Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/dfa6a1-1e4c-49ff-a480-274232d69505/1/dQRxYHUyqMev1g1PMXqtxJDrogY.mft
File: dQRxYHUyqMev1g1PMXqtxJDrogY.mft (raw, json)
Hash identifier: kxTpq7aLirWlTwGGdNz9tNaY9xg1vBIK5k7FB9JU0c8=
Subject key identifier: D0:88:43:03:79:05:9B:36:58:8A:C0:4D:23:CB:21:64:A9:D5:23:A5
Authority key identifier: 75:04:71:60:75:32:A8:C7:AF:D6:0D:4F:31:7A:AD:C4:90:EB:A2:06
Certificate issuer: /CN=750471607532a8c7afd60d4f317aadc490eba206
Certificate serial: 019A71B8431E340ADA58BA14106A1AEF1724
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQRxYHUyqMev1g1PMXqtxJDrogY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/dfa6a1-1e4c-49ff-a480-274232d69505/1/dQRxYHUyqMev1g1PMXqtxJDrogY.mft
Manifest number: 171B
Signing time: Tue 11 Nov 2025 07:01:32 +0000
Manifest this update: Tue 11 Nov 2025 07:01:32 +0000
Manifest next update: Wed 12 Nov 2025 07:01:32 +0000
Files and hashes: 1: dQRxYHUyqMev1g1PMXqtxJDrogY.crl (hash: nzdS/xesavSt6FdBP9mfwGrvwdVOAQNkwTpFq7GrjN4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/dfa6a1-1e4c-49ff-a480-274232d69505/1/dQRxYHUyqMev1g1PMXqtxJDrogY.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/dfa6a1-1e4c-49ff-a480-274232d69505/1/dQRxYHUyqMev1g1PMXqtxJDrogY.mft
rsync://rpki.ripe.net/repository/DEFAULT/dQRxYHUyqMev1g1PMXqtxJDrogY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:43:1e:34:0a:da:58:ba:14:10:6a:1a:ef:17:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=750471607532a8c7afd60d4f317aadc490eba206
Validity
Not Before: Nov 11 07:01:32 2025 GMT
Not After : Nov 12 07:01:32 2025 GMT
Subject: CN=d088430379059b36588ac04d23cb2164a9d523a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:17:ec:e8:22:c6:7d:c0:a0:ca:3e:8a:a0:df:
8f:25:d9:8a:60:75:44:cf:80:27:9a:dc:57:b7:59:
44:1b:22:49:dd:04:8a:2f:97:cc:84:a1:17:67:fd:
05:4b:96:a5:f0:a0:e3:fb:9e:1c:88:4a:3b:29:c2:
88:f6:6b:a1:38:6a:86:90:1e:be:cc:4c:6c:d1:dc:
22:fd:58:05:29:15:9c:9c:a1:c9:22:52:e7:bc:e7:
76:2e:1b:03:69:b6:57:ef:74:8f:1d:2c:04:6b:e4:
7b:44:23:f5:39:7b:48:a0:ff:3c:5e:10:bb:8f:a5:
c9:04:80:d1:7e:ab:cb:9a:d4:3d:00:e0:70:ed:28:
f3:78:96:5f:f0:89:ed:06:b9:bb:ee:61:27:01:50:
7e:9a:fc:9b:6a:44:2a:91:85:bd:1f:f9:d0:b9:8a:
ea:c9:ce:28:0d:c3:a7:55:65:25:e1:12:54:21:88:
fe:f8:0b:70:29:d0:9d:ef:3d:d9:b6:dc:6c:35:52:
f7:53:b4:2f:0d:31:47:71:97:1d:d7:9a:c7:4c:7e:
33:97:2c:9f:6f:54:37:98:08:7b:d3:cc:e0:9c:df:
4f:6c:ac:4c:8c:a1:eb:da:8b:97:2c:91:fe:1d:29:
68:a3:27:63:1a:05:67:53:cf:f9:ce:80:98:f6:68:
45:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:88:43:03:79:05:9B:36:58:8A:C0:4D:23:CB:21:64:A9:D5:23:A5
X509v3 Authority Key Identifier:
keyid:75:04:71:60:75:32:A8:C7:AF:D6:0D:4F:31:7A:AD:C4:90:EB:A2:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQRxYHUyqMev1g1PMXqtxJDrogY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/dfa6a1-1e4c-49ff-a480-274232d69505/1/dQRxYHUyqMev1g1PMXqtxJDrogY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/dfa6a1-1e4c-49ff-a480-274232d69505/1/dQRxYHUyqMev1g1PMXqtxJDrogY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:8c:e0:62:5a:0e:2a:b6:f2:86:3d:35:f8:d7:9e:7a:f6:19:
be:bf:9c:d1:dc:e2:9d:a9:91:c1:8e:10:42:3f:21:3f:bc:6d:
d3:e8:7b:01:b6:52:18:f5:04:57:84:45:76:d7:d3:e1:a3:d6:
bb:78:a2:d8:b1:88:0c:39:60:b7:18:66:29:f8:b5:0a:60:da:
e1:19:a8:1e:b7:51:d5:fb:c1:05:b6:da:1e:b2:eb:97:ad:20:
aa:62:09:5f:96:08:c2:d7:7e:29:51:b6:4d:84:1c:e8:11:9a:
86:4e:cb:9c:48:9a:a1:5d:72:48:08:74:7a:a9:3c:83:95:08:
98:8c:81:9d:e1:36:ae:74:de:06:12:b8:39:07:9e:24:46:1f:
f9:3a:c8:14:28:eb:b8:ad:9a:2d:9c:63:41:0e:f0:eb:c8:f8:
97:a4:5b:a9:5b:fa:ad:70:c5:c8:aa:e6:f3:c0:b5:ab:59:08:
7d:ec:dc:66:36:f7:77:78:cc:0d:5b:96:f6:0a:53:c5:d4:fc:
65:a9:37:9d:99:2e:b5:3c:cc:a0:8d:db:ee:b7:7f:15:bb:ad:
10:bd:1e:a2:2a:d8:56:25:15:9a:7e:1a:b2:87:5e:6f:b8:4d:
bc:c3:b8:6b:f2:d4:95:4b:05:76:e3:ea:ed:72:58:20:fd:dd:
25:de:41:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:33:16 2025 by rpki-client