Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/610872-b5b5-442f-b630-e5d1af59dea6/1/dEMndQQU00na3gIjNJfPR2Vc0-Q.mft
File: dEMndQQU00na3gIjNJfPR2Vc0-Q.mft (raw, json)
Hash identifier: Kj9MJGGyXG3ZtYvbL3iwNpdPhIT1QbQ8axejYnWAQHA=
Subject key identifier: 13:BD:0C:F5:FD:55:70:A9:29:4C:40:EF:2D:4F:E3:AD:0C:2D:3D:D4
Authority key identifier: 74:43:27:75:04:14:D3:49:DA:DE:02:23:34:97:CF:47:65:5C:D3:E4
Certificate issuer: /CN=744327750414d349dade02233497cf47655cd3e4
Certificate serial: 019A4E5001B7CB63069AECE7397ABEF05E02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dEMndQQU00na3gIjNJfPR2Vc0-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/610872-b5b5-442f-b630-e5d1af59dea6/1/dEMndQQU00na3gIjNJfPR2Vc0-Q.mft
Manifest number: 10DE
Signing time: Tue 04 Nov 2025 10:00:57 +0000
Manifest this update: Tue 04 Nov 2025 10:00:57 +0000
Manifest next update: Wed 05 Nov 2025 10:00:57 +0000
Files and hashes: 1: dEMndQQU00na3gIjNJfPR2Vc0-Q.crl (hash: qs+s5zVUj3FNGkhIuHVi8RJKSxW+v+T/47MYB2oiOj8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/610872-b5b5-442f-b630-e5d1af59dea6/1/dEMndQQU00na3gIjNJfPR2Vc0-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/610872-b5b5-442f-b630-e5d1af59dea6/1/dEMndQQU00na3gIjNJfPR2Vc0-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/dEMndQQU00na3gIjNJfPR2Vc0-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:50:01:b7:cb:63:06:9a:ec:e7:39:7a:be:f0:5e:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=744327750414d349dade02233497cf47655cd3e4
Validity
Not Before: Nov 4 10:00:57 2025 GMT
Not After : Nov 5 10:00:57 2025 GMT
Subject: CN=13bd0cf5fd5570a9294c40ef2d4fe3ad0c2d3dd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:1f:8d:83:ab:a6:fa:ee:db:64:6f:64:41:7c:
40:bd:df:0f:5e:a0:b2:d5:c8:c4:a4:9a:51:5e:65:
4a:a0:e3:f6:d4:6c:93:72:b0:50:3c:d0:a0:1e:0e:
75:dd:b0:23:d0:37:b1:29:4d:aa:32:a7:da:de:04:
f0:97:1b:fa:ca:33:8a:78:1e:0f:d4:a4:88:54:e1:
44:cf:19:3a:9d:9b:f0:a3:99:e3:6f:94:a1:3e:26:
b0:4f:21:c1:3e:4f:a4:65:6c:9d:7b:b0:bc:c5:26:
60:eb:47:b3:7d:5a:97:80:7a:e6:fb:04:45:ac:9c:
10:0d:0d:79:d6:77:48:00:69:83:c8:19:8a:ce:30:
10:74:76:9e:4f:9e:15:a2:44:15:0f:8d:0e:42:0b:
15:5f:90:02:72:cb:92:91:21:3f:ec:92:7b:70:93:
15:a0:fa:d4:9a:64:00:33:5c:f6:ef:66:08:ca:ea:
7a:1c:e9:c6:22:7e:98:39:f8:f3:79:6f:5e:97:50:
8a:f1:43:8d:6c:00:1c:b8:62:b1:a8:d6:5e:6e:12:
da:9a:41:67:e8:40:40:66:90:d3:dc:b1:dc:7b:51:
34:d3:6b:32:e9:45:0f:de:ed:b6:68:ab:a9:6e:de:
8a:ef:a0:9e:b8:00:65:08:8a:28:20:67:0b:0a:b6:
6f:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:BD:0C:F5:FD:55:70:A9:29:4C:40:EF:2D:4F:E3:AD:0C:2D:3D:D4
X509v3 Authority Key Identifier:
keyid:74:43:27:75:04:14:D3:49:DA:DE:02:23:34:97:CF:47:65:5C:D3:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dEMndQQU00na3gIjNJfPR2Vc0-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/610872-b5b5-442f-b630-e5d1af59dea6/1/dEMndQQU00na3gIjNJfPR2Vc0-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/610872-b5b5-442f-b630-e5d1af59dea6/1/dEMndQQU00na3gIjNJfPR2Vc0-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:fc:be:b7:91:10:f1:17:03:3d:30:f1:1c:7d:35:01:8a:ff:
8e:a2:0a:f5:15:78:95:c9:5d:98:18:bd:7f:7f:b5:b7:7d:b4:
13:07:6b:b0:fa:79:45:4d:ec:30:9c:33:c6:0d:b3:93:0f:a1:
70:ac:49:a0:a1:23:33:5c:7a:d0:41:39:dd:91:86:bb:aa:e0:
68:d4:93:f8:12:64:7d:3a:73:c8:ff:d3:9b:cd:07:0d:f9:05:
f3:08:60:0a:d4:19:e8:49:49:e4:65:d2:e2:8b:ba:76:8e:b4:
35:78:53:51:e4:91:a3:da:57:fe:22:6a:b4:36:39:37:fe:60:
b0:03:6f:b8:0c:8a:4c:a4:0f:f9:01:1d:6e:01:73:da:54:0f:
91:6e:9d:ec:6a:ae:ea:03:d2:6f:ae:51:ab:18:a8:e3:2f:98:
3e:14:62:7a:3a:74:49:b1:b6:f6:75:0c:6b:13:17:17:bb:c5:
69:08:b3:1e:04:02:4f:c4:e2:8c:3a:70:4f:a2:c2:7d:e6:00:
18:2e:bf:9a:79:00:ba:af:a2:d5:b9:19:b9:27:30:3e:b2:f7:
89:b8:f0:7e:e6:17:63:7f:4a:14:2d:33:6c:57:04:ba:09:ef:
89:2b:82:4d:ff:8a:66:0c:f9:51:cd:f6:77:35:69:86:f3:b8:
f3:37:f8:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:01:17 2025 by rpki-client