Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/ef54db-a565-4354-899a-083aa18a7629/1/dNYxjajSNXnE9zi26OVcxf8n5bE.mft
File: dNYxjajSNXnE9zi26OVcxf8n5bE.mft (raw, json)
Hash identifier: hk70PYnNQsym8Et/VKzVZ8V/JYq6pgHzwcBEkl4YRuE=
Subject key identifier: 76:82:EE:44:F4:49:56:F6:6B:DE:9D:C7:84:5B:72:30:CE:46:BA:C1
Authority key identifier: 74:D6:31:8D:A8:D2:35:79:C4:F7:38:B6:E8:E5:5C:C5:FF:27:E5:B1
Certificate issuer: /CN=74d6318da8d23579c4f738b6e8e55cc5ff27e5b1
Certificate serial: 019A4D7394E42ABAF25EADFE34657A3473F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dNYxjajSNXnE9zi26OVcxf8n5bE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/ef54db-a565-4354-899a-083aa18a7629/1/dNYxjajSNXnE9zi26OVcxf8n5bE.mft
Manifest number: 0D0C
Signing time: Tue 04 Nov 2025 06:00:11 +0000
Manifest this update: Tue 04 Nov 2025 06:00:11 +0000
Manifest next update: Wed 05 Nov 2025 06:00:11 +0000
Files and hashes: 1: dNYxjajSNXnE9zi26OVcxf8n5bE.crl (hash: 5Hs3HAUZFwRbvnfKIUgh/ngkHnhySvTHPROuEjrSFu0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/ef54db-a565-4354-899a-083aa18a7629/1/dNYxjajSNXnE9zi26OVcxf8n5bE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/ef54db-a565-4354-899a-083aa18a7629/1/dNYxjajSNXnE9zi26OVcxf8n5bE.mft
rsync://rpki.ripe.net/repository/DEFAULT/dNYxjajSNXnE9zi26OVcxf8n5bE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:73:94:e4:2a:ba:f2:5e:ad:fe:34:65:7a:34:73:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74d6318da8d23579c4f738b6e8e55cc5ff27e5b1
Validity
Not Before: Nov 4 06:00:11 2025 GMT
Not After : Nov 5 06:00:11 2025 GMT
Subject: CN=7682ee44f44956f66bde9dc7845b7230ce46bac1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:7d:9a:97:ec:f4:b0:eb:dd:21:c5:7c:41:a1:
45:b8:84:c7:e9:fd:62:27:1b:c3:07:d1:ec:5a:27:
bb:4d:76:74:36:d3:52:7d:ac:1e:8d:cd:1d:e7:d3:
9a:65:c0:cb:64:59:86:4b:84:c1:5d:ce:a8:d1:d7:
3f:44:f8:9a:a0:f1:0e:e3:48:37:ee:9b:a3:95:45:
59:45:65:a6:95:51:58:22:14:5b:f1:a8:a8:f7:01:
75:9a:be:17:02:e6:ab:d5:07:da:f1:00:bb:6f:05:
af:54:78:78:d6:71:3e:f4:34:99:39:d6:6c:40:e6:
b6:b0:91:4b:2a:73:58:68:0f:25:04:23:63:61:af:
c0:b8:4c:64:5d:e6:11:24:79:58:f6:a4:26:b0:73:
da:04:6b:db:d7:53:f1:12:da:27:fb:8a:ab:8a:a3:
e4:38:1f:3c:a6:48:7b:08:b6:35:42:cc:68:58:20:
ed:5e:d7:ed:a8:7e:b0:ac:fd:e6:eb:a8:3a:89:e5:
42:57:30:8d:69:b7:c9:d9:ca:c3:5d:a0:ed:b6:d2:
11:bb:b0:d2:bd:a5:e1:a5:18:3f:d2:b3:59:f9:f8:
a7:fa:14:4f:57:79:f4:d0:7d:a4:05:82:3c:24:64:
75:ef:dc:2b:30:36:0f:3e:f4:ea:90:08:76:dc:07:
42:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:82:EE:44:F4:49:56:F6:6B:DE:9D:C7:84:5B:72:30:CE:46:BA:C1
X509v3 Authority Key Identifier:
keyid:74:D6:31:8D:A8:D2:35:79:C4:F7:38:B6:E8:E5:5C:C5:FF:27:E5:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dNYxjajSNXnE9zi26OVcxf8n5bE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/ef54db-a565-4354-899a-083aa18a7629/1/dNYxjajSNXnE9zi26OVcxf8n5bE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/ef54db-a565-4354-899a-083aa18a7629/1/dNYxjajSNXnE9zi26OVcxf8n5bE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:1f:cd:1b:47:81:d6:ae:bc:58:28:c1:2d:38:9b:0a:81:3c:
21:d8:26:4a:2c:05:76:23:cb:d9:6d:08:9d:ea:2c:b6:3f:d2:
30:18:eb:a8:9a:b0:bd:74:d8:b0:2d:8d:d8:f2:05:50:1d:6b:
5d:87:a5:0b:2a:3c:b8:06:cc:5e:66:bc:c5:62:09:8f:a1:fa:
05:64:9b:b4:f2:d4:1f:b2:77:82:c6:ab:79:2c:a8:65:24:2e:
7d:45:8c:f7:ed:5f:88:40:48:22:cf:d3:4b:a5:a4:36:a7:af:
ad:61:e4:c8:f9:46:16:16:9c:2b:55:b5:f7:8d:ee:ca:a8:e6:
95:65:8e:3d:95:3e:20:86:42:10:d4:d5:f8:b5:2b:09:92:e6:
12:c5:98:44:d6:ab:74:dc:eb:c2:4f:25:9e:95:b9:d1:4b:d6:
23:9c:09:74:c9:f6:74:15:5f:bb:35:c8:22:ee:ce:14:84:c4:
7b:c0:c7:82:b6:fa:12:ee:fb:64:2e:c5:fc:89:73:8e:0c:5d:
65:bf:b5:3f:80:f7:67:2f:4e:00:cd:d1:66:be:cb:71:4f:e8:
8b:c3:0e:bb:f3:a4:f6:78:b7:eb:dd:e1:ae:fc:ef:7e:ec:f4:
2f:45:07:e4:67:ca:e7:91:8e:25:70:03:31:71:ff:b8:48:eb:
d9:ab:7a:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:17:40 2025 by rpki-client