Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/2cdb3d-ab43-4526-8357-c0243a3bdafb/1/dgf2ne5DrAHX3-rKm3aiQOpu82Y.mft
File: dgf2ne5DrAHX3-rKm3aiQOpu82Y.mft (raw, json)
Hash identifier: 6XLpK+1j/h9P+fmOIn9+i0uBOzSPyKHfacMM+m+WSSs=
Subject key identifier: 2C:82:1A:2C:40:1A:F6:46:EB:FF:0D:CE:D4:7F:02:D0:69:DC:FD:F4
Authority key identifier: 76:07:F6:9D:EE:43:AC:01:D7:DF:EA:CA:9B:76:A2:40:EA:6E:F3:66
Certificate issuer: /CN=7607f69dee43ac01d7dfeaca9b76a240ea6ef366
Certificate serial: 019A50E33D4D25AE05DCAA5E2E5D3A6CAAC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dgf2ne5DrAHX3-rKm3aiQOpu82Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/2cdb3d-ab43-4526-8357-c0243a3bdafb/1/dgf2ne5DrAHX3-rKm3aiQOpu82Y.mft
Manifest number: 0539
Signing time: Tue 04 Nov 2025 22:01:00 +0000
Manifest this update: Tue 04 Nov 2025 22:01:00 +0000
Manifest next update: Wed 05 Nov 2025 22:01:00 +0000
Files and hashes: 1: dgf2ne5DrAHX3-rKm3aiQOpu82Y.crl (hash: h03O0zw8EuNIgiTXyW6NJ72RB5swTgvd7jfOa0E+tKs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/2cdb3d-ab43-4526-8357-c0243a3bdafb/1/dgf2ne5DrAHX3-rKm3aiQOpu82Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/2cdb3d-ab43-4526-8357-c0243a3bdafb/1/dgf2ne5DrAHX3-rKm3aiQOpu82Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/dgf2ne5DrAHX3-rKm3aiQOpu82Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e3:3d:4d:25:ae:05:dc:aa:5e:2e:5d:3a:6c:aa:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7607f69dee43ac01d7dfeaca9b76a240ea6ef366
Validity
Not Before: Nov 4 22:01:00 2025 GMT
Not After : Nov 5 22:01:00 2025 GMT
Subject: CN=2c821a2c401af646ebff0dced47f02d069dcfdf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:51:1b:51:3f:d7:be:01:14:c5:81:50:e8:74:
52:0c:cc:5a:38:fe:0e:19:72:40:a8:d6:1c:f8:5a:
3b:83:ab:62:f0:e0:bb:1e:32:07:e5:fb:87:e4:46:
a1:69:d0:d6:34:48:8a:15:e2:c8:b1:f7:a6:01:a7:
b3:29:68:8c:de:ac:9c:ae:f0:74:ff:db:b1:3f:9d:
15:0b:fa:d6:7a:05:4a:ff:fa:e4:ee:97:8e:27:4c:
57:a1:db:94:95:e1:11:44:f3:1a:9d:64:25:14:78:
24:b9:47:22:11:70:82:5d:28:0b:2f:8c:ae:a2:da:
e1:1a:0d:14:33:11:80:61:dc:c2:98:05:d2:89:d1:
4a:19:b0:6e:ea:be:6e:8f:35:f5:bf:2f:da:b6:2c:
2e:26:67:8b:4f:3b:0e:75:44:fe:2f:d1:d2:d4:3b:
70:92:ed:b0:0c:fc:fb:3c:e2:12:bb:41:e2:75:d6:
b0:86:1f:28:65:62:5d:f4:5d:5f:d6:b8:86:a0:bc:
3f:c5:b0:c0:30:35:81:ed:ec:b0:3e:02:0b:2c:b5:
82:c4:a1:48:ca:de:fd:1a:13:87:6a:9c:8a:bb:51:
62:64:5b:9e:09:26:7d:66:39:f0:3a:50:1f:8c:a7:
8f:02:45:bf:45:e2:72:71:80:76:35:2a:d3:0f:a2:
e1:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:82:1A:2C:40:1A:F6:46:EB:FF:0D:CE:D4:7F:02:D0:69:DC:FD:F4
X509v3 Authority Key Identifier:
keyid:76:07:F6:9D:EE:43:AC:01:D7:DF:EA:CA:9B:76:A2:40:EA:6E:F3:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dgf2ne5DrAHX3-rKm3aiQOpu82Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/2cdb3d-ab43-4526-8357-c0243a3bdafb/1/dgf2ne5DrAHX3-rKm3aiQOpu82Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/2cdb3d-ab43-4526-8357-c0243a3bdafb/1/dgf2ne5DrAHX3-rKm3aiQOpu82Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:50:6b:b9:f7:38:7f:95:b2:07:3f:f3:e4:2d:78:cf:6e:4f:
4f:11:86:c4:da:16:5e:1e:5d:6b:93:93:7e:5d:c2:7c:6b:a3:
fd:21:30:f1:0a:28:bd:1e:8a:5b:2a:45:5e:c9:b7:e9:83:fe:
70:8c:5e:35:26:7b:ef:dd:90:de:af:b2:32:94:0f:c9:a0:09:
52:20:80:45:60:5c:bb:40:4f:31:ae:4e:25:e3:3f:3e:4c:20:
05:ca:3d:aa:f4:69:6f:35:25:bb:da:2b:47:fb:e0:6c:3d:44:
3a:54:68:a7:29:3a:00:4a:f0:3d:ce:97:f9:4c:f6:8b:99:6c:
3d:ff:fe:35:26:39:25:30:34:fe:45:33:9e:11:9a:e1:76:77:
ae:03:97:f7:8e:0e:84:7c:77:61:eb:92:1d:61:7f:77:76:ad:
00:4e:4a:45:e7:37:d1:fb:d9:22:5c:4a:ac:cd:c2:4c:81:98:
b9:20:a8:06:60:a4:1d:d0:61:db:17:19:dc:50:55:a0:f3:0b:
41:f1:7c:38:e2:22:22:d8:74:ad:5c:7a:98:c6:c7:60:c2:35:
02:15:c0:4a:4e:6e:a0:35:85:db:c3:ec:b9:d2:04:32:d8:8d:
1d:63:b2:a9:c0:de:a7:25:df:0c:d1:ed:4b:34:8e:c5:fd:a7:
b1:66:fc:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:46:52 2025 by rpki-client