Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/ab82a4-5a72-45a7-96fd-9480b1633f9c/1/do5xE0z2ctauj2b8RNW-5iTNAqM.mft
File: do5xE0z2ctauj2b8RNW-5iTNAqM.mft (raw, json)
Hash identifier: q2Ckxxq/FYjvdxqJT5lt6U6PW04e8MyFctISu/UiLg0=
Subject key identifier: 4B:61:07:0F:71:5C:A4:D3:29:D6:D7:03:23:AA:10:C9:2D:C5:12:AB
Authority key identifier: 76:8E:71:13:4C:F6:72:D6:AE:8F:66:FC:44:D5:BE:E6:24:CD:02:A3
Certificate issuer: /CN=768e71134cf672d6ae8f66fc44d5bee624cd02a3
Certificate serial: 0199FCC656BB37B498B61F892658A4ED7432
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/do5xE0z2ctauj2b8RNW-5iTNAqM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/ab82a4-5a72-45a7-96fd-9480b1633f9c/1/do5xE0z2ctauj2b8RNW-5iTNAqM.mft
Manifest number: 0736
Signing time: Sun 19 Oct 2025 14:01:20 +0000
Manifest this update: Sun 19 Oct 2025 14:01:20 +0000
Manifest next update: Mon 20 Oct 2025 14:01:20 +0000
Files and hashes: 1: do5xE0z2ctauj2b8RNW-5iTNAqM.crl (hash: EZUVtlYaMvflVypb7atdestZIUg4X1niZ1X3YBPWwss=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/ab82a4-5a72-45a7-96fd-9480b1633f9c/1/do5xE0z2ctauj2b8RNW-5iTNAqM.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/ab82a4-5a72-45a7-96fd-9480b1633f9c/1/do5xE0z2ctauj2b8RNW-5iTNAqM.mft
rsync://rpki.ripe.net/repository/DEFAULT/do5xE0z2ctauj2b8RNW-5iTNAqM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:56:bb:37:b4:98:b6:1f:89:26:58:a4:ed:74:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=768e71134cf672d6ae8f66fc44d5bee624cd02a3
Validity
Not Before: Oct 19 14:01:20 2025 GMT
Not After : Oct 20 14:01:20 2025 GMT
Subject: CN=4b61070f715ca4d329d6d70323aa10c92dc512ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:5e:9f:2d:52:98:71:a9:c8:81:1f:6b:a5:3d:
a0:3d:87:45:dd:ec:65:a9:c1:af:90:8a:07:e3:57:
8f:64:27:d3:be:81:15:01:f5:38:fe:6d:c0:5c:77:
74:9d:e3:d3:4f:92:62:57:96:b9:69:95:99:b1:58:
62:9b:22:f6:64:b2:f3:dc:73:6b:9b:ea:32:74:f7:
13:3e:dc:06:e7:85:b7:e7:b2:75:0d:e9:57:b0:d5:
0b:dd:22:43:e7:8f:47:22:9c:21:ab:4c:9f:5e:c0:
f2:a8:96:ca:5b:aa:30:0e:8e:cf:c6:25:0d:f0:8c:
0b:22:bb:93:be:40:84:e7:f6:9e:b4:05:88:82:4d:
94:81:4f:7f:4d:d9:23:b5:27:d6:f9:eb:1a:b0:b3:
e7:d6:fe:d2:07:ef:ad:a4:a8:84:af:16:1f:5d:41:
9d:b5:89:94:d5:12:78:86:d8:a0:3c:fc:23:b2:0e:
cb:11:cf:0a:56:4f:5d:7c:b1:ab:fa:7d:a3:de:f2:
17:5a:e4:cf:e7:89:24:5a:43:75:b3:75:70:33:5a:
ec:01:2e:1d:e5:76:33:0e:6b:ef:36:c4:c4:23:3a:
7e:9a:4f:29:26:b5:ea:ad:47:a2:31:35:0d:48:8f:
8a:47:a9:36:2b:ec:9c:da:80:58:83:4a:4d:b9:17:
10:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:61:07:0F:71:5C:A4:D3:29:D6:D7:03:23:AA:10:C9:2D:C5:12:AB
X509v3 Authority Key Identifier:
keyid:76:8E:71:13:4C:F6:72:D6:AE:8F:66:FC:44:D5:BE:E6:24:CD:02:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/do5xE0z2ctauj2b8RNW-5iTNAqM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/ab82a4-5a72-45a7-96fd-9480b1633f9c/1/do5xE0z2ctauj2b8RNW-5iTNAqM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/ab82a4-5a72-45a7-96fd-9480b1633f9c/1/do5xE0z2ctauj2b8RNW-5iTNAqM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:a5:d2:1e:ab:e7:f1:31:b3:10:31:7c:a3:3b:30:52:85:c5:
ce:bd:02:10:7c:b2:65:68:72:df:c2:69:4b:de:fc:19:09:27:
1b:45:bc:e2:e5:fd:f4:62:3a:b7:d7:0a:d0:35:4d:ae:12:bf:
1c:58:68:6e:08:25:95:32:94:66:e4:de:77:0a:01:0f:08:de:
c2:45:05:b7:3e:fb:59:96:4f:37:a8:56:a6:34:07:0f:16:c8:
94:44:d7:fa:a4:5d:87:e4:28:2c:11:18:69:2b:46:db:20:1d:
bc:1a:18:ec:d6:e6:29:26:db:c4:7e:e5:93:39:d6:0d:94:95:
ad:4c:41:12:69:e3:63:59:28:50:5b:12:57:5f:a4:f1:a9:16:
82:54:22:35:4f:c1:01:74:3f:d0:7a:57:90:7e:0b:04:9d:43:
77:99:5a:a5:ae:47:ea:6f:62:32:a4:27:5c:49:40:46:62:4b:
1c:0b:4a:4d:63:bf:28:ba:a6:40:fc:b0:5a:93:52:88:08:f1:
e5:93:1e:9a:29:ce:04:64:3b:bc:c8:9b:19:f3:db:f4:9a:45:
a4:04:ce:c7:d3:e2:17:97:62:e8:4e:2d:a4:54:b3:24:ff:fb:
7f:84:32:f6:d8:76:a7:99:a6:de:4c:9c:c3:2d:9d:13:c3:82:
84:90:94:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:06:57 2025 by rpki-client