Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/c16043-a3de-4ab3-9e56-8265a96e420d/1/dUE1hHAyFWSttCp213OuPK57vVY.mft
File: dUE1hHAyFWSttCp213OuPK57vVY.mft (raw, json)
Hash identifier: 45CrwiSWXxkD618TIXdyhMl4cSeQZgnQjiSVT3PdY90=
Subject key identifier: 56:89:92:B3:2A:45:11:80:EE:DD:3A:AA:11:55:B5:E3:87:F8:88:C1
Authority key identifier: 75:41:35:84:70:32:15:64:AD:B4:2A:76:D7:73:AE:3C:AE:7B:BD:56
Certificate issuer: /CN=7541358470321564adb42a76d773ae3cae7bbd56
Certificate serial: 0199FBEA848F0B7905AA2A83E4403144D9ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dUE1hHAyFWSttCp213OuPK57vVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/c16043-a3de-4ab3-9e56-8265a96e420d/1/dUE1hHAyFWSttCp213OuPK57vVY.mft
Manifest number: 052D
Signing time: Sun 19 Oct 2025 10:01:14 +0000
Manifest this update: Sun 19 Oct 2025 10:01:14 +0000
Manifest next update: Mon 20 Oct 2025 10:01:14 +0000
Files and hashes: 1: dUE1hHAyFWSttCp213OuPK57vVY.crl (hash: gkCTCz4ark7WlKh9UH++D3AlKJOq+0hPyfWRpiJWcng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/c16043-a3de-4ab3-9e56-8265a96e420d/1/dUE1hHAyFWSttCp213OuPK57vVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/c16043-a3de-4ab3-9e56-8265a96e420d/1/dUE1hHAyFWSttCp213OuPK57vVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/dUE1hHAyFWSttCp213OuPK57vVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:84:8f:0b:79:05:aa:2a:83:e4:40:31:44:d9:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7541358470321564adb42a76d773ae3cae7bbd56
Validity
Not Before: Oct 19 10:01:14 2025 GMT
Not After : Oct 20 10:01:14 2025 GMT
Subject: CN=568992b32a451180eedd3aaa1155b5e387f888c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:17:29:89:42:f4:e0:f3:71:c4:b9:06:bf:71:
f0:2d:ee:2c:9e:ff:3f:1b:05:76:d7:66:9c:8e:e7:
81:ba:cc:01:ed:1f:10:02:07:ec:a6:03:07:0d:56:
1f:4a:18:f9:d2:b4:0c:5a:d0:d5:ee:a1:88:62:d3:
80:ba:12:88:81:24:42:24:28:07:6a:e6:6c:a6:33:
a0:fd:d4:a9:8a:2b:eb:39:b3:aa:ff:9d:00:df:24:
a2:ab:18:fc:43:d0:bb:ae:98:80:49:ec:1c:bd:f9:
15:fb:67:63:e5:0d:f4:bc:f3:21:e0:06:a2:9e:f2:
fa:d6:97:70:7e:47:a5:f4:41:6f:ea:82:9e:73:66:
6e:56:90:5e:8e:65:d4:25:44:48:db:d9:33:e8:ec:
3a:f8:76:6f:a9:a8:ff:91:db:4e:98:2d:f1:8f:66:
31:b0:4b:40:91:3f:ed:76:89:53:2a:10:1f:b0:0f:
08:9a:a6:8f:96:78:2e:e4:e3:89:6f:f9:14:d3:ec:
79:ff:35:15:65:fc:0e:1e:4b:e2:73:ab:e8:8d:36:
54:df:c9:6e:f6:45:e3:9b:39:5c:2c:38:fe:b1:5f:
26:25:e0:f9:ea:a6:c5:dd:fc:4a:ba:9a:06:12:2b:
ea:ec:e7:8a:06:e6:e3:b3:c8:d4:89:89:df:00:b5:
73:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:89:92:B3:2A:45:11:80:EE:DD:3A:AA:11:55:B5:E3:87:F8:88:C1
X509v3 Authority Key Identifier:
keyid:75:41:35:84:70:32:15:64:AD:B4:2A:76:D7:73:AE:3C:AE:7B:BD:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dUE1hHAyFWSttCp213OuPK57vVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c16043-a3de-4ab3-9e56-8265a96e420d/1/dUE1hHAyFWSttCp213OuPK57vVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c16043-a3de-4ab3-9e56-8265a96e420d/1/dUE1hHAyFWSttCp213OuPK57vVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:59:2f:62:f1:d7:94:e4:96:36:02:6d:d9:22:81:dc:a2:f2:
73:58:b0:bb:8f:b8:5a:03:c3:10:97:81:16:e2:24:ab:f0:7f:
96:a3:5a:bc:ef:d9:c3:fc:ea:6b:bf:bf:9c:1b:75:e5:3e:f2:
86:7c:52:70:80:42:f5:56:bc:34:ca:26:df:5b:6f:87:23:61:
97:70:9a:33:52:5d:79:d2:0c:c4:7a:53:de:d7:58:a9:09:49:
53:eb:d6:46:f6:4e:a1:e1:b8:f9:97:a5:2d:94:df:c1:db:30:
ae:45:21:30:cb:a2:d5:9d:d8:bb:b2:af:01:07:ba:cf:93:ab:
8b:f3:00:a1:e3:3f:84:b3:2f:be:3e:cb:1e:78:21:6e:3d:82:
e8:c2:ed:56:c8:b2:4c:67:29:7f:3c:5b:04:a4:e2:c4:a0:b7:
b8:ff:f4:06:d9:dc:ce:d0:1b:1e:c1:b6:3a:9d:aa:f9:84:5b:
45:eb:94:2a:f8:93:18:47:4b:23:ee:e2:6d:34:89:98:e9:14:
b8:b9:c5:19:e4:ae:96:f8:c9:d4:16:03:47:d4:fd:e7:e6:c7:
b1:de:c9:0c:45:5b:39:a4:ba:79:d5:46:d5:1a:4c:c9:74:61:
06:89:22:d0:c2:d3:77:31:69:ff:91:51:4c:05:63:2f:b7:8a:
3a:1f:91:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 12:54:29 2025 by rpki-client