Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/9dca0e-a41b-4972-bbb5-08e2b1017927/1/MCaAamuNrGjCoytlhJIpUk_DPac.mft
File: MCaAamuNrGjCoytlhJIpUk_DPac.mft (raw, json)
Hash identifier: GI3WN2ldE7XrPDl98O0zKQ3/ZSv9WNTgJhVf49QTin0=
Subject key identifier: EF:56:94:B6:CF:F2:45:21:8F:65:BD:2A:6F:23:8F:C7:77:65:EB:71
Authority key identifier: 30:26:80:6A:6B:8D:AC:68:C2:A3:2B:65:84:92:29:52:4F:C3:3D:A7
Certificate issuer: /CN=3026806a6b8dac68c2a32b65849229524fc33da7
Certificate serial: 0199FC58568BB95BD64DB6B40356F054D483
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MCaAamuNrGjCoytlhJIpUk_DPac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/9dca0e-a41b-4972-bbb5-08e2b1017927/1/MCaAamuNrGjCoytlhJIpUk_DPac.mft
Manifest number: 0EA9
Signing time: Sun 19 Oct 2025 12:01:11 +0000
Manifest this update: Sun 19 Oct 2025 12:01:11 +0000
Manifest next update: Mon 20 Oct 2025 12:01:11 +0000
Files and hashes: 1: MCaAamuNrGjCoytlhJIpUk_DPac.crl (hash: OW10BatHFS2Ho23J1o+lwm9ykCEPx8p3t7ByzXpf6SY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/9dca0e-a41b-4972-bbb5-08e2b1017927/1/MCaAamuNrGjCoytlhJIpUk_DPac.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/9dca0e-a41b-4972-bbb5-08e2b1017927/1/MCaAamuNrGjCoytlhJIpUk_DPac.mft
rsync://rpki.ripe.net/repository/DEFAULT/MCaAamuNrGjCoytlhJIpUk_DPac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:56:8b:b9:5b:d6:4d:b6:b4:03:56:f0:54:d4:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3026806a6b8dac68c2a32b65849229524fc33da7
Validity
Not Before: Oct 19 12:01:11 2025 GMT
Not After : Oct 20 12:01:11 2025 GMT
Subject: CN=ef5694b6cff245218f65bd2a6f238fc77765eb71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:eb:f9:75:07:d1:27:17:1a:d9:d4:62:c6:54:
68:4b:14:21:85:a3:68:b4:ac:b0:d8:3a:b7:53:4f:
eb:a9:9f:a2:83:4e:64:b9:9b:df:7f:ac:81:72:35:
19:e4:0b:a7:20:d3:cd:30:44:fe:b3:82:00:da:e2:
78:1d:78:d9:37:04:69:a4:53:35:a4:0c:47:95:5f:
8c:25:e2:f6:6a:5e:35:26:29:8e:b8:a7:50:30:3d:
80:5d:c4:02:6f:ae:4b:8e:a2:f1:ce:96:e4:69:8b:
80:58:cd:a3:84:b9:fa:44:aa:96:9b:fa:c5:2a:45:
98:10:5b:fe:a3:0f:b0:54:15:33:ff:ae:8b:5d:eb:
77:0c:ce:65:5e:e9:1b:9f:b3:9d:88:5d:e1:4d:9e:
90:38:91:cd:57:08:50:7e:5f:11:c3:83:09:19:e9:
1b:c3:92:cf:ed:23:e2:76:b5:bd:24:a7:06:27:d3:
89:fb:be:20:f6:b9:d5:36:64:b6:b3:54:b5:e2:06:
38:b5:5a:62:5e:22:a1:ed:83:39:24:77:7c:5d:3b:
1f:91:92:47:96:96:37:1c:89:96:79:9c:4f:6d:08:
4e:88:a0:f6:e2:b7:a8:d2:73:5c:51:2e:b6:8e:9a:
09:d6:d5:4e:72:12:23:2f:be:a6:e1:0b:84:89:c2:
1b:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:56:94:B6:CF:F2:45:21:8F:65:BD:2A:6F:23:8F:C7:77:65:EB:71
X509v3 Authority Key Identifier:
keyid:30:26:80:6A:6B:8D:AC:68:C2:A3:2B:65:84:92:29:52:4F:C3:3D:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MCaAamuNrGjCoytlhJIpUk_DPac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9dca0e-a41b-4972-bbb5-08e2b1017927/1/MCaAamuNrGjCoytlhJIpUk_DPac.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9dca0e-a41b-4972-bbb5-08e2b1017927/1/MCaAamuNrGjCoytlhJIpUk_DPac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:a9:3a:ec:ad:fa:fa:ba:d8:00:29:71:62:c5:0a:3b:50:92:
24:89:03:f8:f6:c8:a0:bf:d0:11:33:3a:0e:2e:0c:28:e2:f6:
bc:00:76:7f:45:31:ba:1d:d9:76:66:a8:f7:3a:8e:56:83:47:
28:71:01:bb:ed:6f:64:8b:bf:e7:d1:9c:1e:85:c5:ba:9c:b7:
a8:e3:6c:1e:c8:9b:e8:65:79:56:24:cb:14:3d:ae:69:9c:e8:
95:2f:56:75:35:e6:ed:16:97:1c:c9:ae:c8:93:a4:5f:b9:ee:
43:70:83:b0:7d:94:fe:7a:9e:d4:57:79:d1:6d:16:08:e3:73:
3b:34:66:1b:48:45:ca:28:de:ac:95:d1:9f:9c:22:05:84:86:
fb:f7:a9:1f:c9:9a:e8:bc:5c:1d:ab:99:ec:9a:83:08:a8:cf:
ee:1c:63:e9:e1:6d:7e:45:a4:62:ce:46:21:d7:f3:51:1c:f1:
6b:33:8e:28:d9:ab:cd:57:9c:8d:9f:1d:32:aa:1a:68:7d:9b:
78:dd:b2:69:97:40:ce:22:07:90:fa:a8:96:05:a9:38:ec:2b:
63:42:51:0c:a6:f2:3f:52:49:db:a3:8a:9d:d2:90:85:dc:85:
df:9e:3e:9a:a2:99:b7:90:2e:26:ff:73:5e:3b:95:9e:a4:2a:
c5:39:1a:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:33:47 2025 by rpki-client