Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/8978cb-1a27-4f24-b552-336293734507/1/dPZ1oWeYFnk9WzCtLyU_VsjiRFw.mft
File: dPZ1oWeYFnk9WzCtLyU_VsjiRFw.mft (raw, json)
Hash identifier: Z387oEWXqatmv4Qdn/PyIDEWZkM1jGda9zm/g8IkoX0=
Subject key identifier: FF:91:9C:E9:19:DD:41:69:B1:7F:B7:BF:6F:3F:0D:11:DA:14:16:BB
Authority key identifier: 74:F6:75:A1:67:98:16:79:3D:5B:30:AD:2F:25:3F:56:C8:E2:44:5C
Certificate issuer: /CN=74f675a1679816793d5b30ad2f253f56c8e2445c
Certificate serial: 019A522C57E5E36BC9767F3ADA3DB19BA746
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dPZ1oWeYFnk9WzCtLyU_VsjiRFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/8978cb-1a27-4f24-b552-336293734507/1/dPZ1oWeYFnk9WzCtLyU_VsjiRFw.mft
Manifest number: 170A
Signing time: Wed 05 Nov 2025 04:00:28 +0000
Manifest this update: Wed 05 Nov 2025 04:00:28 +0000
Manifest next update: Thu 06 Nov 2025 04:00:28 +0000
Files and hashes: 1: dPZ1oWeYFnk9WzCtLyU_VsjiRFw.crl (hash: yEw1ItjwW3Y3ps9uaXr8uZloeBVXxXd379caj50BMlI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/8978cb-1a27-4f24-b552-336293734507/1/dPZ1oWeYFnk9WzCtLyU_VsjiRFw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/8978cb-1a27-4f24-b552-336293734507/1/dPZ1oWeYFnk9WzCtLyU_VsjiRFw.mft
rsync://rpki.ripe.net/repository/DEFAULT/dPZ1oWeYFnk9WzCtLyU_VsjiRFw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:2c:57:e5:e3:6b:c9:76:7f:3a:da:3d:b1:9b:a7:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74f675a1679816793d5b30ad2f253f56c8e2445c
Validity
Not Before: Nov 5 04:00:28 2025 GMT
Not After : Nov 6 04:00:28 2025 GMT
Subject: CN=ff919ce919dd4169b17fb7bf6f3f0d11da1416bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:15:70:f0:0f:02:2a:ff:fa:c2:ec:83:37:22:
b1:25:11:67:b3:21:5d:72:f4:15:25:f1:4d:bd:30:
c6:74:42:be:1c:eb:75:2b:fb:c2:91:7c:0f:e1:a7:
95:1d:e0:30:9b:6b:80:ac:6e:86:78:f2:75:cd:2f:
75:5e:71:32:bc:db:6d:b8:93:d9:60:b7:b0:e9:e1:
3d:05:bc:dc:1e:47:c1:46:26:01:40:0e:77:50:d9:
d4:25:cb:54:25:8f:1e:b3:05:22:65:27:38:8d:7c:
fc:3b:40:09:fe:5a:84:7a:33:74:c6:8c:ed:0e:94:
d6:44:1b:7d:1b:5c:10:ee:f7:f1:4d:78:8b:36:4d:
7d:b7:e2:e3:f2:b8:ea:60:88:ef:27:9d:b9:be:d6:
ca:0a:14:d2:44:cf:b9:60:f5:f8:14:05:23:5e:a0:
2f:bb:74:99:b3:2f:9a:c5:cd:fd:9b:6b:87:d8:2b:
2e:bd:85:80:4c:c4:0e:11:9f:30:7b:68:ea:8c:4b:
3a:00:95:af:e0:49:a4:61:dd:81:6e:68:76:4b:33:
b5:2b:01:36:57:c1:7a:07:58:ae:42:57:0c:c6:df:
a4:a4:87:9c:7d:22:66:c5:01:c0:49:65:b8:f1:5e:
d6:56:19:89:90:72:07:84:28:9e:d4:76:cf:56:c1:
d6:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:91:9C:E9:19:DD:41:69:B1:7F:B7:BF:6F:3F:0D:11:DA:14:16:BB
X509v3 Authority Key Identifier:
keyid:74:F6:75:A1:67:98:16:79:3D:5B:30:AD:2F:25:3F:56:C8:E2:44:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dPZ1oWeYFnk9WzCtLyU_VsjiRFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8978cb-1a27-4f24-b552-336293734507/1/dPZ1oWeYFnk9WzCtLyU_VsjiRFw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8978cb-1a27-4f24-b552-336293734507/1/dPZ1oWeYFnk9WzCtLyU_VsjiRFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:ba:b5:1a:42:ac:be:1e:a2:14:bd:73:54:57:40:fa:e5:cc:
01:94:0c:2f:be:bf:60:65:d7:9f:3c:9d:07:d4:7f:ed:50:35:
b5:c1:18:c2:c8:a9:78:f7:06:c3:17:8d:8d:67:19:a1:aa:4d:
98:e3:e1:47:e9:5c:4b:79:45:1a:72:ed:78:25:63:0a:72:aa:
5f:ef:34:15:20:7b:dc:fe:d1:93:8e:70:6c:57:dc:59:a1:ad:
9c:4e:22:4e:a8:4d:47:b3:6d:75:7a:a1:4a:0c:9f:7a:31:2d:
9f:b4:fc:d4:54:4f:75:f5:8e:14:dc:28:53:88:12:53:b7:f6:
2d:66:76:15:b6:39:ef:93:96:cc:08:05:a3:b8:c9:58:87:0b:
e7:a3:40:45:be:6e:51:dc:19:4d:84:9c:8d:da:0d:52:e8:23:
9a:b7:f6:a8:b1:e8:a1:60:06:a5:cc:9e:68:52:73:10:42:f9:
0f:4d:bf:07:a1:7d:30:b1:d1:a0:4c:a6:fa:2a:93:92:e0:c0:
b9:37:c0:7a:5f:fd:1f:54:fe:61:c8:f6:bb:ff:2e:65:00:b2:
b9:bc:a8:02:6f:96:41:6a:a6:d3:de:58:85:f4:6a:ac:61:63:
e4:a3:db:81:18:38:ca:95:c2:e6:01:7e:c0:ba:46:9f:21:d1:
0b:cb:37:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:09:25 2025 by rpki-client