Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/2e03af-83a4-4c9f-911a-d5844b3c5177/1/dC5XHQAG_n9mCwMIzMYaFpnjSRc.mft
File: dC5XHQAG_n9mCwMIzMYaFpnjSRc.mft (raw, json)
Hash identifier: 9dzcG3g+9BrH5gBVUyMW8cHViOPpo4CkV4G8EkZa254=
Subject key identifier: 8A:6D:13:A3:AA:BB:57:1D:8C:84:34:9C:7E:C4:B9:0E:F8:42:AD:D3
Authority key identifier: 74:2E:57:1D:00:06:FE:7F:66:0B:03:08:CC:C6:1A:16:99:E3:49:17
Certificate issuer: /CN=742e571d0006fe7f660b0308ccc61a1699e34917
Certificate serial: 0199FDD981EA850AAA05781554CE7CA0135F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dC5XHQAG_n9mCwMIzMYaFpnjSRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/2e03af-83a4-4c9f-911a-d5844b3c5177/1/dC5XHQAG_n9mCwMIzMYaFpnjSRc.mft
Manifest number: 16E0
Signing time: Sun 19 Oct 2025 19:01:54 +0000
Manifest this update: Sun 19 Oct 2025 19:01:54 +0000
Manifest next update: Mon 20 Oct 2025 19:01:54 +0000
Files and hashes: 1: dC5XHQAG_n9mCwMIzMYaFpnjSRc.crl (hash: KTxNtMsRXFJHdcIx8GPttFCoBXzGtG9u3DW8auN3hyE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/2e03af-83a4-4c9f-911a-d5844b3c5177/1/dC5XHQAG_n9mCwMIzMYaFpnjSRc.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/2e03af-83a4-4c9f-911a-d5844b3c5177/1/dC5XHQAG_n9mCwMIzMYaFpnjSRc.mft
rsync://rpki.ripe.net/repository/DEFAULT/dC5XHQAG_n9mCwMIzMYaFpnjSRc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:81:ea:85:0a:aa:05:78:15:54:ce:7c:a0:13:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=742e571d0006fe7f660b0308ccc61a1699e34917
Validity
Not Before: Oct 19 19:01:54 2025 GMT
Not After : Oct 20 19:01:54 2025 GMT
Subject: CN=8a6d13a3aabb571d8c84349c7ec4b90ef842add3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e8:f1:28:66:7a:62:56:54:5e:ef:f8:83:a6:
7c:e8:d7:c7:2a:d8:7e:93:c2:6d:c4:f4:29:71:9f:
cc:77:e3:c0:99:b1:50:3c:01:f9:ac:c5:90:4f:5a:
23:fa:d6:aa:29:fc:ce:ce:25:ba:e9:72:77:3e:5b:
96:71:4a:79:15:e5:f4:9d:13:11:ff:9d:6e:45:b7:
5c:28:44:fe:32:69:68:87:ce:a5:91:5d:1b:c5:62:
c5:50:d0:36:46:4b:99:36:62:0b:f5:cb:50:fe:d9:
3f:58:cb:15:7c:25:62:cf:97:cf:84:d4:4f:af:13:
2f:93:22:72:d0:ea:ac:ab:90:8d:b5:4c:0f:e9:f2:
61:7d:cf:1a:42:f9:1e:a0:42:ff:d0:a0:f9:9a:1a:
a3:0b:ad:19:b3:a9:1d:a4:63:81:55:99:1d:8d:ca:
82:22:fc:43:ce:c1:04:7b:af:2b:3c:a7:d1:0b:19:
9e:41:5a:ae:9f:52:35:75:18:d4:a0:f2:2e:e0:ba:
20:51:d7:fc:2a:cf:89:be:f6:26:f9:74:09:2d:65:
f8:08:69:fd:0d:f8:50:cc:02:86:68:60:93:8c:31:
de:41:2a:70:34:06:10:9a:f8:33:27:1e:b9:b6:8c:
e9:78:41:77:63:d1:99:dd:c9:b6:1e:e7:67:50:24:
bb:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:6D:13:A3:AA:BB:57:1D:8C:84:34:9C:7E:C4:B9:0E:F8:42:AD:D3
X509v3 Authority Key Identifier:
keyid:74:2E:57:1D:00:06:FE:7F:66:0B:03:08:CC:C6:1A:16:99:E3:49:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dC5XHQAG_n9mCwMIzMYaFpnjSRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/2e03af-83a4-4c9f-911a-d5844b3c5177/1/dC5XHQAG_n9mCwMIzMYaFpnjSRc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/2e03af-83a4-4c9f-911a-d5844b3c5177/1/dC5XHQAG_n9mCwMIzMYaFpnjSRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:7d:c4:ca:a3:9d:80:76:a0:9d:86:c6:1d:d1:6e:a3:80:20:
39:15:83:09:70:7f:f1:e8:6f:99:97:09:0a:e2:e3:44:57:ea:
dd:d2:21:20:7f:c3:15:e7:8f:8a:0f:84:20:1e:f8:4a:26:80:
be:9a:d8:a8:dd:24:2c:06:d2:f1:69:58:9c:b7:d3:06:e4:b3:
be:5c:2e:a7:88:70:c7:f6:71:1a:b2:94:99:81:72:07:19:44:
51:ae:cf:c9:0d:82:17:f9:8d:ab:6b:c7:5a:46:8c:9f:e5:ed:
e9:f2:32:72:21:bd:28:32:1c:48:7e:81:6e:36:d3:4f:59:a1:
50:25:9c:c6:4c:9d:86:3c:c6:fe:3a:e8:18:36:8e:4f:12:d1:
ff:01:34:9b:ed:62:df:16:4d:a5:40:8a:0b:98:99:7f:f6:f5:
c5:ce:13:e4:ee:9e:f8:77:30:a2:3a:81:f0:1b:5e:1c:31:f4:
1f:6a:c6:f6:bf:0b:d7:fa:3b:0d:cc:26:e2:71:7f:e7:c8:f8:
54:7d:44:2c:27:ec:0b:0f:6d:bb:67:91:8e:ca:99:68:d2:da:
36:e8:e0:39:92:1b:7b:e0:4d:66:ab:6a:56:01:71:6c:2e:d5:
9a:74:19:d7:04:44:2e:43:be:17:c3:c9:30:da:c9:d0:b5:24:
76:4c:36:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:05:10 2025 by rpki-client