Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/3eada9-d441-476a-baa4-ecaa5ddd1d0f/1/DcGyhbbH8r8EyZjeiStDbxDTTcA.mft
File: DcGyhbbH8r8EyZjeiStDbxDTTcA.mft (raw, json)
Hash identifier: 8r/foBT76ed/2zsTnKKbS57I3R+qVWeJlmz3WLPXPSk=
Subject key identifier: A8:21:B8:C7:9E:45:BB:DF:CE:11:56:06:EC:3E:B5:69:E6:66:C8:67
Authority key identifier: 0D:C1:B2:85:B6:C7:F2:BF:04:C9:98:DE:89:2B:43:6F:10:D3:4D:C0
Certificate issuer: /CN=0dc1b285b6c7f2bf04c998de892b436f10d34dc0
Certificate serial: 0199FAA12DC1C2F479560EA7540ABC4C2B97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DcGyhbbH8r8EyZjeiStDbxDTTcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/3eada9-d441-476a-baa4-ecaa5ddd1d0f/1/DcGyhbbH8r8EyZjeiStDbxDTTcA.mft
Manifest number: 1A
Signing time: Sun 19 Oct 2025 04:01:30 +0000
Manifest this update: Sun 19 Oct 2025 04:01:30 +0000
Manifest next update: Mon 20 Oct 2025 04:01:30 +0000
Files and hashes: 1: DcGyhbbH8r8EyZjeiStDbxDTTcA.crl (hash: zRI4EyZuKkmGjB9ULIQuxq+61arqFpbNrhNOqwn0+Mc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/3eada9-d441-476a-baa4-ecaa5ddd1d0f/1/DcGyhbbH8r8EyZjeiStDbxDTTcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/3eada9-d441-476a-baa4-ecaa5ddd1d0f/1/DcGyhbbH8r8EyZjeiStDbxDTTcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/DcGyhbbH8r8EyZjeiStDbxDTTcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 04:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:a1:2d:c1:c2:f4:79:56:0e:a7:54:0a:bc:4c:2b:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dc1b285b6c7f2bf04c998de892b436f10d34dc0
Validity
Not Before: Oct 19 04:01:30 2025 GMT
Not After : Oct 20 04:01:30 2025 GMT
Subject: CN=a821b8c79e45bbdfce115606ec3eb569e666c867
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:fa:7d:c3:26:72:fd:dc:27:c3:70:0e:e0:26:
f2:a3:d7:ad:72:83:01:78:0b:fb:ff:45:0d:fa:91:
a4:90:10:69:ad:00:91:b2:63:1b:21:4d:df:78:36:
bb:17:dd:67:d2:1a:ac:5e:48:c6:f0:5b:e7:f9:06:
d7:c0:84:ed:19:46:c5:29:a7:4f:f0:2b:f1:90:12:
f9:d7:65:da:f5:18:cf:46:ad:29:a3:06:19:76:e7:
d3:9f:1d:ca:56:04:cf:33:66:fb:41:9c:65:b7:95:
04:8b:46:73:23:be:c0:97:57:a9:3a:67:b4:61:e2:
2d:83:af:6c:7d:8c:29:02:ac:10:48:e4:b8:35:60:
85:b5:68:92:d1:cd:e0:47:62:42:5f:fc:51:1d:7c:
61:f3:4c:8c:1c:eb:68:d2:00:38:86:da:21:f8:58:
ca:17:d5:18:12:b3:82:e7:1d:95:0e:ff:21:5a:25:
aa:6f:7a:ee:0e:b0:cc:97:bc:2d:44:e6:42:d0:11:
b8:2c:f6:c0:d5:1e:32:2d:d0:11:26:5c:01:63:24:
81:97:27:5d:16:99:9a:62:bf:32:74:f8:7b:60:18:
25:f0:d3:77:2c:0e:1a:54:13:42:7b:59:14:14:9c:
5f:c8:03:2c:98:08:5e:06:1c:7d:90:b4:92:fb:96:
15:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:21:B8:C7:9E:45:BB:DF:CE:11:56:06:EC:3E:B5:69:E6:66:C8:67
X509v3 Authority Key Identifier:
keyid:0D:C1:B2:85:B6:C7:F2:BF:04:C9:98:DE:89:2B:43:6F:10:D3:4D:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DcGyhbbH8r8EyZjeiStDbxDTTcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/3eada9-d441-476a-baa4-ecaa5ddd1d0f/1/DcGyhbbH8r8EyZjeiStDbxDTTcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/3eada9-d441-476a-baa4-ecaa5ddd1d0f/1/DcGyhbbH8r8EyZjeiStDbxDTTcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:4d:f9:9f:f7:67:27:13:d9:42:26:4b:46:cc:6a:cd:51:4b:
fb:04:e2:a5:0f:a8:06:96:e2:6b:fc:92:f2:4d:a4:b8:dc:32:
14:54:5b:f2:40:5a:ca:07:b7:79:91:cd:d8:9b:c4:fd:33:c4:
ea:ec:b6:6f:87:9b:15:14:8f:0f:ed:a8:b1:00:60:41:6c:c8:
9b:47:dd:dc:18:db:77:15:bc:6a:e9:87:2c:55:1c:be:c9:ba:
0a:65:44:49:d0:e2:3b:be:7a:ca:21:f8:89:62:f8:43:59:cd:
65:7c:3e:34:82:67:ad:71:9e:7f:c0:06:2c:40:3a:5d:c3:8f:
f4:59:2f:76:80:bd:1a:d7:74:b3:00:e1:9c:75:32:ab:c9:74:
5b:b3:58:95:a0:85:55:dd:9a:87:68:f0:fb:c3:43:4f:af:7c:
bc:47:65:7a:d2:6d:21:52:36:24:53:e3:2a:0c:cd:23:37:89:
b2:1e:cd:7d:fb:10:17:57:2c:40:52:f4:50:37:3c:ca:ca:09:
c1:16:f3:0b:13:5a:db:27:e8:d4:dc:72:59:88:d0:be:5d:1f:
97:53:1e:66:b8:18:67:b9:0b:13:2b:db:83:ea:43:44:eb:33:
57:e4:71:d6:8b:86:08:55:fc:9d:88:cc:3b:e5:8f:55:b4:52:
2a:ad:51:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:04:25 2025 by rpki-client