Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/47a9c9-d457-4579-b2b0-e5212574f9ec/1/rdkgeZS6nH2R6n5Hn-_RuAmfYs4.mft
File: rdkgeZS6nH2R6n5Hn-_RuAmfYs4.mft (raw, json)
Hash identifier: 0bDHcQPQTl0B83LSeQ+HiHoezCk7o4/C4819LrPFDFM=
Subject key identifier: 0A:04:45:8D:0B:BF:6A:B3:EA:62:EB:3C:EE:9F:12:FE:5F:36:7A:31
Authority key identifier: AD:D9:20:79:94:BA:9C:7D:91:EA:7E:47:9F:EF:D1:B8:09:9F:62:CE
Certificate issuer: /CN=add9207994ba9c7d91ea7e479fefd1b8099f62ce
Certificate serial: 0199FBEBC071C0FAA23D43863902585E6AD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rdkgeZS6nH2R6n5Hn-_RuAmfYs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/47a9c9-d457-4579-b2b0-e5212574f9ec/1/rdkgeZS6nH2R6n5Hn-_RuAmfYs4.mft
Manifest number: 16EC
Signing time: Sun 19 Oct 2025 10:02:35 +0000
Manifest this update: Sun 19 Oct 2025 10:02:35 +0000
Manifest next update: Mon 20 Oct 2025 10:02:35 +0000
Files and hashes: 1: rdkgeZS6nH2R6n5Hn-_RuAmfYs4.crl (hash: N/wmi0/MVa6CYW8ROUgyTrIw/gi2YSKlREh0xukoJQ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/47a9c9-d457-4579-b2b0-e5212574f9ec/1/rdkgeZS6nH2R6n5Hn-_RuAmfYs4.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/47a9c9-d457-4579-b2b0-e5212574f9ec/1/rdkgeZS6nH2R6n5Hn-_RuAmfYs4.mft
rsync://rpki.ripe.net/repository/DEFAULT/rdkgeZS6nH2R6n5Hn-_RuAmfYs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:c0:71:c0:fa:a2:3d:43:86:39:02:58:5e:6a:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=add9207994ba9c7d91ea7e479fefd1b8099f62ce
Validity
Not Before: Oct 19 10:02:35 2025 GMT
Not After : Oct 20 10:02:35 2025 GMT
Subject: CN=0a04458d0bbf6ab3ea62eb3cee9f12fe5f367a31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:9c:ec:82:d8:9a:f4:fd:f9:1f:15:14:91:72:
ec:4f:3f:44:0a:c4:70:42:96:85:d1:0e:50:5d:f9:
06:2f:45:6c:39:a6:ce:3a:17:f4:7e:d3:c5:11:19:
f9:0d:14:bb:5c:70:84:13:c4:ab:f8:e9:a3:0c:53:
31:a4:e6:d0:07:ba:65:a5:7c:27:b1:7c:0a:e6:07:
62:e9:f6:0e:18:77:58:cd:9d:5f:9c:d0:3f:19:5e:
7c:79:86:c8:c3:b4:19:70:a3:cd:39:49:83:92:99:
e2:be:83:71:51:e7:03:4e:7a:1a:b2:3f:7f:b3:6a:
24:d3:bf:c9:d6:3d:44:e0:44:91:f9:4f:17:3d:28:
fa:4d:78:ef:9d:bb:f4:e2:f6:5d:bf:40:5d:ff:db:
c5:67:75:27:ca:73:69:c1:bf:01:f4:a0:85:7c:96:
de:5e:af:cf:cc:0a:a1:af:16:88:b0:5a:b7:55:de:
e6:ba:fc:41:cf:ba:01:0f:a2:e4:df:01:50:8c:44:
9e:21:2d:34:10:30:f3:a7:3c:9d:18:96:26:d1:9f:
63:80:8c:28:1c:0d:ba:b9:6c:a5:e7:53:5a:99:3c:
96:1f:f2:6d:a1:22:fd:01:bf:2d:19:61:7d:7a:e1:
7c:5b:dc:f1:3b:5b:dc:69:5e:fe:c5:eb:a5:fc:7b:
47:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:04:45:8D:0B:BF:6A:B3:EA:62:EB:3C:EE:9F:12:FE:5F:36:7A:31
X509v3 Authority Key Identifier:
keyid:AD:D9:20:79:94:BA:9C:7D:91:EA:7E:47:9F:EF:D1:B8:09:9F:62:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rdkgeZS6nH2R6n5Hn-_RuAmfYs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/47a9c9-d457-4579-b2b0-e5212574f9ec/1/rdkgeZS6nH2R6n5Hn-_RuAmfYs4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/47a9c9-d457-4579-b2b0-e5212574f9ec/1/rdkgeZS6nH2R6n5Hn-_RuAmfYs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:7f:8e:d3:8d:9d:f2:33:b5:20:67:45:8f:35:a8:07:54:74:
ce:03:17:a9:b5:c5:56:8b:60:07:4b:c8:74:86:95:61:f9:d0:
a4:3e:33:f7:92:98:cc:7f:b4:bb:f6:3d:15:c6:33:1c:60:c1:
12:76:70:9b:96:38:e0:e9:c8:58:76:bf:05:ae:ae:f3:26:b4:
7d:f9:9c:30:d4:4a:ea:54:f6:8a:00:34:3e:00:dc:89:c6:6e:
a1:ce:61:45:6a:f8:89:18:52:32:d5:db:97:97:72:e6:a2:f1:
fd:70:d4:2f:4c:58:ff:53:a0:9a:85:f0:e8:57:5c:8d:1f:b7:
8a:13:9e:3f:b4:7f:f7:00:59:ad:17:4c:0e:37:50:c7:15:be:
94:92:4d:3a:b3:7a:ee:34:c4:eb:bc:9d:99:88:d4:d8:40:a3:
a7:9e:89:94:e2:ea:63:64:0a:21:d0:6a:e5:f0:63:9c:1a:ad:
a8:42:89:d8:3e:45:11:36:40:4e:38:91:b4:3c:cc:29:17:ee:
07:5d:bd:26:0c:7e:bd:bb:a9:ea:9b:6a:e2:b9:09:98:db:0b:
e9:26:6e:28:a9:02:5c:54:57:16:c1:06:35:71:30:f9:b2:e6:
26:cd:e6:ae:9a:ac:5a:68:2b:e3:da:a1:bd:63:c9:9d:52:62:
44:47:9d:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:02:59 2025 by rpki-client