Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/fb147f-04ee-48f0-807d-fe3db5253eb0/1/DtlRtDq5cf2S62PsJqWyJu0Tx1I.mft
File: DtlRtDq5cf2S62PsJqWyJu0Tx1I.mft (raw, json)
Hash identifier: mVmFxXU/s+3eeg7euz/xrzid0NtEWvToiOkoAGZ1NpU=
Subject key identifier: 52:66:7E:F6:29:5C:A9:42:6C:78:9C:03:A7:6E:12:52:9C:69:E6:F8
Authority key identifier: 0E:D9:51:B4:3A:B9:71:FD:92:EB:63:EC:26:A5:B2:26:ED:13:C7:52
Certificate issuer: /CN=0ed951b43ab971fd92eb63ec26a5b226ed13c752
Certificate serial: 019A71B7CEDFD177DE218A8210C2623F510F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DtlRtDq5cf2S62PsJqWyJu0Tx1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/fb147f-04ee-48f0-807d-fe3db5253eb0/1/DtlRtDq5cf2S62PsJqWyJu0Tx1I.mft
Manifest number: 0500
Signing time: Tue 11 Nov 2025 07:01:02 +0000
Manifest this update: Tue 11 Nov 2025 07:01:02 +0000
Manifest next update: Wed 12 Nov 2025 07:01:02 +0000
Files and hashes: 1: DtlRtDq5cf2S62PsJqWyJu0Tx1I.crl (hash: 1nEbeU0NNvojvn/XZLxB3OOAlMxfrvhzovit8tFtHgg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/fb147f-04ee-48f0-807d-fe3db5253eb0/1/DtlRtDq5cf2S62PsJqWyJu0Tx1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/fb147f-04ee-48f0-807d-fe3db5253eb0/1/DtlRtDq5cf2S62PsJqWyJu0Tx1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/DtlRtDq5cf2S62PsJqWyJu0Tx1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:ce:df:d1:77:de:21:8a:82:10:c2:62:3f:51:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ed951b43ab971fd92eb63ec26a5b226ed13c752
Validity
Not Before: Nov 11 07:01:02 2025 GMT
Not After : Nov 12 07:01:02 2025 GMT
Subject: CN=52667ef6295ca9426c789c03a76e12529c69e6f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ec:3b:35:95:60:b6:b5:0d:9c:c5:d8:6e:a3:
0c:d9:6f:f6:3c:a1:e6:cc:6c:23:eb:38:fb:24:b4:
c3:06:45:3a:57:dc:56:f6:40:6d:50:30:8d:43:3e:
45:39:6a:3d:76:fa:fd:90:3c:c0:f6:76:0e:74:80:
78:87:a4:d7:6f:b7:22:5e:37:3e:56:2b:07:95:0b:
da:70:09:f7:64:fd:84:29:09:21:3e:88:92:2a:24:
9d:88:c9:96:84:56:b5:c2:9a:b6:ea:28:0f:09:a2:
73:5e:79:41:9c:f8:fb:cc:c6:d6:cf:b4:5a:ef:6b:
ec:1b:62:c9:0a:fd:2e:fd:ea:f6:b5:1f:1f:89:c0:
b3:53:ef:70:f2:a9:f8:bf:e6:42:ff:97:f5:da:a0:
e7:f9:fc:7c:c8:7c:63:20:e8:c3:9d:c7:d0:81:1d:
cb:55:90:2e:c0:10:76:97:69:b9:15:52:6f:64:14:
40:4a:b3:c6:60:4b:0c:17:9b:98:40:1e:86:03:89:
95:7c:19:70:a9:ba:8a:18:28:48:9a:06:d1:ab:9e:
9c:55:1e:c0:65:42:b1:89:03:23:b1:eb:2e:f9:75:
21:a5:72:b2:7d:c9:57:40:b0:5f:6c:f8:52:66:46:
46:a5:12:f3:61:89:17:84:e5:29:3b:65:2b:46:41:
fe:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:66:7E:F6:29:5C:A9:42:6C:78:9C:03:A7:6E:12:52:9C:69:E6:F8
X509v3 Authority Key Identifier:
keyid:0E:D9:51:B4:3A:B9:71:FD:92:EB:63:EC:26:A5:B2:26:ED:13:C7:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DtlRtDq5cf2S62PsJqWyJu0Tx1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/fb147f-04ee-48f0-807d-fe3db5253eb0/1/DtlRtDq5cf2S62PsJqWyJu0Tx1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/fb147f-04ee-48f0-807d-fe3db5253eb0/1/DtlRtDq5cf2S62PsJqWyJu0Tx1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:b9:09:14:cd:79:dc:cc:69:12:f1:4c:15:b3:83:f1:12:4a:
7e:69:be:b4:d1:c9:fc:dd:bd:df:ba:c2:34:ab:27:f6:aa:51:
ae:c6:6c:86:a1:e4:ac:36:f0:ed:b6:27:bc:ab:91:86:c4:24:
e1:99:f0:8e:fb:24:7c:70:fa:91:ac:52:17:22:04:6f:54:37:
f5:b6:ba:a7:65:f2:09:5a:a8:c7:c6:f6:f8:dc:44:49:6b:7c:
15:72:e6:6f:55:cf:54:21:ba:52:75:0e:c6:d1:33:d3:c1:29:
57:99:ed:ac:3a:d2:7a:8f:25:7d:48:11:cd:ba:58:9e:a2:5c:
c4:35:fa:84:9d:e0:13:77:79:de:89:16:dd:07:d9:3e:24:fc:
27:2e:30:b4:46:11:04:67:33:d0:00:55:28:90:e2:56:54:70:
4a:93:d6:ee:f3:73:29:1f:4e:c1:7b:4c:94:e6:b7:26:b9:32:
b0:c7:31:a2:79:3c:5e:07:78:6b:e6:82:ec:92:cb:b3:0d:20:
09:23:90:8b:15:02:2b:e9:83:19:d1:5c:b0:ab:dd:43:7f:1b:
a1:59:d8:ee:a9:91:72:32:e8:56:40:30:cf:99:fc:51:6c:7c:
13:d9:3c:29:ad:31:f3:7d:59:b5:af:00:4a:8e:83:48:98:49:
11:4b:8c:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:46:56 2025 by rpki-client