Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/3eada9-d441-476a-baa4-ecaa5ddd1d0f/1/DcGyhbbH8r8EyZjeiStDbxDTTcA.mft
File: DcGyhbbH8r8EyZjeiStDbxDTTcA.mft (raw, json)
Hash identifier: pW9FKRamLf3dC3Vw6BJE5xI7fCIkCwrBgULId1GMCR4=
Subject key identifier: FB:28:DE:33:FC:1B:36:43:70:AE:23:9E:02:E3:C3:D2:6A:5B:F1:AA
Authority key identifier: 0D:C1:B2:85:B6:C7:F2:BF:04:C9:98:DE:89:2B:43:6F:10:D3:4D:C0
Certificate issuer: /CN=0dc1b285b6c7f2bf04c998de892b436f10d34dc0
Certificate serial: 019A706E28E7A2D5DFCF69E1A7AD130AC6DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DcGyhbbH8r8EyZjeiStDbxDTTcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/3eada9-d441-476a-baa4-ecaa5ddd1d0f/1/DcGyhbbH8r8EyZjeiStDbxDTTcA.mft
Manifest number: 57
Signing time: Tue 11 Nov 2025 01:00:58 +0000
Manifest this update: Tue 11 Nov 2025 01:00:58 +0000
Manifest next update: Wed 12 Nov 2025 01:00:58 +0000
Files and hashes: 1: DcGyhbbH8r8EyZjeiStDbxDTTcA.crl (hash: DyJYDfWvRHFKFlXqLKm/gadFe4G022++w6Dk5v/ElD0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/3eada9-d441-476a-baa4-ecaa5ddd1d0f/1/DcGyhbbH8r8EyZjeiStDbxDTTcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/3eada9-d441-476a-baa4-ecaa5ddd1d0f/1/DcGyhbbH8r8EyZjeiStDbxDTTcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/DcGyhbbH8r8EyZjeiStDbxDTTcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 01:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:6e:28:e7:a2:d5:df:cf:69:e1:a7:ad:13:0a:c6:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dc1b285b6c7f2bf04c998de892b436f10d34dc0
Validity
Not Before: Nov 11 01:00:58 2025 GMT
Not After : Nov 12 01:00:58 2025 GMT
Subject: CN=fb28de33fc1b364370ae239e02e3c3d26a5bf1aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:d5:0d:fc:be:4f:5f:a1:00:13:2a:93:be:54:
ce:eb:d4:a3:15:6c:75:72:d6:e7:b6:19:b6:9a:7c:
96:3a:d9:3b:dd:ff:b0:31:33:01:a8:e0:e7:b3:26:
3c:9a:b5:70:53:a0:4b:2f:d4:a2:ff:c6:e7:2b:40:
30:bb:1d:39:b0:19:c6:e1:04:d7:61:08:78:39:83:
e7:92:65:93:b7:ad:5b:15:2b:92:6e:df:48:bf:25:
03:03:e1:a2:26:6e:36:e7:a4:af:cf:08:5c:69:7b:
fd:d7:36:23:b0:d2:dc:12:e2:07:bb:5c:57:5e:18:
ec:e0:52:7e:69:cd:68:51:36:59:d9:5d:cc:7b:4e:
f5:5b:db:d1:6a:29:06:82:38:b6:df:57:56:fd:6d:
a8:1a:fd:41:00:a2:a1:77:7c:3a:43:b0:f5:95:c9:
95:ec:e6:8a:a7:cf:13:db:f1:4c:38:76:74:ed:90:
ca:42:2c:8c:a6:62:b0:64:83:6a:7b:7d:ad:e1:a9:
48:18:fb:d6:0e:21:37:30:12:99:6c:b0:b2:97:f5:
d3:a7:22:fb:e5:76:14:da:5b:ac:1e:30:28:81:1e:
8b:d3:4d:55:fd:9d:43:f7:ff:47:d4:08:36:8e:42:
a5:93:37:f7:16:87:f7:10:86:a1:11:43:38:96:5c:
3f:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:28:DE:33:FC:1B:36:43:70:AE:23:9E:02:E3:C3:D2:6A:5B:F1:AA
X509v3 Authority Key Identifier:
keyid:0D:C1:B2:85:B6:C7:F2:BF:04:C9:98:DE:89:2B:43:6F:10:D3:4D:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DcGyhbbH8r8EyZjeiStDbxDTTcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/3eada9-d441-476a-baa4-ecaa5ddd1d0f/1/DcGyhbbH8r8EyZjeiStDbxDTTcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/3eada9-d441-476a-baa4-ecaa5ddd1d0f/1/DcGyhbbH8r8EyZjeiStDbxDTTcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:9f:c5:80:3a:a0:b5:64:9a:1a:2a:e3:56:e3:45:08:17:03:
0c:f7:75:69:97:84:dd:17:7d:15:d9:2d:5a:84:18:05:bf:e8:
fc:b1:3f:15:c8:54:5a:4d:29:91:d1:f1:bc:6d:59:c9:0f:19:
26:98:84:f3:02:2d:bf:3e:17:7c:c0:c0:e3:85:ea:1f:bf:13:
61:89:a7:c0:38:2d:94:a1:ce:5f:86:b8:4f:ea:29:61:c8:a0:
de:ed:61:e1:d3:73:e9:5c:e6:6d:b8:18:3c:5b:c3:3b:34:c8:
7d:c2:26:38:10:21:1b:b0:f0:f9:aa:f1:cb:c5:cc:c0:ca:e7:
33:58:4b:2c:22:41:17:1e:bf:29:0d:28:10:b6:70:8d:0b:69:
df:83:ce:dd:34:a8:a0:2b:9f:e3:b7:08:d3:3b:16:cb:6c:f3:
5a:d0:06:0a:fb:69:b0:73:7d:f6:ad:d3:59:32:66:c3:09:ee:
4f:57:ed:61:64:fa:14:16:2c:01:59:e4:97:0f:f8:5f:d2:73:
bc:b6:bc:5c:4c:d9:96:30:47:32:83:ce:05:df:67:a0:e1:35:
1c:1a:bb:52:9b:5c:dd:b7:9e:21:8c:fd:8c:a8:c0:59:b2:60:
d0:d5:46:fe:ec:80:ba:dd:67:c0:e2:b7:c5:c5:8d:b7:16:28:
6d:84:12:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:25:01 2025 by rpki-client