Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/c49ec2-37da-41a9-96fb-5141fa39080a/1/dCL5hcs0oDx8VYFkLG1utDLIPpQ.mft
File: dCL5hcs0oDx8VYFkLG1utDLIPpQ.mft (raw, json)
Hash identifier: LPSC5CKlgPq62OtW3mwPtMHj57uh3hA0PB5MYO65pkM=
Subject key identifier: 36:BF:4C:6A:30:26:4C:43:5C:AA:65:8C:C9:38:C6:2C:46:E7:EB:CB
Authority key identifier: 74:22:F9:85:CB:34:A0:3C:7C:55:81:64:2C:6D:6E:B4:32:C8:3E:94
Certificate issuer: /CN=7422f985cb34a03c7c5581642c6d6eb432c83e94
Certificate serial: 0199FC58D0E2158284997BBE6215401C006A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dCL5hcs0oDx8VYFkLG1utDLIPpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/c49ec2-37da-41a9-96fb-5141fa39080a/1/dCL5hcs0oDx8VYFkLG1utDLIPpQ.mft
Manifest number: 0EB9
Signing time: Sun 19 Oct 2025 12:01:43 +0000
Manifest this update: Sun 19 Oct 2025 12:01:43 +0000
Manifest next update: Mon 20 Oct 2025 12:01:43 +0000
Files and hashes: 1: dCL5hcs0oDx8VYFkLG1utDLIPpQ.crl (hash: lyQUP/uorFKQAz00RimPYjKhFj63MLElzrEavNvIS+E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/c49ec2-37da-41a9-96fb-5141fa39080a/1/dCL5hcs0oDx8VYFkLG1utDLIPpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/c49ec2-37da-41a9-96fb-5141fa39080a/1/dCL5hcs0oDx8VYFkLG1utDLIPpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/dCL5hcs0oDx8VYFkLG1utDLIPpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:d0:e2:15:82:84:99:7b:be:62:15:40:1c:00:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7422f985cb34a03c7c5581642c6d6eb432c83e94
Validity
Not Before: Oct 19 12:01:43 2025 GMT
Not After : Oct 20 12:01:43 2025 GMT
Subject: CN=36bf4c6a30264c435caa658cc938c62c46e7ebcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:d7:85:23:10:4d:da:45:85:7b:96:bc:90:72:
b9:af:2a:47:18:a4:a8:f5:14:c9:84:2f:32:e9:9b:
39:55:be:17:2e:77:84:d4:31:00:0c:5a:10:7c:7c:
ef:66:33:ca:bb:e5:4b:50:b9:60:0f:36:89:bc:9c:
b9:c1:c7:3f:18:ba:ea:8e:be:b2:92:bf:04:16:55:
7f:f1:26:74:d6:e3:68:e5:be:bd:53:d1:d6:b9:58:
51:1c:14:11:48:4d:d6:0d:53:15:30:c2:63:77:2e:
30:92:88:13:cc:b3:8d:39:5b:61:d1:68:a0:fd:e4:
6c:11:cb:2d:7d:91:c1:5c:a4:9f:48:21:0c:02:8e:
96:1f:29:13:93:dd:70:33:d9:fe:d2:bc:b3:01:d0:
4a:9f:a1:8c:c9:45:83:43:25:c4:3e:c4:c2:cb:8d:
2a:d5:b5:99:80:d7:a4:30:3d:d1:eb:8f:cd:b1:ff:
a0:ed:2b:65:1e:f2:a3:24:28:df:7f:ad:09:ae:a2:
02:d9:ac:36:26:d4:30:8a:86:ff:f5:2d:c6:27:e4:
bb:b8:5c:3b:be:ab:d7:bc:cc:af:ad:4d:0c:e2:8c:
e3:22:53:86:69:84:18:d4:ef:95:20:0f:20:e2:3a:
d6:c0:99:28:a9:a3:2d:ce:bd:9d:0c:06:74:f8:7e:
56:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:BF:4C:6A:30:26:4C:43:5C:AA:65:8C:C9:38:C6:2C:46:E7:EB:CB
X509v3 Authority Key Identifier:
keyid:74:22:F9:85:CB:34:A0:3C:7C:55:81:64:2C:6D:6E:B4:32:C8:3E:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dCL5hcs0oDx8VYFkLG1utDLIPpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/c49ec2-37da-41a9-96fb-5141fa39080a/1/dCL5hcs0oDx8VYFkLG1utDLIPpQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/c49ec2-37da-41a9-96fb-5141fa39080a/1/dCL5hcs0oDx8VYFkLG1utDLIPpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:cc:29:de:91:ad:ab:ec:06:d6:6b:9c:50:78:58:0a:d5:f5:
2e:1f:96:9c:64:bb:97:93:7a:e5:9d:63:70:30:d0:8a:3c:99:
3c:01:7c:58:4e:c5:52:f4:98:6a:f4:46:22:97:7d:52:fd:58:
ff:cf:e3:e9:6a:7b:2e:04:bb:d0:b6:52:92:f4:5d:ab:55:94:
b6:25:6c:38:98:24:f7:64:96:6d:10:90:1b:b4:a5:86:4a:42:
21:31:76:f6:17:a7:85:9c:4c:d7:19:d1:53:f1:0d:a7:74:19:
30:b4:3e:5f:95:93:a9:70:ce:60:f9:96:54:3b:58:67:6b:ee:
97:af:6c:af:d8:67:0c:1a:9f:ed:f3:a8:88:7b:f5:05:1f:46:
69:b9:12:82:60:34:ad:13:68:eb:fa:a1:da:ff:31:64:4e:8e:
c3:9a:10:28:ab:1a:8d:03:c0:69:ce:9f:a6:54:ff:5c:7c:25:
33:3c:b2:34:84:17:1d:63:a9:ca:36:1d:dc:ed:91:d6:e7:43:
b4:e1:b4:69:e4:a7:ac:a2:68:79:a2:17:a2:68:c7:ae:b4:b4:
02:11:78:64:15:45:44:dc:1a:e8:08:88:12:e4:27:66:16:36:
5d:dc:9f:13:0e:55:4d:7a:4e:6f:bd:3f:6c:86:d2:09:9b:c7:
7d:5a:b4:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:27:35 2025 by rpki-client