Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/742d35-8274-49af-bc12-da85c5732b85/1/DtjJoWGXLWi0RTPg4x9R5NzlunU.mft
File: DtjJoWGXLWi0RTPg4x9R5NzlunU.mft (raw, json)
Hash identifier: 694fpaIeo8wFH4W92McxRLSjdkEGaa4uTw5RP/6Tefk=
Subject key identifier: 40:59:AB:63:DF:32:30:40:5D:DC:03:1A:92:FF:C0:94:67:24:B7:B9
Authority key identifier: 0E:D8:C9:A1:61:97:2D:68:B4:45:33:E0:E3:1F:51:E4:DC:E5:BA:75
Certificate issuer: /CN=0ed8c9a161972d68b44533e0e31f51e4dce5ba75
Certificate serial: 019A4EF4F3470E228AC2000062E6FDB0DA48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DtjJoWGXLWi0RTPg4x9R5NzlunU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/742d35-8274-49af-bc12-da85c5732b85/1/DtjJoWGXLWi0RTPg4x9R5NzlunU.mft
Manifest number: 1708
Signing time: Tue 04 Nov 2025 13:01:06 +0000
Manifest this update: Tue 04 Nov 2025 13:01:06 +0000
Manifest next update: Wed 05 Nov 2025 13:01:06 +0000
Files and hashes: 1: DtjJoWGXLWi0RTPg4x9R5NzlunU.crl (hash: 3uDDn/f92b6/VWfYbcd4C+Kl13GBuge8Eb5fpJyVMmA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/742d35-8274-49af-bc12-da85c5732b85/1/DtjJoWGXLWi0RTPg4x9R5NzlunU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/742d35-8274-49af-bc12-da85c5732b85/1/DtjJoWGXLWi0RTPg4x9R5NzlunU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DtjJoWGXLWi0RTPg4x9R5NzlunU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:f3:47:0e:22:8a:c2:00:00:62:e6:fd:b0:da:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ed8c9a161972d68b44533e0e31f51e4dce5ba75
Validity
Not Before: Nov 4 13:01:06 2025 GMT
Not After : Nov 5 13:01:06 2025 GMT
Subject: CN=4059ab63df3230405ddc031a92ffc0946724b7b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:8f:ca:cd:45:dc:b9:14:11:74:86:01:b9:9e:
6d:c2:24:e3:50:5d:00:ef:8b:96:eb:f0:6c:5b:41:
99:a8:10:6f:5e:d6:7c:25:78:e4:5a:b4:d9:c5:24:
96:9d:b4:7a:21:e2:81:5a:fd:44:b2:3b:b0:da:65:
85:ad:6a:cc:a2:bb:17:33:23:20:17:21:a5:b9:42:
c0:12:72:05:80:4f:4c:f8:68:b2:3f:a0:f4:e0:32:
82:3b:d1:ba:ba:8d:06:7f:1c:8a:17:bd:f5:af:25:
8a:0b:a6:fd:a3:80:90:81:99:45:0d:a6:ff:fe:45:
30:b2:18:1e:fc:3b:dd:84:1f:2e:32:97:88:56:64:
b1:cd:1a:84:bd:20:d0:eb:92:62:ef:cf:85:2b:9e:
1f:86:71:17:19:0d:a1:f3:79:ce:50:11:83:6d:75:
8b:3c:f5:8a:6a:0b:6d:2c:53:cf:a2:5b:07:2f:13:
87:2c:f7:e0:e2:52:26:ce:12:4e:0d:4b:11:fd:04:
c6:25:30:1d:7c:67:94:82:6c:e3:b6:69:70:8b:f2:
0d:8c:d9:82:e0:f3:ba:13:7a:ca:96:69:3b:70:97:
ec:02:bb:45:9a:fd:a4:1d:db:76:75:a3:e7:a7:19:
79:c8:8c:6b:f8:51:2d:de:f0:87:cf:4c:4c:38:17:
02:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:59:AB:63:DF:32:30:40:5D:DC:03:1A:92:FF:C0:94:67:24:B7:B9
X509v3 Authority Key Identifier:
keyid:0E:D8:C9:A1:61:97:2D:68:B4:45:33:E0:E3:1F:51:E4:DC:E5:BA:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DtjJoWGXLWi0RTPg4x9R5NzlunU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/742d35-8274-49af-bc12-da85c5732b85/1/DtjJoWGXLWi0RTPg4x9R5NzlunU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/742d35-8274-49af-bc12-da85c5732b85/1/DtjJoWGXLWi0RTPg4x9R5NzlunU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:8b:39:c1:17:8f:2e:e5:16:72:79:15:22:8b:d4:96:86:80:
6c:2b:cc:7b:ce:0c:7f:e6:c3:de:37:c9:d2:7e:25:ac:72:58:
ee:74:02:5e:7a:5f:37:10:7b:8a:ba:f3:6b:b9:d7:bd:6f:a4:
eb:58:d8:d4:ac:33:b9:23:f0:f5:01:f5:ee:df:ef:be:a7:53:
3c:9d:17:d5:f9:21:ea:a0:92:20:0b:fc:92:bb:9c:f9:af:fb:
bf:b0:59:49:0a:67:3f:21:0e:5f:61:6a:9e:db:d2:0c:cb:88:
d1:51:10:27:95:09:56:ad:9a:1b:39:af:b4:1c:b1:ff:e5:da:
d7:25:b5:54:0f:db:7a:ea:5e:6d:a6:e2:1f:57:38:d7:51:7c:
93:0c:ac:dd:e6:36:1b:c2:cc:5c:b4:0e:ed:33:fc:66:ed:86:
67:d3:37:d5:8e:17:b8:e0:5d:0f:c6:9d:16:3e:4e:3a:4e:61:
af:12:91:90:1d:97:e4:3e:34:b0:cb:d6:52:e7:22:56:da:0b:
42:25:ee:33:64:2a:bb:f8:fc:b5:b6:93:a4:d4:2e:c3:53:0c:
4e:93:37:ca:07:29:f6:4c:28:91:05:a1:91:72:fa:72:5a:fb:
0d:72:38:92:cc:f6:28:83:d6:db:f1:29:2f:f3:94:c8:78:47:
7b:db:5a:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:01:49 2025 by rpki-client