Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/2e03af-83a4-4c9f-911a-d5844b3c5177/1/dC5XHQAG_n9mCwMIzMYaFpnjSRc.mft
File: dC5XHQAG_n9mCwMIzMYaFpnjSRc.mft (raw, json)
Hash identifier: vJ7embActgvdTPZv97u4EbY4G4HEpmnr151SvyGPItQ=
Subject key identifier: BE:FE:EC:FB:C0:DF:50:C9:3C:F8:38:0B:5E:EA:A3:99:F5:AD:D1:18
Authority key identifier: 74:2E:57:1D:00:06:FE:7F:66:0B:03:08:CC:C6:1A:16:99:E3:49:17
Certificate issuer: /CN=742e571d0006fe7f660b0308ccc61a1699e34917
Certificate serial: 019A50E3305FA10C7805FC0886A5CE77A37F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dC5XHQAG_n9mCwMIzMYaFpnjSRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/2e03af-83a4-4c9f-911a-d5844b3c5177/1/dC5XHQAG_n9mCwMIzMYaFpnjSRc.mft
Manifest number: 170B
Signing time: Tue 04 Nov 2025 22:00:57 +0000
Manifest this update: Tue 04 Nov 2025 22:00:57 +0000
Manifest next update: Wed 05 Nov 2025 22:00:57 +0000
Files and hashes: 1: dC5XHQAG_n9mCwMIzMYaFpnjSRc.crl (hash: sAHIv+6ON+3tDejbqh4YgHfwa7tpHJqZnVu6sRKW6x8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/2e03af-83a4-4c9f-911a-d5844b3c5177/1/dC5XHQAG_n9mCwMIzMYaFpnjSRc.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/2e03af-83a4-4c9f-911a-d5844b3c5177/1/dC5XHQAG_n9mCwMIzMYaFpnjSRc.mft
rsync://rpki.ripe.net/repository/DEFAULT/dC5XHQAG_n9mCwMIzMYaFpnjSRc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e3:30:5f:a1:0c:78:05:fc:08:86:a5:ce:77:a3:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=742e571d0006fe7f660b0308ccc61a1699e34917
Validity
Not Before: Nov 4 22:00:57 2025 GMT
Not After : Nov 5 22:00:57 2025 GMT
Subject: CN=befeecfbc0df50c93cf8380b5eeaa399f5add118
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:71:89:91:20:5f:dc:5d:12:30:c3:44:a9:ee:
bc:ec:fc:89:e2:67:df:b4:07:45:14:27:13:02:c2:
36:d6:3f:64:01:c8:a7:46:31:bf:2c:8f:f1:64:8b:
c8:ff:42:a4:13:12:6c:4c:b6:9e:00:ac:ef:40:05:
0a:20:78:76:6e:81:c6:bc:54:8c:f2:49:b8:8b:27:
8a:4a:ba:46:79:7f:20:3e:9e:f6:fb:bf:0c:48:2f:
34:6f:54:b4:d9:94:f3:1e:4f:35:59:8c:99:f8:49:
21:7c:f5:17:5c:d6:c2:f4:dc:5e:af:2f:fc:4c:25:
02:f5:84:68:1a:47:ad:64:83:e9:eb:15:ad:5b:af:
b5:8e:28:4b:c4:b6:89:b6:ea:1b:57:c8:cd:39:09:
7c:4f:42:72:80:6c:cc:a7:be:b5:0b:17:cd:cf:0e:
31:e5:c4:72:44:cf:c8:71:6e:0d:95:6c:53:01:a8:
00:d7:7f:a6:59:0a:07:94:66:fd:45:73:50:25:81:
f0:72:5e:5a:da:de:8a:c0:d0:29:a8:ab:09:7f:82:
1e:24:d7:53:17:29:0a:bb:6b:16:4b:8a:d7:b3:50:
d7:64:81:4b:74:93:d8:42:eb:46:0f:b5:b7:9b:14:
d1:81:00:fd:89:b4:31:43:fc:2f:9e:2d:48:95:7c:
4a:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:FE:EC:FB:C0:DF:50:C9:3C:F8:38:0B:5E:EA:A3:99:F5:AD:D1:18
X509v3 Authority Key Identifier:
keyid:74:2E:57:1D:00:06:FE:7F:66:0B:03:08:CC:C6:1A:16:99:E3:49:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dC5XHQAG_n9mCwMIzMYaFpnjSRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/2e03af-83a4-4c9f-911a-d5844b3c5177/1/dC5XHQAG_n9mCwMIzMYaFpnjSRc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/2e03af-83a4-4c9f-911a-d5844b3c5177/1/dC5XHQAG_n9mCwMIzMYaFpnjSRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:5d:e0:e7:48:e9:d6:66:47:7e:62:c2:20:30:d4:80:d5:92:
bf:3b:6f:30:19:32:a8:ff:65:a2:75:25:ae:c9:9f:51:8d:d2:
d5:06:6a:8e:49:99:8f:22:30:20:c7:cb:43:f8:6d:2a:03:7e:
99:32:ea:04:84:96:87:a3:17:95:78:22:10:8e:7d:12:1a:66:
4d:35:1e:ac:be:0c:81:c0:fb:cf:09:52:cb:79:8d:22:e2:e4:
07:cf:23:71:05:e7:a4:42:05:3e:1c:6c:80:38:2d:69:37:52:
53:85:f5:86:4e:25:ba:21:ff:11:6d:c2:f4:e7:3c:97:33:a4:
f3:a4:2a:62:27:af:91:4e:fb:d7:86:bd:b7:69:5e:58:49:29:
46:48:f6:35:ea:a5:ca:eb:64:5d:ce:eb:d6:50:43:90:1c:19:
8a:0e:7b:4c:b6:b7:c4:87:4c:a1:6d:07:6d:e6:33:2b:97:b9:
b3:c6:f8:6d:a4:ec:c2:c2:9e:20:00:a2:92:45:08:30:74:8e:
4a:a7:ea:54:23:21:92:0f:1d:30:3b:63:e4:fb:ee:ab:ec:db:
77:2b:65:a9:8b:37:09:59:a3:65:ff:0a:df:91:37:88:f8:62:
0f:c1:3a:87:df:ef:1d:18:a4:c8:50:f0:9e:ed:37:f7:24:3d:
79:a2:0f:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:33:36 2025 by rpki-client