Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/831ecb-ab1f-4427-8d60-f746652444da/1/DvD-irs27bvvRGptVK24YsSrO6E.mft
File: DvD-irs27bvvRGptVK24YsSrO6E.mft (raw, json)
Hash identifier: 4HMnMAD0gopCsGWjRxrXvW30fyZGHkXrPMzclk/ru00=
Subject key identifier: 8C:A8:24:2D:B3:B2:EB:A9:E3:CA:DE:F1:F3:08:92:21:53:50:F2:01
Authority key identifier: 0E:F0:FE:8A:BB:36:ED:BB:EF:44:6A:6D:54:AD:B8:62:C4:AB:3B:A1
Certificate issuer: /CN=0ef0fe8abb36edbbef446a6d54adb862c4ab3ba1
Certificate serial: 0199FBEAA5BF0010C440B2CB7ED2638D15AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DvD-irs27bvvRGptVK24YsSrO6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/831ecb-ab1f-4427-8d60-f746652444da/1/DvD-irs27bvvRGptVK24YsSrO6E.mft
Manifest number: 0E17
Signing time: Sun 19 Oct 2025 10:01:22 +0000
Manifest this update: Sun 19 Oct 2025 10:01:22 +0000
Manifest next update: Mon 20 Oct 2025 10:01:22 +0000
Files and hashes: 1: DvD-irs27bvvRGptVK24YsSrO6E.crl (hash: q2T6QvgDnHnJ3gleQtabfKr2NFvnTshfOs7BAQVjesw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/831ecb-ab1f-4427-8d60-f746652444da/1/DvD-irs27bvvRGptVK24YsSrO6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/831ecb-ab1f-4427-8d60-f746652444da/1/DvD-irs27bvvRGptVK24YsSrO6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/DvD-irs27bvvRGptVK24YsSrO6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:a5:bf:00:10:c4:40:b2:cb:7e:d2:63:8d:15:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ef0fe8abb36edbbef446a6d54adb862c4ab3ba1
Validity
Not Before: Oct 19 10:01:22 2025 GMT
Not After : Oct 20 10:01:22 2025 GMT
Subject: CN=8ca8242db3b2eba9e3cadef1f30892215350f201
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c9:50:e9:29:cd:86:df:14:11:c0:e7:9a:88:
a3:94:fe:96:60:10:e5:81:63:6b:2d:c4:27:49:d5:
c8:00:70:0a:c5:f7:97:e2:e2:b5:c1:20:2b:22:bb:
d7:30:5e:2f:66:f8:ae:63:76:23:c0:a8:78:e2:2d:
b2:ce:d3:d5:f6:2c:76:7b:6f:1d:ec:70:be:7f:15:
b0:6f:e3:cb:0d:47:51:a8:7e:75:bf:77:94:c8:98:
6b:cf:c7:eb:76:48:f5:de:5e:a5:3e:24:29:ff:c9:
cc:0d:a6:6d:22:72:bb:65:e4:ce:d2:83:af:e2:2b:
1a:2c:fb:d6:86:59:cd:da:d6:89:d4:9b:b1:00:6a:
26:7d:dd:3b:25:82:82:d6:f5:49:2b:7a:f6:8e:11:
e1:a6:67:0f:b6:a2:b7:40:b2:cf:19:b0:a1:9e:cf:
f7:bf:a5:89:6e:ce:06:6e:1c:fe:56:e7:4e:b2:a3:
39:8d:c2:50:92:6e:e6:75:2f:fb:c3:7e:46:fd:23:
ec:03:16:0f:02:90:85:05:34:c7:15:f6:f5:da:43:
92:6f:10:9c:e8:34:82:5c:68:5e:a8:94:2d:ff:16:
56:81:3f:6a:4b:46:5c:7d:26:00:e3:f8:0d:c6:07:
cc:37:1d:1b:0e:6b:ce:cb:26:39:6d:b9:86:9f:56:
72:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:A8:24:2D:B3:B2:EB:A9:E3:CA:DE:F1:F3:08:92:21:53:50:F2:01
X509v3 Authority Key Identifier:
keyid:0E:F0:FE:8A:BB:36:ED:BB:EF:44:6A:6D:54:AD:B8:62:C4:AB:3B:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DvD-irs27bvvRGptVK24YsSrO6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/831ecb-ab1f-4427-8d60-f746652444da/1/DvD-irs27bvvRGptVK24YsSrO6E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/831ecb-ab1f-4427-8d60-f746652444da/1/DvD-irs27bvvRGptVK24YsSrO6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:16:39:06:46:ee:82:72:8d:95:be:ca:b2:ec:2d:63:26:31:
a4:78:05:cf:96:60:45:78:71:9d:02:0a:05:56:52:05:8d:d8:
6b:3e:49:57:06:72:d8:26:cf:18:40:c5:bc:d2:67:bb:9a:4b:
dd:c6:67:b1:e7:bf:1d:5a:e8:40:50:5b:36:fb:8f:91:aa:51:
64:d5:9c:06:25:18:31:cb:6d:d3:56:fd:9b:8c:55:16:57:f2:
c9:c6:ae:e2:1c:80:7a:3e:14:b5:48:01:ce:4c:dd:07:fa:37:
dc:05:78:24:45:d5:85:90:90:12:2d:69:aa:5b:14:40:f8:2a:
0b:d5:38:1a:99:3c:19:f4:61:e2:99:ca:fa:1c:d6:67:c4:d3:
ca:08:1f:f8:68:60:b5:9f:4d:a8:d7:49:28:3e:08:82:16:97:
a3:cf:55:f2:51:0e:27:6c:b4:41:cb:33:e5:1e:d5:3f:94:f4:
6c:74:6d:4e:58:ce:ee:31:44:64:a6:a9:e6:b2:05:e1:e0:39:
05:f6:d1:99:3f:98:4e:b2:1f:20:28:5b:d5:e4:d0:a3:6f:fc:
4e:86:db:18:56:0d:41:96:71:b9:39:35:e4:fd:4c:12:43:fc:
42:c3:69:6c:72:06:0b:00:30:95:0c:5d:2c:7f:95:8c:d5:73:
1c:d0:95:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:19:59 2025 by rpki-client