Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/dc7117-8851-4322-9c79-e0755f089c1a/1/A2x42XMHxhcQhWc4FBzAvTlczJ4.mft
File: A2x42XMHxhcQhWc4FBzAvTlczJ4.mft (raw, json)
Hash identifier: tYYQI9kCChx18ZBsWboloRgpsG8REojzKLjuLH9Irm4=
Subject key identifier: 26:E8:A7:11:4C:4F:6E:73:BC:A7:B6:7F:43:23:AE:CB:9A:85:66:FA
Authority key identifier: 03:6C:78:D9:73:07:C6:17:10:85:67:38:14:1C:C0:BD:39:5C:CC:9E
Certificate issuer: /CN=036c78d97307c61710856738141cc0bd395ccc9e
Certificate serial: 0199FCFD680D7F39ED3FBD2884CFBA120A88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A2x42XMHxhcQhWc4FBzAvTlczJ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/dc7117-8851-4322-9c79-e0755f089c1a/1/A2x42XMHxhcQhWc4FBzAvTlczJ4.mft
Manifest number: 0171
Signing time: Sun 19 Oct 2025 15:01:29 +0000
Manifest this update: Sun 19 Oct 2025 15:01:29 +0000
Manifest next update: Mon 20 Oct 2025 15:01:29 +0000
Files and hashes: 1: A2x42XMHxhcQhWc4FBzAvTlczJ4.crl (hash: PFQ0eytN7nRDwrSrO+7m/jLXOydWmvIrROn07S7lh/0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/dc7117-8851-4322-9c79-e0755f089c1a/1/A2x42XMHxhcQhWc4FBzAvTlczJ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/dc7117-8851-4322-9c79-e0755f089c1a/1/A2x42XMHxhcQhWc4FBzAvTlczJ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/A2x42XMHxhcQhWc4FBzAvTlczJ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:68:0d:7f:39:ed:3f:bd:28:84:cf:ba:12:0a:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=036c78d97307c61710856738141cc0bd395ccc9e
Validity
Not Before: Oct 19 15:01:29 2025 GMT
Not After : Oct 20 15:01:29 2025 GMT
Subject: CN=26e8a7114c4f6e73bca7b67f4323aecb9a8566fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:99:fa:1c:79:11:dc:fa:ef:31:04:a9:ae:4c:
50:23:f0:30:80:86:9e:77:96:f9:43:d1:94:f1:da:
2e:6f:72:e2:85:2f:ba:34:60:50:9e:64:5c:c8:8d:
f5:f1:0b:62:9a:bd:f3:31:c9:98:7a:8e:61:30:e9:
df:b3:2d:82:fc:44:b8:cd:b8:55:86:03:ae:43:30:
1d:20:56:dd:65:31:31:7f:2d:29:6c:f8:d2:1d:55:
e4:30:63:15:39:31:4e:44:1e:02:6c:01:24:fe:e5:
3f:c9:2b:3f:de:62:1c:85:26:fb:61:7c:34:d4:8d:
24:a8:fe:27:93:0e:3c:90:94:70:4c:45:97:78:de:
54:c2:b3:f8:cf:a2:30:e5:8a:8d:66:0e:d3:26:70:
83:fa:92:c6:42:e9:2a:cc:42:a3:5f:0a:f3:70:a5:
8b:40:09:16:12:20:f1:09:41:3c:0d:2a:9d:c5:74:
ad:0e:83:f2:02:a8:14:24:b6:7b:83:1f:b3:97:2b:
db:6f:c0:c3:2e:b6:ab:2f:31:fe:5a:0c:1c:1f:f4:
8a:1c:2b:30:6e:81:fd:91:24:33:d7:c9:f3:e8:20:
c5:bb:77:39:f1:32:4c:4c:85:e9:25:80:2c:c5:3b:
78:ce:cc:62:d3:52:c6:5c:29:02:94:87:23:6d:13:
d8:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:E8:A7:11:4C:4F:6E:73:BC:A7:B6:7F:43:23:AE:CB:9A:85:66:FA
X509v3 Authority Key Identifier:
keyid:03:6C:78:D9:73:07:C6:17:10:85:67:38:14:1C:C0:BD:39:5C:CC:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A2x42XMHxhcQhWc4FBzAvTlczJ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/dc7117-8851-4322-9c79-e0755f089c1a/1/A2x42XMHxhcQhWc4FBzAvTlczJ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/dc7117-8851-4322-9c79-e0755f089c1a/1/A2x42XMHxhcQhWc4FBzAvTlczJ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:15:b8:4a:97:97:71:88:24:5f:18:2b:ab:19:d4:a1:0c:17:
eb:7c:d4:0d:83:40:b8:0e:cc:d8:74:54:7b:e0:6e:4c:7b:b1:
71:d0:b3:88:5c:b6:52:27:12:65:ff:59:af:4e:82:d8:c2:c7:
16:e0:eb:16:90:92:3f:e3:38:bb:e1:28:eb:08:11:20:86:2b:
19:83:67:91:69:97:90:70:91:53:f7:d3:8b:e2:2b:c0:68:c5:
7c:bd:3e:fb:2f:ac:8e:d9:88:2b:d6:02:42:4f:b5:2a:9e:a6:
e6:15:79:ff:4f:e3:e3:95:98:3d:95:c1:3c:79:7f:84:22:78:
b9:50:b1:a0:05:f5:ac:13:3d:c5:8d:7b:17:5f:ed:da:1b:d7:
12:11:d4:76:cd:71:f4:90:d6:50:10:04:e6:f1:39:6a:79:9c:
9c:a7:b3:54:9c:d0:2f:c3:26:21:7b:d8:19:9f:9b:3c:ad:ff:
16:d4:fb:ae:91:da:a3:8f:35:5a:4a:2b:02:70:58:e2:e0:78:
f3:64:a1:bc:bd:d4:9e:e1:7c:2a:c8:b1:11:52:73:47:29:2c:
b6:2b:6d:ec:85:50:7a:48:27:6d:13:eb:c4:77:4a:6e:0e:11:
68:11:c1:f1:33:c0:bc:ac:97:52:1f:e1:27:e9:34:8b:86:cc:
f8:ea:9d:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:44:51 2025 by rpki-client