Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/2754de-a5d5-487f-9fdd-c33b3644dd3f/1/dcqnmRKIh2aA16yQqFafP8IDh_o.mft
File: dcqnmRKIh2aA16yQqFafP8IDh_o.mft (raw, json)
Hash identifier: hx3WF3+YTvCHsWUTQmfitl1ni1ZPOpDpUgaJ1iEsKG8=
Subject key identifier: B4:90:B1:C7:E3:D1:EC:1E:11:88:2C:89:CC:3F:2A:C2:2D:C5:27:4F
Authority key identifier: 75:CA:A7:99:12:88:87:66:80:D7:AC:90:A8:56:9F:3F:C2:03:87:FA
Certificate issuer: /CN=75caa7991288876680d7ac90a8569f3fc20387fa
Certificate serial: 019A4F620D94C71F190D50FA03FEC4F1F2E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dcqnmRKIh2aA16yQqFafP8IDh_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/2754de-a5d5-487f-9fdd-c33b3644dd3f/1/dcqnmRKIh2aA16yQqFafP8IDh_o.mft
Manifest number: 170A
Signing time: Tue 04 Nov 2025 15:00:17 +0000
Manifest this update: Tue 04 Nov 2025 15:00:17 +0000
Manifest next update: Wed 05 Nov 2025 15:00:17 +0000
Files and hashes: 1: dcqnmRKIh2aA16yQqFafP8IDh_o.crl (hash: H+DbJPP+0nTgTrVFeSeXOHV6mugHRj07nEW07A1XonY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/2754de-a5d5-487f-9fdd-c33b3644dd3f/1/dcqnmRKIh2aA16yQqFafP8IDh_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/2754de-a5d5-487f-9fdd-c33b3644dd3f/1/dcqnmRKIh2aA16yQqFafP8IDh_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/dcqnmRKIh2aA16yQqFafP8IDh_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:0d:94:c7:1f:19:0d:50:fa:03:fe:c4:f1:f2:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75caa7991288876680d7ac90a8569f3fc20387fa
Validity
Not Before: Nov 4 15:00:17 2025 GMT
Not After : Nov 5 15:00:17 2025 GMT
Subject: CN=b490b1c7e3d1ec1e11882c89cc3f2ac22dc5274f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:4d:9f:3d:a8:0d:fd:e0:5b:7a:2e:10:87:db:
5e:bd:44:d4:51:ef:ac:72:cb:06:43:63:a8:50:25:
40:d9:db:e3:e8:86:1d:f3:26:39:f1:3b:59:13:df:
cf:65:f6:cc:3c:b0:c6:f0:57:98:db:ba:5a:6e:be:
5c:a4:78:e2:5f:4d:19:25:4d:07:51:10:64:39:ff:
ff:8b:19:4d:a3:ea:83:18:b9:ce:e9:a5:c7:6d:9a:
8d:70:fd:6e:3a:ea:3c:a5:97:4b:af:f1:08:58:2d:
3e:4e:94:64:eb:29:df:ef:3c:bc:1d:36:31:2b:fa:
62:a7:21:dd:1c:24:e8:14:6d:c3:e2:79:dc:be:86:
92:53:c5:68:49:c7:80:1b:fc:69:dc:2f:10:69:09:
57:73:2e:d3:c8:a6:f5:2c:41:86:ba:ea:7c:55:15:
73:ae:4f:26:33:07:47:22:14:f6:0c:0a:ce:6a:41:
57:45:af:56:ac:81:e8:4f:3c:65:03:13:6f:04:30:
c2:71:25:68:d3:55:89:f1:02:f4:e4:0f:11:3b:c7:
bb:b3:eb:92:1a:bd:7c:4f:5d:c3:dd:24:dd:fa:cb:
17:34:2f:11:04:bd:ae:14:36:5a:f0:60:0e:79:6b:
f7:70:ee:ee:cf:1c:fc:62:a6:e7:71:87:71:9f:4d:
68:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:90:B1:C7:E3:D1:EC:1E:11:88:2C:89:CC:3F:2A:C2:2D:C5:27:4F
X509v3 Authority Key Identifier:
keyid:75:CA:A7:99:12:88:87:66:80:D7:AC:90:A8:56:9F:3F:C2:03:87:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dcqnmRKIh2aA16yQqFafP8IDh_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/2754de-a5d5-487f-9fdd-c33b3644dd3f/1/dcqnmRKIh2aA16yQqFafP8IDh_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/2754de-a5d5-487f-9fdd-c33b3644dd3f/1/dcqnmRKIh2aA16yQqFafP8IDh_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:c2:61:a9:ed:18:da:04:e9:61:80:cf:65:8c:12:14:19:2b:
8d:7b:33:de:35:e0:50:e3:3d:4a:ae:3f:d4:be:12:ea:85:a0:
f2:b7:0f:75:05:0b:ef:e1:10:46:34:b8:c1:22:79:f4:65:aa:
cf:71:4b:87:2d:e6:60:7c:82:d3:bd:d5:f6:4b:85:de:67:44:
57:87:e5:95:76:b2:7c:cd:b7:35:c4:50:f3:f4:c7:17:d5:15:
53:bc:9b:2a:a9:10:1a:5f:16:e0:37:15:35:5d:c2:da:f8:df:
ba:a5:1a:7f:77:9f:fa:17:ad:cb:47:25:98:83:ec:18:ed:f7:
b1:59:6b:66:58:e3:1e:be:b1:34:60:44:e0:1c:b2:b4:9c:41:
ed:88:30:33:b2:fb:86:6b:06:ce:51:1a:75:d0:8d:b0:78:3c:
05:6f:60:17:aa:09:0b:1f:19:a8:47:42:62:d5:47:ff:ca:e7:
03:02:bf:c6:39:a1:4f:66:48:fc:61:11:6a:69:75:d6:b5:c1:
5f:00:83:ae:01:85:41:9a:68:f7:7a:4e:85:1d:ee:9d:62:c9:
1c:f6:1c:fa:44:5e:e9:49:57:4f:90:15:18:4e:1e:10:67:a6:
ca:60:53:f1:e5:5a:fc:a2:47:a6:67:af:49:b3:ee:8b:86:c8:
82:82:be:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:21:25 2025 by rpki-client