Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/c49ec2-37da-41a9-96fb-5141fa39080a/1/dCL5hcs0oDx8VYFkLG1utDLIPpQ.mft
File: dCL5hcs0oDx8VYFkLG1utDLIPpQ.mft (raw, json)
Hash identifier: htQbCEsaFuuXWrOPMMrD/HomacFQ2HDwmm4yM9nwBeE=
Subject key identifier: 92:B3:18:08:16:EC:F8:89:16:97:1B:6E:97:A9:1F:7B:A8:0F:ED:8E
Authority key identifier: 74:22:F9:85:CB:34:A0:3C:7C:55:81:64:2C:6D:6E:B4:32:C8:3E:94
Certificate issuer: /CN=7422f985cb34a03c7c5581642c6d6eb432c83e94
Certificate serial: 019A722664EC4CEF0BF97ED387003FFCE7E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dCL5hcs0oDx8VYFkLG1utDLIPpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/c49ec2-37da-41a9-96fb-5141fa39080a/1/dCL5hcs0oDx8VYFkLG1utDLIPpQ.mft
Manifest number: 0EF6
Signing time: Tue 11 Nov 2025 09:01:50 +0000
Manifest this update: Tue 11 Nov 2025 09:01:50 +0000
Manifest next update: Wed 12 Nov 2025 09:01:50 +0000
Files and hashes: 1: dCL5hcs0oDx8VYFkLG1utDLIPpQ.crl (hash: umQNMcZgzLs+vbaMwHb3in5EWkudWb5LqfHSiAgCx44=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/c49ec2-37da-41a9-96fb-5141fa39080a/1/dCL5hcs0oDx8VYFkLG1utDLIPpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/c49ec2-37da-41a9-96fb-5141fa39080a/1/dCL5hcs0oDx8VYFkLG1utDLIPpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/dCL5hcs0oDx8VYFkLG1utDLIPpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:64:ec:4c:ef:0b:f9:7e:d3:87:00:3f:fc:e7:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7422f985cb34a03c7c5581642c6d6eb432c83e94
Validity
Not Before: Nov 11 09:01:50 2025 GMT
Not After : Nov 12 09:01:50 2025 GMT
Subject: CN=92b3180816ecf88916971b6e97a91f7ba80fed8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:34:7e:e2:2f:c9:4a:b8:cd:d9:35:49:1f:4d:
08:f0:62:29:6a:22:a8:00:a3:ad:cc:65:db:5c:74:
d7:15:dc:14:22:95:0b:43:d5:46:e1:60:6c:4a:00:
ac:f6:c3:ff:16:ff:08:d0:00:d1:96:1a:80:69:47:
32:65:43:e9:a1:00:0f:70:24:ab:aa:94:51:bf:a3:
c4:53:1b:f1:50:82:e3:dd:2a:b6:bc:36:0e:78:b4:
54:59:28:c9:3b:27:16:03:2f:64:89:39:d0:2b:14:
2b:62:21:fd:63:ac:cb:fb:1d:2a:9b:be:aa:82:b9:
2a:88:65:a6:00:5b:a5:12:31:2f:be:14:19:4c:7b:
3b:91:52:67:84:b7:12:f0:aa:90:62:25:fb:d7:b5:
d2:8c:fa:cd:02:ca:92:9f:86:0d:70:8f:31:96:ee:
b5:8f:69:a1:a5:ec:59:be:8d:5f:b8:8f:2e:19:54:
1b:d8:76:3b:e8:84:98:1b:f6:34:10:5a:17:2a:b1:
44:f1:3e:bc:8c:99:f3:3b:ca:14:0c:bb:8e:08:aa:
8a:a3:a1:86:3f:c6:62:af:7f:c3:ed:b5:9c:d6:fd:
c2:13:7e:f0:57:c4:e1:75:59:3a:a4:01:b7:b5:8d:
0f:65:3e:a2:92:6c:e2:a4:a8:85:1a:89:39:8c:19:
3f:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:B3:18:08:16:EC:F8:89:16:97:1B:6E:97:A9:1F:7B:A8:0F:ED:8E
X509v3 Authority Key Identifier:
keyid:74:22:F9:85:CB:34:A0:3C:7C:55:81:64:2C:6D:6E:B4:32:C8:3E:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dCL5hcs0oDx8VYFkLG1utDLIPpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/c49ec2-37da-41a9-96fb-5141fa39080a/1/dCL5hcs0oDx8VYFkLG1utDLIPpQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/c49ec2-37da-41a9-96fb-5141fa39080a/1/dCL5hcs0oDx8VYFkLG1utDLIPpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:36:2c:ac:4b:8e:5b:f9:9c:18:0e:2e:2e:b2:79:0c:8b:4e:
5a:65:f6:a8:4a:df:44:8e:49:4e:12:f1:92:8d:9a:2a:78:a1:
31:79:55:ab:8e:c4:a9:74:81:ae:d6:c3:ae:08:34:c3:78:8e:
f9:42:de:cd:54:05:1f:65:e8:7d:52:8f:e8:bb:c0:ae:ea:e3:
28:b0:d3:46:60:f2:a0:7d:88:65:ef:26:0e:39:df:6a:63:5b:
e2:59:13:8c:b1:3a:7a:de:16:59:41:4e:fb:fb:5c:91:38:7f:
ed:fd:c8:76:1b:09:b4:34:63:91:1e:86:63:05:ec:98:f0:bc:
6a:be:31:89:78:66:16:2b:9d:e0:c2:4c:8b:aa:f7:aa:cc:f2:
67:20:1f:a4:75:58:da:db:52:50:bd:ce:ad:f0:e6:05:90:bd:
dd:7e:53:57:5c:30:c4:ad:4d:8f:c2:e8:8c:c6:62:66:b2:86:
18:79:55:0a:5c:f5:b2:e3:96:66:df:52:b4:a5:e3:7a:d9:12:
45:7f:d6:75:1a:00:8a:24:47:18:82:fb:f7:52:f6:2c:5f:75:
5d:0f:8b:01:8c:5b:11:6d:0b:e5:d5:b8:7e:47:b7:14:79:a0:
7a:f4:1d:46:02:f9:84:81:ed:11:df:f5:83:2d:2c:3c:92:a0:
30:66:17:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:11 2025 by rpki-client