Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/232763-26f8-441b-96b8-05161ff71d80/1/dtAtj564761YOO-TGIVJb8-vHGE.mft
File: dtAtj564761YOO-TGIVJb8-vHGE.mft (raw, json)
Hash identifier: 10orkoCiObMYaXNr5JgTi7g2aZ9sxTwEL+HBLZ7SP9g=
Subject key identifier: D8:23:2B:84:AA:D2:2A:81:15:B7:D8:69:10:C2:5B:76:98:2A:71:9E
Authority key identifier: 76:D0:2D:8F:9E:B8:EF:AD:58:38:EF:93:18:85:49:6F:CF:AF:1C:61
Certificate issuer: /CN=76d02d8f9eb8efad5838ef931885496fcfaf1c61
Certificate serial: 019A4EF41101CB8A20A868938156FC5EF5E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dtAtj564761YOO-TGIVJb8-vHGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/232763-26f8-441b-96b8-05161ff71d80/1/dtAtj564761YOO-TGIVJb8-vHGE.mft
Manifest number: 170B
Signing time: Tue 04 Nov 2025 13:00:09 +0000
Manifest this update: Tue 04 Nov 2025 13:00:09 +0000
Manifest next update: Wed 05 Nov 2025 13:00:09 +0000
Files and hashes: 1: dtAtj564761YOO-TGIVJb8-vHGE.crl (hash: txzUVBpLt9NM9et5BFw4YEUntc57F2VdABAzpubWXxE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/232763-26f8-441b-96b8-05161ff71d80/1/dtAtj564761YOO-TGIVJb8-vHGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/232763-26f8-441b-96b8-05161ff71d80/1/dtAtj564761YOO-TGIVJb8-vHGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/dtAtj564761YOO-TGIVJb8-vHGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:11:01:cb:8a:20:a8:68:93:81:56:fc:5e:f5:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76d02d8f9eb8efad5838ef931885496fcfaf1c61
Validity
Not Before: Nov 4 13:00:09 2025 GMT
Not After : Nov 5 13:00:09 2025 GMT
Subject: CN=d8232b84aad22a8115b7d86910c25b76982a719e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:20:4f:9b:7b:b7:bc:ef:df:ef:fb:81:7c:3c:
b1:d1:69:2e:f7:95:62:b6:03:d2:e8:bf:c1:c6:50:
fd:06:63:16:e2:27:61:82:a9:08:17:4c:00:d4:21:
f6:41:0b:13:75:08:a2:0b:45:9d:20:b9:d8:38:a1:
b8:92:9a:bf:b4:3a:22:0b:99:52:8f:68:4e:36:31:
29:a8:95:8c:e6:13:4f:4a:67:2f:76:9d:1d:a5:35:
3b:c6:28:02:e6:f7:a3:59:74:13:1d:58:47:5e:54:
19:a5:3a:9a:fc:16:f2:22:46:e3:48:a9:f8:7e:70:
9e:56:6d:9b:f0:67:17:50:6a:5f:45:c7:e9:b1:a6:
3d:a8:9e:a3:21:81:e4:73:26:68:8c:4e:fb:d6:33:
3d:0e:df:95:55:8a:f2:b2:9f:a4:64:29:95:c7:85:
07:d1:e7:dd:9e:9a:e7:e5:b5:ac:70:a2:f5:02:df:
fa:5b:45:7e:6e:1b:07:d7:34:6e:7f:79:c4:f3:9d:
66:e4:fa:b3:00:b3:3d:05:87:13:44:d6:f7:93:9e:
50:be:3d:70:6f:47:a1:60:1f:3c:54:40:8f:23:b2:
60:f6:c3:c6:32:04:30:6f:37:2b:23:f0:ca:92:2e:
40:41:0b:30:93:a6:8d:41:f2:13:16:eb:5b:ed:aa:
54:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:23:2B:84:AA:D2:2A:81:15:B7:D8:69:10:C2:5B:76:98:2A:71:9E
X509v3 Authority Key Identifier:
keyid:76:D0:2D:8F:9E:B8:EF:AD:58:38:EF:93:18:85:49:6F:CF:AF:1C:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dtAtj564761YOO-TGIVJb8-vHGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/232763-26f8-441b-96b8-05161ff71d80/1/dtAtj564761YOO-TGIVJb8-vHGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/232763-26f8-441b-96b8-05161ff71d80/1/dtAtj564761YOO-TGIVJb8-vHGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:ed:85:c5:ba:fd:72:6a:fd:a0:42:5c:10:62:be:8e:44:09:
9a:a8:90:3f:9c:98:ce:0b:c7:26:8a:f7:97:53:b2:04:cc:bb:
de:5a:e3:5f:a8:ef:ed:75:56:58:97:de:fb:42:af:69:21:e6:
f7:ab:ea:ee:54:f3:c2:e8:9e:c5:1a:0a:88:b0:fd:c9:8d:f7:
f3:91:e2:63:36:8e:37:b9:0d:bb:34:69:58:e3:47:69:28:7a:
40:7b:fa:0f:38:f5:d6:24:d6:dd:ca:95:1d:e2:d9:e2:3a:4a:
bb:45:42:44:21:5f:62:f3:e4:ea:d0:6c:00:26:a4:70:84:36:
70:cc:b7:91:96:df:20:a5:35:b7:bb:62:01:ec:47:c2:b7:9c:
6f:40:29:0c:9a:ec:09:02:32:dd:99:2b:3f:57:cb:c6:3f:ab:
5d:1e:97:16:97:15:21:b4:d9:57:26:1c:c8:86:3c:3c:94:83:
96:49:12:a4:af:62:a6:98:e8:25:4e:2a:c2:3c:62:dd:7f:6a:
44:25:72:f8:d7:ac:b6:3c:56:f1:35:c0:72:1e:57:63:10:ee:
1f:a9:b5:e2:37:4a:c4:16:0a:ea:6d:9e:c0:60:d4:3d:34:15:
dc:a0:0f:00:da:83:f8:61:ca:b3:a8:8e:ff:53:54:3c:50:65:
8f:94:5a:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:50:44 2025 by rpki-client