Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/968732-6d76-464d-97c4-e40a334691c9/1/d1xabqkPXz0AfBDkROO5Y7bTDMU.mft
File: d1xabqkPXz0AfBDkROO5Y7bTDMU.mft (raw, json)
Hash identifier: UnOz/NkWB3ZHBw6v2VLo6cebmClTC/Y1/Atc7DOQJTA=
Subject key identifier: FD:7D:2B:AE:31:AF:91:DD:17:72:42:73:63:D5:FE:2A:2E:80:98:A4
Authority key identifier: 77:5C:5A:6E:A9:0F:5F:3D:00:7C:10:E4:44:E3:B9:63:B6:D3:0C:C5
Certificate issuer: /CN=775c5a6ea90f5f3d007c10e444e3b963b6d30cc5
Certificate serial: 0199FCC67341428762810A53B05593AD22AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d1xabqkPXz0AfBDkROO5Y7bTDMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/968732-6d76-464d-97c4-e40a334691c9/1/d1xabqkPXz0AfBDkROO5Y7bTDMU.mft
Manifest number: 04BC
Signing time: Sun 19 Oct 2025 14:01:28 +0000
Manifest this update: Sun 19 Oct 2025 14:01:28 +0000
Manifest next update: Mon 20 Oct 2025 14:01:28 +0000
Files and hashes: 1: d1xabqkPXz0AfBDkROO5Y7bTDMU.crl (hash: 98/gtLMFOOlInemxc0Jy/R9mLoIasVPearzkfzEsgSc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/968732-6d76-464d-97c4-e40a334691c9/1/d1xabqkPXz0AfBDkROO5Y7bTDMU.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/968732-6d76-464d-97c4-e40a334691c9/1/d1xabqkPXz0AfBDkROO5Y7bTDMU.mft
rsync://rpki.ripe.net/repository/DEFAULT/d1xabqkPXz0AfBDkROO5Y7bTDMU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 14:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:73:41:42:87:62:81:0a:53:b0:55:93:ad:22:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=775c5a6ea90f5f3d007c10e444e3b963b6d30cc5
Validity
Not Before: Oct 19 14:01:28 2025 GMT
Not After : Oct 20 14:01:28 2025 GMT
Subject: CN=fd7d2bae31af91dd1772427363d5fe2a2e8098a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:54:ac:0d:cb:df:50:c5:68:c0:6c:14:9f:81:
0b:47:9a:b0:be:1d:f3:b8:84:e3:50:21:a0:2f:18:
54:da:cd:76:c9:cc:92:86:4c:9f:c4:36:f7:f0:3e:
45:71:ce:a0:5a:68:5c:39:3b:8c:9b:bf:9f:ba:1b:
d0:b4:00:6d:05:14:ef:df:f0:40:74:75:64:af:f1:
92:9c:f7:b1:ea:d1:81:1a:fd:95:ca:15:8f:ed:ea:
2d:1a:a0:15:ea:bb:b5:11:9d:f2:d2:8b:ac:f0:99:
05:81:2d:14:de:50:2a:2a:7e:72:f9:1f:c6:ca:b6:
0d:09:33:b4:c4:ac:91:76:8f:2b:42:12:ea:be:59:
2a:6e:b2:a1:da:8c:69:a2:46:ad:60:a3:f9:3e:50:
6b:75:e5:57:8d:b4:31:a7:23:56:cd:59:0e:6c:f8:
91:cc:15:66:41:6d:ce:7c:7b:94:82:e5:e1:8e:8b:
b0:0d:34:1b:65:32:53:d6:a1:06:26:cd:5f:2d:fa:
4b:af:dd:c0:61:7e:a1:93:0d:99:d1:66:a1:7b:6c:
0a:cf:cd:5d:eb:fe:fd:f5:ae:56:65:93:2e:17:f6:
0a:ea:b6:4e:e7:13:ff:c3:c4:03:0e:10:3a:68:57:
44:c4:ea:6f:bb:7f:4f:1e:75:a0:51:a6:44:7d:e9:
8e:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:7D:2B:AE:31:AF:91:DD:17:72:42:73:63:D5:FE:2A:2E:80:98:A4
X509v3 Authority Key Identifier:
keyid:77:5C:5A:6E:A9:0F:5F:3D:00:7C:10:E4:44:E3:B9:63:B6:D3:0C:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1xabqkPXz0AfBDkROO5Y7bTDMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/968732-6d76-464d-97c4-e40a334691c9/1/d1xabqkPXz0AfBDkROO5Y7bTDMU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/968732-6d76-464d-97c4-e40a334691c9/1/d1xabqkPXz0AfBDkROO5Y7bTDMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:42:5c:78:4c:c1:fa:d0:66:bd:fb:6b:7a:5d:92:af:4d:9d:
65:1a:67:d9:ed:c7:dc:49:56:cb:c5:7f:d7:8c:e8:f2:f9:64:
82:66:3d:d9:e7:33:6e:34:7d:a1:d3:cf:95:99:cb:cf:26:0e:
77:e4:dc:6b:43:be:3e:c8:36:f3:09:10:39:7d:24:a3:41:c3:
61:d4:ed:42:03:70:68:51:9f:06:b1:b8:d9:2d:7a:5c:9f:6e:
75:13:c6:be:bf:e3:3d:59:bb:2a:46:c7:0a:99:6b:28:69:0c:
36:10:c9:c3:39:82:84:ee:7f:bd:f7:0a:89:4a:f9:dd:53:04:
82:60:1d:fd:d9:8a:df:ff:67:fc:48:84:e3:07:dd:57:f6:84:
8f:8e:8d:4c:08:ca:8f:f3:d2:64:84:66:66:0e:c1:59:7d:9f:
1f:c0:b2:78:e8:d0:6f:c3:30:bc:7b:d9:32:7d:d7:c8:0e:fc:
77:b2:a1:cd:62:2b:e1:0b:47:60:37:f6:6a:6b:aa:b0:33:11:
f9:81:45:9b:2f:60:ba:a1:fd:7d:bf:d2:c6:8b:ae:ee:09:70:
98:92:61:3e:20:48:52:b1:ae:ea:7c:94:43:31:80:e8:ca:6c:
2d:fb:32:75:23:10:7c:f5:b7:20:9f:a8:6f:80:7a:8a:a1:77:
e5:ed:5e:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:57:57 2025 by rpki-client