Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/0467dc-ccf3-4331-957c-158606318525/1/dYOxUbdLsu2w9c5rbpux4MPQrRs.mft
File: dYOxUbdLsu2w9c5rbpux4MPQrRs.mft (raw, json)
Hash identifier: +5WrQPH0sdQBzcXqTO3bcKR40PJz1e4L3ZsCk0RnJO8=
Subject key identifier: F2:2E:8D:3D:2A:42:68:1F:44:DD:84:E9:52:37:A8:66:04:D7:98:6D
Authority key identifier: 75:83:B1:51:B7:4B:B2:ED:B0:F5:CE:6B:6E:9B:B1:E0:C3:D0:AD:1B
Certificate issuer: /CN=7583b151b74bb2edb0f5ce6b6e9bb1e0c3d0ad1b
Certificate serial: 019A4D74069992A6DD627849052251E2E810
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dYOxUbdLsu2w9c5rbpux4MPQrRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/0467dc-ccf3-4331-957c-158606318525/1/dYOxUbdLsu2w9c5rbpux4MPQrRs.mft
Manifest number: 1709
Signing time: Tue 04 Nov 2025 06:00:40 +0000
Manifest this update: Tue 04 Nov 2025 06:00:40 +0000
Manifest next update: Wed 05 Nov 2025 06:00:40 +0000
Files and hashes: 1: dYOxUbdLsu2w9c5rbpux4MPQrRs.crl (hash: /ToG9WlDER0HEDogP362/ZJhEUqwB3868f2xDBuDs10=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/0467dc-ccf3-4331-957c-158606318525/1/dYOxUbdLsu2w9c5rbpux4MPQrRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/0467dc-ccf3-4331-957c-158606318525/1/dYOxUbdLsu2w9c5rbpux4MPQrRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/dYOxUbdLsu2w9c5rbpux4MPQrRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:74:06:99:92:a6:dd:62:78:49:05:22:51:e2:e8:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7583b151b74bb2edb0f5ce6b6e9bb1e0c3d0ad1b
Validity
Not Before: Nov 4 06:00:40 2025 GMT
Not After : Nov 5 06:00:40 2025 GMT
Subject: CN=f22e8d3d2a42681f44dd84e95237a86604d7986d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:f2:e9:e5:2c:2a:24:ce:dc:e5:35:0f:c3:b8:
28:d5:87:7c:9b:66:c8:df:3d:2d:5e:fb:cf:bb:82:
98:ed:6e:68:70:9e:df:7e:c9:ff:e3:46:a2:78:d8:
60:8c:a1:a3:8c:f9:b6:d2:39:b1:de:38:38:ec:67:
76:4c:16:e5:d6:1b:75:74:bb:cd:6e:e6:e4:a3:2b:
43:e8:c7:e5:30:0f:37:c6:31:2e:7c:5f:09:dd:df:
a0:7f:56:09:da:43:de:9f:3f:16:a8:05:43:06:cf:
c7:0a:0d:bc:1e:75:22:59:da:a0:c3:3e:6d:dc:65:
95:4d:22:ec:ed:65:ec:7f:23:f3:23:2d:14:25:7b:
ed:3c:d5:8f:39:df:e5:87:62:bc:32:d5:66:ed:9f:
1a:f9:88:b2:39:71:f3:ef:64:21:9e:81:d0:72:e0:
38:6b:34:67:ac:66:1f:7a:0f:11:51:db:6e:aa:a8:
45:03:45:19:78:dc:4d:54:3d:76:bb:0e:e2:4f:c0:
d4:d5:b6:8d:58:a8:bc:f4:99:7c:fc:75:f0:4c:ee:
93:ce:7e:cd:08:0f:c3:e7:de:c9:22:24:c7:03:2c:
ce:42:7c:85:83:87:c0:97:fc:f9:aa:17:5e:bd:2d:
b6:04:31:fd:24:d3:49:89:46:85:f0:fd:e5:63:af:
ab:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:2E:8D:3D:2A:42:68:1F:44:DD:84:E9:52:37:A8:66:04:D7:98:6D
X509v3 Authority Key Identifier:
keyid:75:83:B1:51:B7:4B:B2:ED:B0:F5:CE:6B:6E:9B:B1:E0:C3:D0:AD:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dYOxUbdLsu2w9c5rbpux4MPQrRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/0467dc-ccf3-4331-957c-158606318525/1/dYOxUbdLsu2w9c5rbpux4MPQrRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/0467dc-ccf3-4331-957c-158606318525/1/dYOxUbdLsu2w9c5rbpux4MPQrRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:93:1f:00:52:ab:f5:c3:d4:6c:9e:4c:1a:e6:95:27:ac:15:
b7:a1:9c:99:36:89:9f:9e:46:bc:84:18:d6:79:d5:35:3b:a7:
ae:23:70:40:4f:0c:62:96:41:4f:34:2f:11:e2:87:16:95:28:
31:7d:76:98:84:89:92:43:80:74:ca:8f:9e:5a:80:4f:43:43:
39:76:32:8b:40:27:91:47:0c:28:af:4e:90:70:f0:6c:04:95:
3c:ab:d5:9b:0b:34:5a:ec:e9:88:16:16:12:60:4b:96:5a:fd:
6f:64:04:4e:40:1d:bb:20:1c:b1:53:2e:78:f9:e7:31:55:61:
70:25:84:d2:fb:46:d5:8a:52:57:13:a0:3b:5f:56:80:d8:00:
30:e1:a1:0b:13:9b:e5:bd:77:55:1c:27:1c:63:87:6b:12:19:
26:ae:1b:f1:99:cb:a8:80:09:6a:d9:a6:97:ef:47:c0:84:0a:
3e:01:23:63:45:58:03:60:23:af:fe:17:a9:e6:e1:d5:e6:e5:
21:d3:da:0b:21:92:8b:79:e2:7b:58:1c:7f:de:32:86:89:bb:
ae:40:4f:79:bb:eb:25:d3:7e:71:19:71:89:1f:91:12:d8:d8:
b4:0d:c4:cf:70:f3:6e:64:82:d2:e7:46:96:bb:f6:27:ac:75:
af:da:48:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:20:27 2025 by rpki-client