Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/4cca48-3189-4491-aede-d3d30ebc36ac/1/dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.mft
File: dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.mft (raw, json)
Hash identifier: HrigO89y3enIQZunOSL35K1bYQisZhrE1Q05m9C7t9U=
Subject key identifier: 37:43:C2:39:DE:7D:E0:E3:27:82:85:11:98:C0:25:9F:2D:91:6E:21
Authority key identifier: 75:18:C2:27:3A:D7:43:64:64:9B:CB:2E:2D:34:FB:70:7F:5D:5B:94
Certificate issuer: /CN=7518c2273ad74364649bcb2e2d34fb707f5d5b94
Certificate serial: 019A0035DED3F09B38336F75434361577623
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/4cca48-3189-4491-aede-d3d30ebc36ac/1/dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.mft
Manifest number: 04F8
Signing time: Mon 20 Oct 2025 06:02:01 +0000
Manifest this update: Mon 20 Oct 2025 06:02:01 +0000
Manifest next update: Tue 21 Oct 2025 06:02:01 +0000
Files and hashes: 1: dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.crl (hash: QYNz1nwPkmDVw+EHNAbo5oVND98WF6N7sm2Zx2UyBww=)
2: lEeX1Eg0Z-W1kOpICD-OcFxqe18.roa (hash: oHYZvay6jraEH9M8mxk8k8IOPDuHNAZIsTWqM0koag4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/4cca48-3189-4491-aede-d3d30ebc36ac/1/dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/4cca48-3189-4491-aede-d3d30ebc36ac/1/dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 06:02:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:35:de:d3:f0:9b:38:33:6f:75:43:43:61:57:76:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7518c2273ad74364649bcb2e2d34fb707f5d5b94
Validity
Not Before: Oct 20 06:02:01 2025 GMT
Not After : Oct 21 06:02:01 2025 GMT
Subject: CN=3743c239de7de0e32782851198c0259f2d916e21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:56:4a:2b:84:fe:6a:f2:8f:5c:59:68:05:de:
7c:d8:ac:37:90:2c:47:80:63:77:bc:f8:db:06:4c:
75:c6:35:2c:2f:2d:2d:77:fc:a5:15:7a:69:bb:25:
f4:8c:f1:32:a2:7d:bc:65:1c:2c:93:16:60:b0:30:
b0:7d:4f:a5:e1:4e:f9:36:b2:44:81:73:10:ce:38:
58:b4:c5:ed:27:60:b7:f8:d3:6d:29:34:7b:db:fa:
da:8d:eb:51:c2:2b:24:94:e5:71:e9:75:20:b3:bd:
99:a3:f1:1b:86:98:cb:da:e7:a5:c6:bb:cf:4a:c6:
03:93:44:e1:64:f7:34:fc:c8:6e:9a:9d:43:63:ee:
6d:09:d0:16:4c:a0:3f:1f:94:bf:44:5e:59:64:fb:
61:7e:c4:45:aa:a1:4f:9b:9a:9e:71:44:fd:44:76:
4d:a0:b6:a6:67:3a:8b:7d:00:70:f4:8b:87:b3:73:
10:a1:41:83:de:23:53:4d:2f:c4:4e:f9:4d:33:b8:
75:22:be:a8:90:9e:83:d0:e4:a1:db:19:0a:73:eb:
cf:70:d0:1a:d8:5e:1c:8a:fd:b1:0e:df:44:c8:02:
2d:12:0c:d0:fd:fb:0e:53:7c:5f:c2:aa:1e:41:e7:
ca:a8:72:6d:39:05:87:ab:b8:90:d8:df:ce:2d:b7:
ff:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:43:C2:39:DE:7D:E0:E3:27:82:85:11:98:C0:25:9F:2D:91:6E:21
X509v3 Authority Key Identifier:
keyid:75:18:C2:27:3A:D7:43:64:64:9B:CB:2E:2D:34:FB:70:7F:5D:5B:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/4cca48-3189-4491-aede-d3d30ebc36ac/1/dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/4cca48-3189-4491-aede-d3d30ebc36ac/1/dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:9e:a0:ea:02:31:14:08:6f:ee:79:4b:00:3f:27:55:5c:12:
48:48:a3:97:37:64:aa:74:1a:25:01:fa:82:20:08:39:ce:59:
62:cf:4c:d6:22:8e:a7:db:18:d0:02:da:4b:0d:d0:d2:a7:fc:
b6:82:99:94:e1:8f:a7:e3:57:34:5e:6d:75:f5:b0:91:49:8d:
a1:7b:5d:59:33:f3:6a:25:7b:4c:6a:d0:9b:8b:39:04:0b:c0:
03:89:8d:c8:38:4c:da:b8:8c:8b:d4:0b:48:f5:24:44:2f:5d:
c3:19:69:e2:6d:3c:45:c7:d7:de:25:01:1d:f8:e1:ea:ab:6f:
de:fe:f0:18:8a:74:f6:7c:99:37:25:69:81:6d:40:c0:e1:9a:
02:48:fc:50:6d:79:22:99:8b:0c:b4:f8:7c:13:b7:a3:66:91:
f7:f0:49:12:93:45:f6:81:0b:6b:1e:26:ea:34:a5:b8:36:99:
ce:15:29:d2:6c:89:50:35:0f:60:f1:74:7c:3b:1b:5d:de:46:
43:49:81:a5:84:78:44:79:4d:a8:e6:57:4d:10:56:c8:a8:8b:
df:3a:bb:4c:b9:15:0e:ef:cb:50:43:78:d8:cf:c0:a4:0a:f3:
a4:87:ae:f6:5c:9f:e9:dd:61:b2:5d:41:d0:f9:bf:28:5e:1e:
ad:d9:95:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:53:31 2025 by rpki-client