Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/ef54db-a565-4354-899a-083aa18a7629/1/dNYxjajSNXnE9zi26OVcxf8n5bE.mft
File: dNYxjajSNXnE9zi26OVcxf8n5bE.mft (raw, json)
Hash identifier: KGcP3ffdywblgEXVUFlU/xw7CL8S+Pu7dbHRKCQIemk=
Subject key identifier: 0D:CA:BB:D7:B8:07:A7:35:96:D8:B6:95:60:40:DA:1C:EC:7E:68:D4
Authority key identifier: 74:D6:31:8D:A8:D2:35:79:C4:F7:38:B6:E8:E5:5C:C5:FF:27:E5:B1
Certificate issuer: /CN=74d6318da8d23579c4f738b6e8e55cc5ff27e5b1
Certificate serial: 0199FC5833A341CCD9710B03CEC64C3D2F55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dNYxjajSNXnE9zi26OVcxf8n5bE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/ef54db-a565-4354-899a-083aa18a7629/1/dNYxjajSNXnE9zi26OVcxf8n5bE.mft
Manifest number: 0CE2
Signing time: Sun 19 Oct 2025 12:01:02 +0000
Manifest this update: Sun 19 Oct 2025 12:01:02 +0000
Manifest next update: Mon 20 Oct 2025 12:01:02 +0000
Files and hashes: 1: dNYxjajSNXnE9zi26OVcxf8n5bE.crl (hash: mbHA4zyYSQQfSAELSaHFSa/p+yuANNT3DRWAWDnmG4I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/ef54db-a565-4354-899a-083aa18a7629/1/dNYxjajSNXnE9zi26OVcxf8n5bE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/ef54db-a565-4354-899a-083aa18a7629/1/dNYxjajSNXnE9zi26OVcxf8n5bE.mft
rsync://rpki.ripe.net/repository/DEFAULT/dNYxjajSNXnE9zi26OVcxf8n5bE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:33:a3:41:cc:d9:71:0b:03:ce:c6:4c:3d:2f:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74d6318da8d23579c4f738b6e8e55cc5ff27e5b1
Validity
Not Before: Oct 19 12:01:02 2025 GMT
Not After : Oct 20 12:01:02 2025 GMT
Subject: CN=0dcabbd7b807a73596d8b6956040da1cec7e68d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:ea:9e:11:43:2d:8d:ef:a7:8a:08:e6:9e:4d:
6a:c2:eb:df:e5:f5:6d:39:63:7e:ab:1f:c6:cf:ed:
9d:17:29:86:bc:b2:81:06:fa:a2:7e:82:03:28:e7:
90:df:55:a6:25:07:43:5d:f7:5f:be:ef:d8:c9:16:
20:f3:f0:0d:75:73:5b:fd:5c:d9:93:fd:b1:ea:35:
ca:f5:95:55:fa:e3:39:1b:17:3a:78:cf:93:50:be:
06:7b:96:3a:87:31:57:7b:c9:3a:9e:41:d3:4a:05:
2b:28:6e:8d:c7:da:59:81:35:24:a3:b3:33:9d:ee:
0c:b8:72:63:1e:23:16:c4:63:bb:e3:c8:fe:7a:ac:
cb:78:e1:82:da:91:3a:5b:7c:c1:8b:08:2a:2e:88:
3b:ac:4e:5d:b2:7d:86:08:b1:2b:62:c2:0a:52:bb:
e7:6e:e7:36:2a:4c:e1:03:aa:8d:67:b8:0a:43:a4:
e7:ba:6e:5c:91:da:13:94:58:88:74:a8:24:8d:52:
74:9a:a5:1c:15:49:9d:fb:36:d7:84:c0:49:9c:37:
d4:a0:ac:e1:2a:09:84:06:ce:29:ea:9c:61:a3:08:
b1:a8:52:a4:16:ad:4d:0e:ad:d3:3a:ed:a9:d9:9a:
30:8c:1b:4b:15:ea:63:61:86:91:39:6c:af:39:97:
28:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:CA:BB:D7:B8:07:A7:35:96:D8:B6:95:60:40:DA:1C:EC:7E:68:D4
X509v3 Authority Key Identifier:
keyid:74:D6:31:8D:A8:D2:35:79:C4:F7:38:B6:E8:E5:5C:C5:FF:27:E5:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dNYxjajSNXnE9zi26OVcxf8n5bE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/ef54db-a565-4354-899a-083aa18a7629/1/dNYxjajSNXnE9zi26OVcxf8n5bE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/ef54db-a565-4354-899a-083aa18a7629/1/dNYxjajSNXnE9zi26OVcxf8n5bE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:87:c8:c9:9d:34:68:9b:8a:b6:6a:e4:6e:d9:76:2c:e5:bd:
e5:fd:cf:36:46:ff:c7:c7:47:5a:19:ea:04:c2:08:cf:26:fc:
32:55:f1:9c:e1:48:99:eb:c0:86:1b:0c:e2:f1:d4:4a:1a:72:
8c:ec:44:5b:88:df:83:23:39:2d:5f:05:5d:aa:59:c2:4e:9f:
fa:7d:b6:a8:0f:64:7b:52:22:27:e3:be:30:4b:99:5e:39:59:
dc:ad:c2:d4:cd:bc:b1:7e:bc:fd:5b:6c:ec:88:43:86:58:3f:
77:18:50:d0:b8:74:5d:2c:1e:d0:08:17:e8:40:3d:fd:19:30:
20:a5:1c:77:c2:92:f4:91:a4:33:d0:b1:3c:b6:57:ec:24:75:
ae:a6:2f:68:76:23:fb:98:c3:d6:4c:a2:2b:20:76:32:80:5c:
ee:54:70:14:9b:d2:33:1b:c8:0e:18:2c:5f:cf:f1:a3:52:5f:
6e:46:0c:b5:36:7c:07:63:85:5d:5f:de:ab:52:2d:26:d8:c3:
b8:56:49:75:f1:c0:a6:3d:27:af:ad:68:ca:4e:e1:a7:d8:44:
c3:e7:36:05:ab:0e:c2:59:10:91:95:7f:85:28:65:e7:92:ec:
6e:06:d5:cb:e8:a0:17:42:2d:21:86:6e:a6:7a:dc:d7:ff:eb:
27:99:1c:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:39:30 2025 by rpki-client