Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/d531a8-02ae-4b0b-8f44-5287698aff3c/1/dLCDZQKVGJ8AmqdMEsvGHuI_p1M.mft
File: dLCDZQKVGJ8AmqdMEsvGHuI_p1M.mft (raw, json)
Hash identifier: KKw5/sJXvnRzmq1aFwPlRjqeM0suERNt8hj4eBQctOk=
Subject key identifier: E5:3B:70:26:B7:0C:85:45:F8:76:0E:37:3F:6B:2E:4B:00:FF:E6:08
Authority key identifier: 74:B0:83:65:02:95:18:9F:00:9A:A7:4C:12:CB:C6:1E:E2:3F:A7:53
Certificate issuer: /CN=74b083650295189f009aa74c12cbc61ee23fa753
Certificate serial: 0199FBEB93199628EF6038CA544866388559
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dLCDZQKVGJ8AmqdMEsvGHuI_p1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/d531a8-02ae-4b0b-8f44-5287698aff3c/1/dLCDZQKVGJ8AmqdMEsvGHuI_p1M.mft
Manifest number: 16E0
Signing time: Sun 19 Oct 2025 10:02:23 +0000
Manifest this update: Sun 19 Oct 2025 10:02:23 +0000
Manifest next update: Mon 20 Oct 2025 10:02:23 +0000
Files and hashes: 1: dLCDZQKVGJ8AmqdMEsvGHuI_p1M.crl (hash: YW3myy6bmlkihLdBlPzyg2tCtA0mnYmdOf6H0jbM7N8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/d531a8-02ae-4b0b-8f44-5287698aff3c/1/dLCDZQKVGJ8AmqdMEsvGHuI_p1M.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/d531a8-02ae-4b0b-8f44-5287698aff3c/1/dLCDZQKVGJ8AmqdMEsvGHuI_p1M.mft
rsync://rpki.ripe.net/repository/DEFAULT/dLCDZQKVGJ8AmqdMEsvGHuI_p1M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:93:19:96:28:ef:60:38:ca:54:48:66:38:85:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74b083650295189f009aa74c12cbc61ee23fa753
Validity
Not Before: Oct 19 10:02:23 2025 GMT
Not After : Oct 20 10:02:23 2025 GMT
Subject: CN=e53b7026b70c8545f8760e373f6b2e4b00ffe608
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:fc:f9:f9:3f:65:70:dc:a0:b0:f4:54:62:e8:
93:41:88:79:a6:4f:de:be:aa:71:69:cf:69:80:a9:
11:7a:21:3f:21:81:ce:36:ac:da:db:02:32:0f:dd:
bc:68:91:35:92:79:29:70:46:0a:8d:3f:e9:15:41:
ea:d9:80:54:1d:87:f8:52:7f:a3:b4:59:00:ec:15:
2b:5d:1e:90:10:82:d3:9f:ab:43:7e:2c:71:bf:14:
d0:65:5e:da:f4:05:f7:98:1c:0f:4e:62:b2:86:8b:
e0:97:36:e1:e0:03:76:c9:6e:fb:3d:0b:d4:d2:b7:
d6:70:ee:09:11:5c:1e:9d:3f:85:5e:b9:25:4f:78:
ac:86:e9:4a:fb:9b:33:82:5b:74:9e:8f:53:03:88:
5e:73:95:78:a7:82:79:dd:a5:7c:79:cf:44:cd:55:
37:bd:99:1f:b6:ea:1c:bf:55:04:6c:22:47:28:b5:
60:16:b7:5e:22:16:29:43:63:06:3f:42:e3:74:3d:
15:77:07:b3:24:4f:4c:b9:48:38:02:9d:eb:9d:35:
5b:4e:67:b9:3b:4b:d0:0c:a1:fd:85:47:18:7d:44:
9e:6e:de:b5:7f:8b:a6:03:49:21:c1:0d:3d:e0:a3:
5c:5c:25:d6:7f:ff:e5:1e:61:4b:97:d8:07:d4:77:
28:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:3B:70:26:B7:0C:85:45:F8:76:0E:37:3F:6B:2E:4B:00:FF:E6:08
X509v3 Authority Key Identifier:
keyid:74:B0:83:65:02:95:18:9F:00:9A:A7:4C:12:CB:C6:1E:E2:3F:A7:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dLCDZQKVGJ8AmqdMEsvGHuI_p1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d531a8-02ae-4b0b-8f44-5287698aff3c/1/dLCDZQKVGJ8AmqdMEsvGHuI_p1M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d531a8-02ae-4b0b-8f44-5287698aff3c/1/dLCDZQKVGJ8AmqdMEsvGHuI_p1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:9d:b7:a3:32:82:79:30:19:b1:08:b4:34:66:5d:57:19:de:
4f:17:0b:32:66:72:60:33:23:97:09:2e:65:2f:39:89:59:86:
5c:e0:2a:45:22:6e:65:cc:43:d3:b5:1c:11:b4:0b:37:24:9a:
9b:a4:94:5d:1d:f4:df:61:cb:2f:03:f5:e6:44:7c:40:32:06:
3f:39:70:78:9c:73:28:73:03:b8:9e:ef:1d:0e:17:58:34:69:
12:8f:01:68:ac:ef:7b:3d:21:14:98:f1:51:de:ea:4c:42:de:
5d:9f:f6:e7:d5:28:cb:89:72:8b:90:cb:5f:7d:53:31:e1:ad:
3f:e7:b5:d9:a0:96:96:60:0e:a8:57:25:6b:3b:ef:da:fc:b1:
8d:49:6c:9a:27:91:a0:bc:a6:67:ec:44:5c:38:8c:2e:52:08:
ad:13:64:07:cd:f6:0d:5b:51:0c:de:43:3d:8b:61:0a:3d:b6:
b0:43:18:85:62:1c:f7:ac:96:64:c9:21:2c:d3:ab:f4:0b:90:
e7:11:f2:bd:f8:22:c2:49:86:67:82:96:1f:c9:30:25:d2:95:
fa:17:4d:18:2f:57:21:56:7e:fd:75:b3:56:d3:16:83:49:81:
16:df:f2:f9:b9:16:fb:33:77:60:84:7b:98:f4:ad:ab:55:65:
50:40:45:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:05:49 2025 by rpki-client