:f6:86:e6:d5:bd:84:6f:01:ce:20:
a8:15:7e:1c:a9:2e:8b:a5:c8:1c:2c:d7:47:e0:72:4f:c8:48:
c0:ed:eb:44:7f:ab:a1:86:1e:51:2a:fc:6b:d6:bf:7d:d4:f8:
ab:f8:61:ea:dc:d9:c0:29:56:b0:41:cf:b3:98:81:73:12:be:
4a:02:52:38:d7:35:5a:19:c6:dc:71:ee:11:1b:58:ca:fb:f0:
86:37:48:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:41:59 2025 by rpki-client