Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/d29d3f-1696-4ed4-96d2-e7eb817ede30/1/Da7a5Z2cmvUe9UivsMlkOM73IRw.mft
File: Da7a5Z2cmvUe9UivsMlkOM73IRw.mft (raw, json)
Hash identifier: xmkvmgdL+ol3+NPc5xen7+Qv2R3/yzJflPBrsdcAtrM=
Subject key identifier: 3F:19:06:32:6A:F1:DD:19:56:56:1E:13:6C:AD:42:B3:55:F1:41:CC
Authority key identifier: 0D:AE:DA:E5:9D:9C:9A:F5:1E:F5:48:AF:B0:C9:64:38:CE:F7:21:1C
Certificate issuer: /CN=0daedae59d9c9af51ef548afb0c96438cef7211c
Certificate serial: 019A4F994CC7D6E6EB03D0DA848A9A7B2459
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Da7a5Z2cmvUe9UivsMlkOM73IRw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/d29d3f-1696-4ed4-96d2-e7eb817ede30/1/Da7a5Z2cmvUe9UivsMlkOM73IRw.mft
Manifest number: 170A
Signing time: Tue 04 Nov 2025 16:00:38 +0000
Manifest this update: Tue 04 Nov 2025 16:00:38 +0000
Manifest next update: Wed 05 Nov 2025 16:00:38 +0000
Files and hashes: 1: Da7a5Z2cmvUe9UivsMlkOM73IRw.crl (hash: Zq6wbG7+HhY0OB8rEIWiBkZXUTq4ukEv/lk2pujrmZ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/d29d3f-1696-4ed4-96d2-e7eb817ede30/1/Da7a5Z2cmvUe9UivsMlkOM73IRw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/d29d3f-1696-4ed4-96d2-e7eb817ede30/1/Da7a5Z2cmvUe9UivsMlkOM73IRw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Da7a5Z2cmvUe9UivsMlkOM73IRw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:99:4c:c7:d6:e6:eb:03:d0:da:84:8a:9a:7b:24:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0daedae59d9c9af51ef548afb0c96438cef7211c
Validity
Not Before: Nov 4 16:00:38 2025 GMT
Not After : Nov 5 16:00:38 2025 GMT
Subject: CN=3f1906326af1dd1956561e136cad42b355f141cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:c9:1c:01:16:af:7f:06:c8:5e:4b:52:df:e7:
9d:91:ba:4a:f7:95:4c:4d:36:33:35:f6:44:a3:0a:
c8:53:3f:ee:dd:3c:24:27:57:f0:47:a4:68:c2:60:
9a:72:33:a2:83:6d:af:5e:5d:7a:4c:4e:93:37:f5:
e7:cc:e3:be:38:61:88:1e:76:44:a8:be:f6:9b:45:
25:19:a7:c2:ec:2b:98:06:bc:1f:80:3d:7a:32:39:
10:15:58:ab:21:37:24:82:24:53:61:91:60:cc:01:
31:80:a8:db:10:56:39:b7:a6:4d:57:df:05:43:57:
f2:86:f2:02:f9:71:d8:7f:d1:ef:19:b5:8d:89:a5:
df:31:33:fe:61:09:97:74:d6:5f:ab:ea:a5:27:74:
f8:8b:da:d1:2c:12:b4:73:62:99:16:2b:c0:24:f8:
f5:4c:0b:23:c7:08:c4:64:ce:43:bc:ee:3e:08:80:
23:1c:c9:86:a7:01:5a:0b:08:73:fd:99:97:6c:1d:
d0:24:d6:94:59:6e:e5:13:f7:c2:bf:48:1a:58:03:
a8:34:f5:66:34:e1:6e:21:eb:b1:8b:df:9b:98:37:
f7:bf:51:32:99:e7:23:0b:9f:37:49:12:55:7c:f6:
7b:2d:1d:b5:67:b7:99:1b:6d:05:1d:cf:ee:53:8f:
81:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:19:06:32:6A:F1:DD:19:56:56:1E:13:6C:AD:42:B3:55:F1:41:CC
X509v3 Authority Key Identifier:
keyid:0D:AE:DA:E5:9D:9C:9A:F5:1E:F5:48:AF:B0:C9:64:38:CE:F7:21:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Da7a5Z2cmvUe9UivsMlkOM73IRw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d29d3f-1696-4ed4-96d2-e7eb817ede30/1/Da7a5Z2cmvUe9UivsMlkOM73IRw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d29d3f-1696-4ed4-96d2-e7eb817ede30/1/Da7a5Z2cmvUe9UivsMlkOM73IRw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:cb:ee:cc:e2:37:39:d2:1a:64:9b:ec:51:68:a9:9a:9b:42:
c8:f0:6c:4b:7e:33:cd:92:25:a0:47:2e:47:23:b3:93:bf:fe:
c3:8b:fb:ee:cd:e2:81:d3:09:3f:1b:f7:c8:8a:09:38:38:90:
33:00:19:7c:5d:dc:2b:ff:f1:bc:91:12:bd:8b:60:64:89:10:
1e:b1:95:b7:0e:f0:87:0f:75:5c:79:b0:fc:6b:5e:83:df:aa:
e9:02:bc:d8:2b:99:c5:14:48:61:9e:a8:f6:ae:e2:62:42:55:
2e:f3:aa:48:dd:13:d8:c5:6d:48:43:4a:b8:58:18:ec:21:af:
a0:93:be:e6:fe:ef:0a:59:5c:ef:23:72:72:1d:62:94:ee:be:
9f:aa:c9:56:a2:08:4b:0f:fe:a7:d4:1e:45:c0:d3:e7:0f:e6:
4c:09:fe:c5:4d:98:7f:f0:87:8a:46:c4:c8:12:43:35:83:41:
e8:9d:f5:7a:02:5a:a1:ea:6c:f2:d2:5b:c0:26:e2:c8:d4:e4:
5d:db:39:b1:a1:b0:13:ed:55:7c:c4:8d:d7:dd:b8:89:3f:c4:
ac:f1:87:0d:e5:1c:20:a8:f3:65:5e:19:47:3a:74:fa:58:49:
b5:2d:1e:0d:c0:fa:ae:1a:ab:32:cd:17:67:d0:0d:da:9a:44:
61:fb:a5:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:14:42 2025 by rpki-client