Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/56c8a7-562b-48c8-8a8f-5a05b91b2b8c/1/dPYRYnGtLREZYKLZYaqcFi-VgKY.mft
File: dPYRYnGtLREZYKLZYaqcFi-VgKY.mft (raw, json)
Hash identifier: bXcE3BX1YusVvyqsT4pfUgbbWC30l7lgONhTCRjSii8=
Subject key identifier: D8:F7:2C:3C:5F:84:1A:2F:8F:66:93:A4:CA:27:91:AC:F9:B4:F9:C5
Authority key identifier: 74:F6:11:62:71:AD:2D:11:19:60:A2:D9:61:AA:9C:16:2F:95:80:A6
Certificate issuer: /CN=74f6116271ad2d111960a2d961aa9c162f9580a6
Certificate serial: 019A71B8A9BB5F2D10BADE44E7D681BCED80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dPYRYnGtLREZYKLZYaqcFi-VgKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/56c8a7-562b-48c8-8a8f-5a05b91b2b8c/1/dPYRYnGtLREZYKLZYaqcFi-VgKY.mft
Manifest number: 1117
Signing time: Tue 11 Nov 2025 07:01:58 +0000
Manifest this update: Tue 11 Nov 2025 07:01:58 +0000
Manifest next update: Wed 12 Nov 2025 07:01:58 +0000
Files and hashes: 1: dPYRYnGtLREZYKLZYaqcFi-VgKY.crl (hash: cHhaDdkSwfthT4RaFXwgOGIxUqTcX+7cpxD0oyjN9yA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/56c8a7-562b-48c8-8a8f-5a05b91b2b8c/1/dPYRYnGtLREZYKLZYaqcFi-VgKY.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/56c8a7-562b-48c8-8a8f-5a05b91b2b8c/1/dPYRYnGtLREZYKLZYaqcFi-VgKY.mft
rsync://rpki.ripe.net/repository/DEFAULT/dPYRYnGtLREZYKLZYaqcFi-VgKY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:a9:bb:5f:2d:10:ba:de:44:e7:d6:81:bc:ed:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74f6116271ad2d111960a2d961aa9c162f9580a6
Validity
Not Before: Nov 11 07:01:58 2025 GMT
Not After : Nov 12 07:01:58 2025 GMT
Subject: CN=d8f72c3c5f841a2f8f6693a4ca2791acf9b4f9c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:12:9b:e1:60:32:68:08:a9:9a:d2:f7:91:3f:
20:e8:ac:79:bd:c7:91:8d:b6:94:95:f3:a9:64:40:
f0:1a:7b:3c:76:2f:2a:e0:32:59:fc:b8:a7:4c:be:
10:ef:72:b2:9f:4e:e3:ff:be:2d:3d:df:38:2b:50:
27:da:1b:93:79:8c:88:e1:12:e9:97:33:a4:45:16:
71:65:2f:f0:6e:7e:1c:3e:87:27:09:ec:d2:19:2d:
fd:2b:6e:95:5e:a8:d7:59:67:7a:97:19:cf:2c:0a:
c2:97:96:2c:a6:c6:10:f8:3c:56:31:f4:de:81:c1:
0b:8a:22:45:29:93:a7:96:af:11:49:59:d9:57:f5:
e9:06:c1:f0:b0:d2:d1:c4:4c:27:28:a7:bc:77:7a:
53:f1:bc:d9:79:d0:b2:bf:7e:b6:a8:ba:27:29:ce:
a5:6a:fa:37:71:f5:b6:54:e0:1c:69:24:66:85:16:
45:53:03:68:37:11:68:37:bf:86:0d:21:b0:78:52:
4a:62:79:8c:e0:da:5b:14:61:6f:cf:ab:73:8e:f7:
62:a0:7e:5d:eb:1f:c0:95:3a:a5:8b:12:42:59:2a:
dd:e2:cb:2a:51:2c:73:f2:cf:be:84:c1:16:2e:35:
f8:05:e6:09:b9:fb:c5:da:94:66:ac:34:2f:43:b9:
ec:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:F7:2C:3C:5F:84:1A:2F:8F:66:93:A4:CA:27:91:AC:F9:B4:F9:C5
X509v3 Authority Key Identifier:
keyid:74:F6:11:62:71:AD:2D:11:19:60:A2:D9:61:AA:9C:16:2F:95:80:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dPYRYnGtLREZYKLZYaqcFi-VgKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/56c8a7-562b-48c8-8a8f-5a05b91b2b8c/1/dPYRYnGtLREZYKLZYaqcFi-VgKY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/56c8a7-562b-48c8-8a8f-5a05b91b2b8c/1/dPYRYnGtLREZYKLZYaqcFi-VgKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:68:1c:1f:5c:18:4a:38:dd:25:4f:f1:3a:6f:3b:0a:cf:30:
2d:14:4c:58:f0:d0:47:82:67:20:84:bf:22:55:f9:d3:16:31:
54:2c:1e:57:88:db:81:78:fa:3a:77:b8:6c:49:a5:e6:de:37:
9d:a2:16:c9:f6:e8:37:01:4a:7a:43:e0:cd:f5:9e:b8:77:9b:
01:10:18:4d:a0:b7:6b:ed:25:5c:4c:ef:50:fa:7d:2e:f7:13:
80:b4:59:52:2c:44:9b:7f:05:a2:60:6b:3f:af:b7:33:5b:e0:
ce:97:75:db:39:8a:4d:75:77:c1:81:d5:c7:3d:31:19:9f:5a:
a5:3c:48:18:14:ca:65:16:60:9e:87:40:5b:39:33:b3:af:f5:
97:ad:5b:b3:4d:a0:a9:4a:39:2d:0c:c7:4f:04:62:af:d1:e0:
72:fa:8b:d7:9e:61:07:f5:a7:a9:6a:6a:06:0b:92:d5:2e:01:
0c:25:4b:87:46:bb:6c:37:bb:9a:70:2e:78:c8:ad:36:ec:6a:
06:f3:af:92:85:ce:5a:ae:01:f1:ba:0f:42:31:ab:82:74:58:
93:fc:5d:cb:2b:46:f4:de:9e:8a:ed:b3:2c:9e:bf:33:04:f8:
6b:07:b8:b6:2a:69:08:3e:6d:7b:b4:38:f9:58:8c:5b:7d:f2:
a6:e1:c2:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:15 2025 by rpki-client