Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/dfa6a1-1e4c-49ff-a480-274232d69505/1/dQRxYHUyqMev1g1PMXqtxJDrogY.mft
File: dQRxYHUyqMev1g1PMXqtxJDrogY.mft (raw, json)
Hash identifier: wY10gbCeOfhxRg527EhMmQ46IVLpXrgjeSsE9pf1E9E=
Subject key identifier: AA:C9:96:92:39:B3:19:11:D3:D7:A3:17:81:1A:B5:00:87:22:7E:8B
Authority key identifier: 75:04:71:60:75:32:A8:C7:AF:D6:0D:4F:31:7A:AD:C4:90:EB:A2:06
Certificate issuer: /CN=750471607532a8c7afd60d4f317aadc490eba206
Certificate serial: 0199FFC72CB7B1439BB7C521607AA55F8E76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQRxYHUyqMev1g1PMXqtxJDrogY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/dfa6a1-1e4c-49ff-a480-274232d69505/1/dQRxYHUyqMev1g1PMXqtxJDrogY.mft
Manifest number: 16E0
Signing time: Mon 20 Oct 2025 04:01:07 +0000
Manifest this update: Mon 20 Oct 2025 04:01:07 +0000
Manifest next update: Tue 21 Oct 2025 04:01:07 +0000
Files and hashes: 1: dQRxYHUyqMev1g1PMXqtxJDrogY.crl (hash: 0U50ISqICYwrHSmj3j8cw+yKyYgh9Wo2hEPFX8VfBJk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/dfa6a1-1e4c-49ff-a480-274232d69505/1/dQRxYHUyqMev1g1PMXqtxJDrogY.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/dfa6a1-1e4c-49ff-a480-274232d69505/1/dQRxYHUyqMev1g1PMXqtxJDrogY.mft
rsync://rpki.ripe.net/repository/DEFAULT/dQRxYHUyqMev1g1PMXqtxJDrogY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c7:2c:b7:b1:43:9b:b7:c5:21:60:7a:a5:5f:8e:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=750471607532a8c7afd60d4f317aadc490eba206
Validity
Not Before: Oct 20 04:01:07 2025 GMT
Not After : Oct 21 04:01:07 2025 GMT
Subject: CN=aac9969239b31911d3d7a317811ab50087227e8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e9:05:a8:dc:fe:a6:52:ef:8a:d4:a5:f0:b4:
91:75:e4:21:62:67:48:30:cf:96:02:d6:44:c3:dc:
43:e4:0b:92:85:2d:fa:f8:ae:71:a1:89:c9:99:59:
c7:34:df:90:eb:37:d9:a2:59:82:1f:2c:73:22:8f:
4a:4a:e3:95:9c:23:ef:40:37:a3:d2:dd:d4:d1:00:
11:02:1a:99:7f:30:1b:f0:70:19:8b:e8:5c:b7:fc:
c8:31:4b:8e:94:32:c2:d7:ce:38:9a:29:c5:b6:ef:
6d:35:50:9c:5b:a1:23:7c:5b:f9:42:3c:27:95:94:
e8:56:99:5f:45:02:94:75:59:ea:68:7e:77:10:81:
df:ce:78:85:5d:f5:6f:4c:c5:b0:84:f7:64:68:68:
10:cd:99:85:89:fb:ff:39:69:91:ba:3f:c8:67:40:
b1:43:7f:68:00:e8:d3:90:48:3c:ff:93:10:d2:40:
55:7f:52:c4:55:2f:fd:84:8a:5f:8f:2b:89:fa:7e:
b5:c5:fe:f8:38:c8:6d:45:1b:e0:ed:12:3f:cf:69:
95:4f:f9:cf:70:1a:93:1e:26:a5:63:3a:16:02:d9:
3f:bb:14:31:33:cf:67:d7:ab:e2:ac:60:1c:3b:c4:
cd:92:ee:4c:13:99:c9:c3:02:c7:5e:39:1c:c3:05:
f7:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:C9:96:92:39:B3:19:11:D3:D7:A3:17:81:1A:B5:00:87:22:7E:8B
X509v3 Authority Key Identifier:
keyid:75:04:71:60:75:32:A8:C7:AF:D6:0D:4F:31:7A:AD:C4:90:EB:A2:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQRxYHUyqMev1g1PMXqtxJDrogY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/dfa6a1-1e4c-49ff-a480-274232d69505/1/dQRxYHUyqMev1g1PMXqtxJDrogY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/dfa6a1-1e4c-49ff-a480-274232d69505/1/dQRxYHUyqMev1g1PMXqtxJDrogY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:1c:c0:98:7b:2a:4e:76:aa:37:15:9f:71:ee:5e:83:79:36:
12:e4:2d:02:d1:55:28:3a:8e:69:e4:d3:36:ea:29:24:c5:83:
b5:6d:1b:29:13:b1:c3:73:0f:df:f1:66:b5:53:29:fa:a7:9d:
9d:c2:30:07:a7:f1:6f:c0:80:48:7b:8d:85:29:38:43:d7:e2:
e0:db:23:5b:ff:2c:8c:f0:46:97:69:da:9c:27:04:d9:3d:27:
b8:13:1a:65:9d:8a:95:cd:ba:7b:a1:10:1d:cd:c3:37:da:33:
c4:90:f9:db:d3:ad:4a:f0:aa:60:9b:8a:f2:29:7e:8e:34:4f:
f5:8e:31:53:a5:5d:90:17:d0:be:52:a6:0d:4c:13:7d:9d:ce:
a4:10:d5:5a:1c:33:1a:2e:7e:0c:04:d7:61:5c:78:a1:f8:cd:
77:9d:71:75:c0:16:8e:71:ba:bd:ae:b0:0c:22:cb:c0:38:75:
11:40:45:a3:fc:fa:1a:3c:a8:43:9c:b0:9c:aa:3f:d6:13:46:
8d:91:45:65:5e:10:3d:8e:26:b4:28:f3:86:43:07:82:02:c7:
d7:65:d6:f2:2a:9c:3a:ff:f6:b9:86:b7:60:16:af:a2:dd:3f:
46:e9:68:2e:cc:f5:8c:28:0a:29:2e:45:10:58:20:d5:83:74:
75:28:9f:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:46:47 2025 by rpki-client