Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/4a1238-cb64-4a46-af95-65be44d0dbd4/1/Dchx21CYv4OP_qmaAvZ5Nos-GrI.mft
File: Dchx21CYv4OP_qmaAvZ5Nos-GrI.mft (raw, json)
Hash identifier: a/bj5rwGPICOoEVZbyAs4JmtqL3L2MC0niFlmTBuXfc=
Subject key identifier: 56:BE:98:BE:72:95:B6:45:69:B2:6A:DB:AD:B6:0F:16:4F:32:46:F7
Authority key identifier: 0D:C8:71:DB:50:98:BF:83:8F:FE:A9:9A:02:F6:79:36:8B:3E:1A:B2
Certificate issuer: /CN=0dc871db5098bf838ffea99a02f679368b3e1ab2
Certificate serial: 019A006C5EF886CBA909CD768B57A5C59F8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dchx21CYv4OP_qmaAvZ5Nos-GrI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/4a1238-cb64-4a46-af95-65be44d0dbd4/1/Dchx21CYv4OP_qmaAvZ5Nos-GrI.mft
Manifest number: 16E1
Signing time: Mon 20 Oct 2025 07:01:33 +0000
Manifest this update: Mon 20 Oct 2025 07:01:33 +0000
Manifest next update: Tue 21 Oct 2025 07:01:33 +0000
Files and hashes: 1: Dchx21CYv4OP_qmaAvZ5Nos-GrI.crl (hash: UkT1vsc0fUN+iZMfGNAQHT8Ez1JfZAiocLOfoMzdTK8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/4a1238-cb64-4a46-af95-65be44d0dbd4/1/Dchx21CYv4OP_qmaAvZ5Nos-GrI.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/4a1238-cb64-4a46-af95-65be44d0dbd4/1/Dchx21CYv4OP_qmaAvZ5Nos-GrI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dchx21CYv4OP_qmaAvZ5Nos-GrI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:6c:5e:f8:86:cb:a9:09:cd:76:8b:57:a5:c5:9f:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dc871db5098bf838ffea99a02f679368b3e1ab2
Validity
Not Before: Oct 20 07:01:33 2025 GMT
Not After : Oct 21 07:01:33 2025 GMT
Subject: CN=56be98be7295b64569b26adbadb60f164f3246f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d1:32:ab:83:0d:80:ef:7c:cb:b7:ac:53:89:
9b:c0:f8:f3:de:cc:be:59:94:44:43:0b:38:27:8a:
21:43:17:1b:bd:26:81:fa:6c:69:c8:e8:79:06:74:
6e:e8:58:89:8b:1d:93:8d:68:9b:f4:de:cf:7e:8c:
5c:fb:bd:df:b0:e7:63:8b:35:be:db:bf:49:74:5d:
4c:fa:56:67:49:dc:28:c8:c4:bc:29:3e:d7:9d:9e:
bb:6d:60:d9:f6:ee:81:6f:6c:1e:db:04:30:ac:3a:
e8:1c:c9:c3:59:7a:a5:3b:89:aa:e6:3d:bc:39:ac:
a3:fe:26:f6:54:ec:9c:d6:4b:b8:e1:e7:40:1c:73:
3a:64:bb:bc:f3:ee:d2:4f:c9:bc:05:33:eb:62:7c:
73:1e:39:c6:ad:21:a9:f3:e1:09:32:29:98:4a:3e:
b9:5f:61:50:f6:32:47:af:d0:94:91:96:4d:8f:2a:
43:80:ad:cb:19:11:d2:d7:c6:38:92:66:bc:56:49:
40:91:e6:4a:4d:42:04:8c:9a:f4:f1:a0:b7:79:21:
aa:3d:bf:18:a3:87:8c:35:31:d6:f8:bc:aa:2c:c3:
2d:0d:96:2a:3a:58:63:ac:fc:87:a0:80:76:36:80:
a8:29:b6:a5:b0:7f:df:3b:39:bf:4b:e4:61:b7:e8:
52:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:BE:98:BE:72:95:B6:45:69:B2:6A:DB:AD:B6:0F:16:4F:32:46:F7
X509v3 Authority Key Identifier:
keyid:0D:C8:71:DB:50:98:BF:83:8F:FE:A9:9A:02:F6:79:36:8B:3E:1A:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dchx21CYv4OP_qmaAvZ5Nos-GrI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/4a1238-cb64-4a46-af95-65be44d0dbd4/1/Dchx21CYv4OP_qmaAvZ5Nos-GrI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/4a1238-cb64-4a46-af95-65be44d0dbd4/1/Dchx21CYv4OP_qmaAvZ5Nos-GrI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:34:fa:b9:d8:50:25:0f:fa:7a:ee:e3:79:6f:05:00:ed:d3:
46:5e:8c:7a:0a:61:10:3f:ef:68:0f:9c:16:06:fa:e0:fc:2b:
7f:1e:2f:47:62:59:6a:46:4a:2d:53:c0:76:f9:d5:54:b2:a9:
89:5b:a2:aa:6a:9d:63:6a:42:6d:9a:de:af:89:c3:bf:57:2d:
c8:98:d7:72:37:6b:f9:a5:15:8b:0c:4a:ba:b7:f7:ca:ba:2e:
53:69:e0:b7:26:c1:a7:63:37:1b:02:1f:59:78:3d:8a:e3:e0:
05:d0:d7:6f:80:8a:c9:d3:15:b9:fc:94:17:10:fa:e6:14:2c:
3f:fa:31:ba:2e:df:aa:10:04:fd:27:ef:e0:55:6e:e7:26:e8:
4a:d2:48:91:46:a1:1b:dc:68:92:02:fe:73:fd:87:53:97:f0:
4b:61:8c:5d:fa:15:0d:c7:6f:79:90:15:83:35:aa:1f:58:2f:
ff:d1:8d:e1:1f:d2:e4:ec:aa:00:6b:49:27:c8:54:28:cf:9c:
cf:3f:64:47:10:99:ee:86:62:be:09:30:c8:dd:6d:ab:f8:b4:
df:b7:5a:54:3c:72:54:bd:dd:f6:46:85:7b:61:b8:85:21:02:
ec:29:4c:09:55:2a:d0:a5:2e:77:9c:b1:d8:9f:26:53:73:d8:
aa:b6:3e:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:45:47 2025 by rpki-client