Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/4c43b9-ae82-4919-987d-93c6facf13c9/1/d6TN722YqQcT__52cRNId5pjKgo.mft
File: d6TN722YqQcT__52cRNId5pjKgo.mft (raw, json)
Hash identifier: M0XF47MP4CT5zFQWaK5tKuPu+OAxxIt3eQi+3yFZXbk=
Subject key identifier: 52:2E:06:7C:8B:F6:3F:1A:1F:E3:5D:CD:79:67:AD:C3:A9:8E:89:F1
Authority key identifier: 77:A4:CD:EF:6D:98:A9:07:13:FF:FE:76:71:13:48:77:9A:63:2A:0A
Certificate issuer: /CN=77a4cdef6d98a90713fffe76711348779a632a0a
Certificate serial: 0199FC2158E501B2F82AC05A5481D068935B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d6TN722YqQcT__52cRNId5pjKgo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/4c43b9-ae82-4919-987d-93c6facf13c9/1/d6TN722YqQcT__52cRNId5pjKgo.mft
Manifest number: 16DE
Signing time: Sun 19 Oct 2025 11:01:07 +0000
Manifest this update: Sun 19 Oct 2025 11:01:07 +0000
Manifest next update: Mon 20 Oct 2025 11:01:07 +0000
Files and hashes: 1: d6TN722YqQcT__52cRNId5pjKgo.crl (hash: DX/2FjtU9lMuOuVQ670UB+3IjdQgdyIKNG0aOucjMIU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/4c43b9-ae82-4919-987d-93c6facf13c9/1/d6TN722YqQcT__52cRNId5pjKgo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/4c43b9-ae82-4919-987d-93c6facf13c9/1/d6TN722YqQcT__52cRNId5pjKgo.mft
rsync://rpki.ripe.net/repository/DEFAULT/d6TN722YqQcT__52cRNId5pjKgo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:58:e5:01:b2:f8:2a:c0:5a:54:81:d0:68:93:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77a4cdef6d98a90713fffe76711348779a632a0a
Validity
Not Before: Oct 19 11:01:07 2025 GMT
Not After : Oct 20 11:01:07 2025 GMT
Subject: CN=522e067c8bf63f1a1fe35dcd7967adc3a98e89f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:e0:d8:0c:6c:8b:5b:d7:32:10:66:3e:a6:72:
7c:ff:57:6e:74:4d:58:da:db:b7:01:94:17:d1:01:
c7:40:4b:cc:49:93:e7:51:74:b9:e6:05:78:9d:21:
2a:8a:3a:32:b5:89:e4:87:ee:6c:65:3f:58:2c:86:
05:f0:75:a2:ba:7a:23:76:26:fb:31:bf:a5:a7:13:
a0:d0:55:f2:ef:36:7b:e1:2e:fc:72:25:3e:3a:52:
1d:43:62:eb:2d:ec:41:36:4e:fa:6d:53:af:eb:ff:
02:f0:03:4a:a1:a6:80:e1:3a:12:1a:1d:c6:59:34:
16:3e:35:47:01:76:ec:ba:c2:f3:ae:b6:16:e8:98:
1d:af:73:d9:fb:b3:19:88:5e:61:d8:dd:08:e7:47:
26:9b:82:69:44:3b:7e:9a:d9:95:4f:ba:04:62:23:
98:84:b1:45:54:9c:e0:8a:4f:2f:36:cb:b2:03:02:
ee:18:46:3c:99:62:f0:29:5d:93:90:a8:57:8b:7f:
06:70:1c:b3:4e:dd:fa:5c:ab:35:9f:13:a1:c0:38:
a9:cf:17:bb:2a:29:e0:01:e5:a5:18:a8:5b:00:74:
a0:1c:11:d4:5d:03:8d:6e:c7:1c:2d:52:47:39:c3:
39:0e:40:75:2b:8e:95:95:ef:d4:ca:d2:55:1b:97:
b8:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:2E:06:7C:8B:F6:3F:1A:1F:E3:5D:CD:79:67:AD:C3:A9:8E:89:F1
X509v3 Authority Key Identifier:
keyid:77:A4:CD:EF:6D:98:A9:07:13:FF:FE:76:71:13:48:77:9A:63:2A:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6TN722YqQcT__52cRNId5pjKgo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/4c43b9-ae82-4919-987d-93c6facf13c9/1/d6TN722YqQcT__52cRNId5pjKgo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/4c43b9-ae82-4919-987d-93c6facf13c9/1/d6TN722YqQcT__52cRNId5pjKgo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:45:e6:f0:15:a7:b3:24:7c:cb:f2:0b:1b:d7:66:4b:47:86:
e8:ae:db:0e:ac:27:31:5f:68:0d:2f:6a:fa:4e:09:5a:1f:0f:
1b:58:1f:33:b1:e4:62:d4:90:42:1c:1d:c6:db:77:d7:36:18:
ff:e2:c2:bc:69:3b:8d:2b:b1:a0:8c:b7:b8:fa:dd:1b:90:d1:
72:e6:51:6a:34:73:cb:ae:63:66:69:1c:79:c8:d3:f0:d6:e6:
e5:cc:3d:17:14:11:96:aa:6f:5b:df:07:f6:66:4e:16:92:54:
e4:18:c5:52:45:99:f5:f1:9a:e2:7f:13:57:be:cf:0d:f0:60:
b3:ff:69:51:9f:01:e9:01:11:d0:fc:61:9a:3c:d6:5e:07:0d:
2e:2a:87:f8:d5:ab:d8:8e:d6:3b:52:02:5c:3e:fe:74:56:97:
d5:ab:b2:63:fc:fa:dd:c0:89:85:de:fb:c7:08:41:ab:56:06:
32:35:3e:b2:d7:e7:2b:ec:7d:8a:91:89:e3:b8:0f:40:32:c7:
6e:4b:8e:b2:d6:dd:cc:8e:30:d1:55:70:e3:2f:4c:b7:8a:36:
0c:25:c8:e8:74:40:0f:49:7e:32:2f:e8:c4:83:ab:63:81:49:
79:2e:84:48:f7:bc:55:46:1b:0c:66:44:9a:f0:af:3f:da:04:
21:61:34:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:07:03 2025 by rpki-client