Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/655e28-3391-40a7-88ca-1bffda382ebe/1/dHLrj4AV6xvCnqMWL4PmrO27Qn4.mft
File: dHLrj4AV6xvCnqMWL4PmrO27Qn4.mft (raw, json)
Hash identifier: wmKmSdHnO2MVEkF+pTHP/OFvsk5t4cWM860iT4+HQ44=
Subject key identifier: 7F:DC:AE:C0:4D:28:E9:74:C8:71:1E:19:F5:D5:8A:01:5D:69:4E:FD
Authority key identifier: 74:72:EB:8F:80:15:EB:1B:C2:9E:A3:16:2F:83:E6:AC:ED:BB:42:7E
Certificate issuer: /CN=7472eb8f8015eb1bc29ea3162f83e6acedbb427e
Certificate serial: 019A4F2B803A827F5B05533D3398B0CBBA56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dHLrj4AV6xvCnqMWL4PmrO27Qn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/655e28-3391-40a7-88ca-1bffda382ebe/1/dHLrj4AV6xvCnqMWL4PmrO27Qn4.mft
Manifest number: 1001
Signing time: Tue 04 Nov 2025 14:00:42 +0000
Manifest this update: Tue 04 Nov 2025 14:00:42 +0000
Manifest next update: Wed 05 Nov 2025 14:00:42 +0000
Files and hashes: 1: dHLrj4AV6xvCnqMWL4PmrO27Qn4.crl (hash: JumeKx/+78MFeH/e9ZLqErMpCyMe8VFbWC0PMArqXCA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/655e28-3391-40a7-88ca-1bffda382ebe/1/dHLrj4AV6xvCnqMWL4PmrO27Qn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/655e28-3391-40a7-88ca-1bffda382ebe/1/dHLrj4AV6xvCnqMWL4PmrO27Qn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/dHLrj4AV6xvCnqMWL4PmrO27Qn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 14:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:80:3a:82:7f:5b:05:53:3d:33:98:b0:cb:ba:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7472eb8f8015eb1bc29ea3162f83e6acedbb427e
Validity
Not Before: Nov 4 14:00:42 2025 GMT
Not After : Nov 5 14:00:42 2025 GMT
Subject: CN=7fdcaec04d28e974c8711e19f5d58a015d694efd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:7e:ca:fb:85:a6:3b:a4:92:74:ea:7b:c7:b7:
69:ba:ad:76:ff:3c:09:46:d4:5b:42:83:21:7a:e3:
86:3d:db:bc:bb:dd:82:f3:58:9b:f5:5c:5b:0a:30:
4a:4f:75:6f:22:96:cf:7f:13:9c:bc:d1:43:ac:e2:
83:ba:49:52:df:90:65:26:90:c6:08:0e:42:14:2a:
a6:52:08:e8:6b:0a:6a:12:ae:e2:a9:8c:3a:92:6e:
c7:83:70:1f:51:e8:3a:04:a3:dc:6c:c5:97:23:e8:
85:b7:aa:64:83:72:69:a8:60:4e:e2:4a:ab:bf:3f:
57:d4:9c:eb:f6:e2:be:b3:29:f3:80:74:32:c0:86:
31:b2:2a:d4:38:1d:b2:31:17:d4:ba:f1:21:32:d1:
59:d2:fd:8d:39:88:37:7b:80:25:b8:60:71:b1:0a:
0d:d5:98:d9:ae:44:f5:62:22:ef:f6:47:09:e2:4d:
03:b0:6b:e3:aa:d4:86:4e:2d:78:5d:b7:9d:17:40:
f0:8d:a5:7f:d6:70:39:c4:75:fa:de:93:35:09:56:
a6:f4:79:43:a4:e5:88:e1:a5:38:ec:e7:65:d8:23:
76:e6:4d:35:3a:c1:c5:dd:56:5f:47:e8:ad:11:da:
2c:39:50:51:12:e3:5c:ea:31:02:d8:20:0f:1b:1f:
2c:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:DC:AE:C0:4D:28:E9:74:C8:71:1E:19:F5:D5:8A:01:5D:69:4E:FD
X509v3 Authority Key Identifier:
keyid:74:72:EB:8F:80:15:EB:1B:C2:9E:A3:16:2F:83:E6:AC:ED:BB:42:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dHLrj4AV6xvCnqMWL4PmrO27Qn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/655e28-3391-40a7-88ca-1bffda382ebe/1/dHLrj4AV6xvCnqMWL4PmrO27Qn4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/655e28-3391-40a7-88ca-1bffda382ebe/1/dHLrj4AV6xvCnqMWL4PmrO27Qn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:bc:13:a6:da:2f:a9:dc:55:e7:50:76:f9:c1:fb:34:c9:b9:
d9:f2:1c:5e:55:9d:5e:ea:99:d1:9f:f3:c7:64:70:b4:08:dd:
95:02:ca:7a:3c:38:25:bd:b2:3d:8a:15:9c:a1:d2:a0:d3:fe:
d0:96:ea:8e:2e:8d:ab:85:98:d4:a1:95:a9:fe:3b:52:28:92:
c0:d0:18:de:f1:7e:9f:74:61:29:20:bf:da:f3:69:61:41:e4:
84:e8:f6:f5:7f:49:1c:00:2d:63:1d:06:7e:4a:b9:36:79:9d:
59:a2:28:2c:9b:64:28:99:93:48:43:bd:cc:04:be:6b:44:68:
75:aa:af:5a:06:e1:36:25:ed:88:0a:22:51:f6:56:53:ac:e6:
4a:3b:a5:78:7a:dc:7a:c9:88:53:26:ae:86:c2:fe:7d:06:0f:
5d:3f:76:11:39:ab:ca:b9:e3:c2:24:7a:ce:4e:28:4e:94:cf:
ad:a7:63:1a:0a:0e:6a:2f:b3:fe:e0:e7:de:50:b3:3c:03:5c:
d5:4d:0f:f5:6d:af:03:e7:0a:50:61:d2:c3:c2:d8:1b:66:c0:
42:7a:41:93:c7:03:1d:8a:09:3c:ed:f7:dc:46:03:c9:cf:31:
c6:51:cb:e1:62:de:6f:73:6d:a3:90:ff:33:58:66:bc:e6:90:
ce:fe:36:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:00:59 2025 by rpki-client