Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/a4aedf-cab5-4199-a207-5cf6748d8784/1/tDtWqlNz6PXng0dnQkDv98KCctw.mft
File: tDtWqlNz6PXng0dnQkDv98KCctw.mft (raw, json)
Hash identifier: +QBkBCOWrZ2yo9nJ0MpO32UNpHLJFZCOweFNqq1f1y8=
Subject key identifier: 03:D7:D3:30:02:36:E0:1C:D9:B4:B9:CF:F4:62:7E:C4:30:83:57:F1
Authority key identifier: B4:3B:56:AA:53:73:E8:F5:E7:83:47:67:42:40:EF:F7:C2:82:72:DC
Certificate issuer: /CN=b43b56aa5373e8f5e78347674240eff7c28272dc
Certificate serial: 0199FDD8CA70F066C3E7A1EB0A68D2EB4D14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDtWqlNz6PXng0dnQkDv98KCctw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/a4aedf-cab5-4199-a207-5cf6748d8784/1/tDtWqlNz6PXng0dnQkDv98KCctw.mft
Manifest number: 101B
Signing time: Sun 19 Oct 2025 19:01:07 +0000
Manifest this update: Sun 19 Oct 2025 19:01:07 +0000
Manifest next update: Mon 20 Oct 2025 19:01:07 +0000
Files and hashes: 1: tDtWqlNz6PXng0dnQkDv98KCctw.crl (hash: TIBPNuxx+s4mTqTHN5FHDD7M4kzNrD3PzirBW/dTWEg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/a4aedf-cab5-4199-a207-5cf6748d8784/1/tDtWqlNz6PXng0dnQkDv98KCctw.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/a4aedf-cab5-4199-a207-5cf6748d8784/1/tDtWqlNz6PXng0dnQkDv98KCctw.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDtWqlNz6PXng0dnQkDv98KCctw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d8:ca:70:f0:66:c3:e7:a1:eb:0a:68:d2:eb:4d:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b43b56aa5373e8f5e78347674240eff7c28272dc
Validity
Not Before: Oct 19 19:01:07 2025 GMT
Not After : Oct 20 19:01:07 2025 GMT
Subject: CN=03d7d3300236e01cd9b4b9cff4627ec4308357f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:cc:14:25:db:c0:dd:57:ad:8c:3c:e5:be:17:
4b:a2:43:f0:a8:a4:ef:ba:d1:0b:59:ce:44:31:95:
48:a1:c9:82:05:02:af:8c:6a:af:0e:1e:de:83:11:
68:b7:63:d9:ae:d9:d2:bb:76:7f:7f:2c:65:e9:e2:
f5:75:2a:fc:df:e5:3b:03:ab:62:3a:f7:7e:03:08:
60:2f:e2:c2:84:9a:e6:12:f1:bc:c7:a4:c1:55:79:
a2:a8:ba:47:46:5a:e6:92:a3:7b:cb:9e:87:04:a2:
ce:bc:73:a6:0d:3e:80:34:36:27:e2:b2:a9:cd:3e:
6c:a3:dd:52:47:27:59:f8:45:73:0f:d6:16:8d:73:
75:61:65:10:b1:52:ca:45:89:47:51:d1:69:8d:11:
f4:87:b2:0f:be:63:97:2b:1d:28:5c:f6:00:ce:e1:
f9:df:a7:bd:e1:bb:02:1b:62:c4:9b:5c:b3:31:9f:
70:40:f1:10:74:42:a8:f6:62:49:a4:9d:49:72:96:
a4:9f:d4:0d:f9:21:fd:5f:fa:d7:4b:77:f4:cd:36:
29:1f:3f:3f:11:68:02:5b:a9:ca:d8:80:ef:a9:54:
af:e9:0f:04:ea:f9:50:ab:02:53:df:fd:97:a3:7a:
0d:af:9b:fc:f0:7b:72:5b:94:a9:93:9f:4a:0e:bc:
bd:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:D7:D3:30:02:36:E0:1C:D9:B4:B9:CF:F4:62:7E:C4:30:83:57:F1
X509v3 Authority Key Identifier:
keyid:B4:3B:56:AA:53:73:E8:F5:E7:83:47:67:42:40:EF:F7:C2:82:72:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDtWqlNz6PXng0dnQkDv98KCctw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a4aedf-cab5-4199-a207-5cf6748d8784/1/tDtWqlNz6PXng0dnQkDv98KCctw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a4aedf-cab5-4199-a207-5cf6748d8784/1/tDtWqlNz6PXng0dnQkDv98KCctw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:e7:eb:24:0b:97:da:7f:b0:69:cf:6d:f6:00:c5:89:79:79:
32:a1:ad:8c:1e:35:b3:ee:5d:c7:c2:d6:10:a3:a4:12:7c:e2:
5e:2e:6e:a8:8d:ec:87:8c:4a:6c:5a:61:59:06:4e:3f:7d:f4:
07:28:62:2c:52:1f:54:d5:39:a3:c7:cb:cc:45:69:8d:84:8f:
25:fb:e9:58:1f:2e:ec:44:00:57:a6:23:2a:91:92:04:22:d0:
b4:ac:3b:f1:e5:39:15:2a:5f:ab:e1:1b:3e:9c:20:81:1e:f1:
fc:46:e8:92:81:6b:42:1a:11:11:bf:dc:8f:e8:f7:0f:4e:a0:
68:a3:1e:34:bf:c3:34:a7:e3:93:70:9c:44:bb:a0:88:dc:a8:
12:e3:09:cc:bb:19:b8:94:c1:7f:e7:74:9f:40:a7:01:b3:f1:
a5:dd:8c:4e:25:a2:cc:30:b6:63:c9:c9:32:ed:a6:ba:c1:42:
7b:71:3d:31:22:bc:7e:16:f8:6f:4c:b7:5b:41:55:6f:3d:f2:
d6:ca:9a:15:3e:8c:f3:95:43:12:05:14:47:fc:3d:76:66:a4:
40:84:dc:c5:3f:dd:3c:22:60:e5:02:9c:48:de:f7:67:f4:a8:
10:09:63:5f:b5:5f:40:31:39:1b:1f:c9:ab:1b:d7:e7:17:99:
ab:f2:18:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:42:14 2025 by rpki-client