Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/89fc51-d475-4eee-a970-930700ca617f/1/dC44IKB42kewo3Ti06ZtYmPB4j8.mft
File: dC44IKB42kewo3Ti06ZtYmPB4j8.mft (raw, json)
Hash identifier: gvLQCxWr14fOSNdaW7xIGRymo+6HfvrSk3xVJxzfmbI=
Subject key identifier: 2D:F1:F8:A8:CE:84:DB:92:D1:28:74:78:22:B3:A6:10:86:B0:0E:89
Authority key identifier: 74:2E:38:20:A0:78:DA:47:B0:A3:74:E2:D3:A6:6D:62:63:C1:E2:3F
Certificate issuer: /CN=742e3820a078da47b0a374e2d3a66d6263c1e23f
Certificate serial: 019A71B795C6832060E8B8180D991D03BD41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dC44IKB42kewo3Ti06ZtYmPB4j8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/89fc51-d475-4eee-a970-930700ca617f/1/dC44IKB42kewo3Ti06ZtYmPB4j8.mft
Manifest number: 0FEF
Signing time: Tue 11 Nov 2025 07:00:48 +0000
Manifest this update: Tue 11 Nov 2025 07:00:48 +0000
Manifest next update: Wed 12 Nov 2025 07:00:48 +0000
Files and hashes: 1: dC44IKB42kewo3Ti06ZtYmPB4j8.crl (hash: YF3W2/7mqPIJvTeAWx1GBQ70TlxZDTFrEBFvpnQG/S4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/89fc51-d475-4eee-a970-930700ca617f/1/dC44IKB42kewo3Ti06ZtYmPB4j8.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/89fc51-d475-4eee-a970-930700ca617f/1/dC44IKB42kewo3Ti06ZtYmPB4j8.mft
rsync://rpki.ripe.net/repository/DEFAULT/dC44IKB42kewo3Ti06ZtYmPB4j8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:95:c6:83:20:60:e8:b8:18:0d:99:1d:03:bd:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=742e3820a078da47b0a374e2d3a66d6263c1e23f
Validity
Not Before: Nov 11 07:00:48 2025 GMT
Not After : Nov 12 07:00:48 2025 GMT
Subject: CN=2df1f8a8ce84db92d128747822b3a61086b00e89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:18:1d:96:aa:74:f2:06:62:43:55:eb:a5:9d:
40:71:e4:5a:18:25:a5:0e:d7:d9:1a:57:96:78:fb:
94:97:9a:87:fc:c4:7c:80:a3:bf:36:91:c3:c4:15:
e6:b7:8a:de:4f:5a:03:c6:5f:22:da:68:3d:94:95:
23:d9:7b:dd:81:28:49:00:45:b3:96:70:6f:d7:bd:
72:e4:97:d0:cf:0e:57:58:b9:e4:f0:f5:b8:63:90:
bc:36:09:f2:44:9b:0c:d3:fe:11:03:65:e5:b7:02:
8b:1e:32:6d:99:a9:61:3f:58:01:e8:4f:25:f4:df:
8e:cf:1c:38:69:b4:62:5f:ee:71:90:36:0a:e7:ef:
5a:e7:8b:56:7e:40:f8:4b:7d:17:f9:0e:49:92:69:
94:98:a6:2c:7c:e7:09:8f:bf:dd:82:ba:46:e9:15:
a4:d2:e3:89:28:24:da:dc:f4:e4:98:8d:7d:74:69:
43:79:18:dd:32:33:8d:20:27:5f:c3:de:86:ca:8f:
54:54:aa:ed:c2:93:8a:0d:4b:c7:07:a2:44:d3:4a:
2a:ee:88:35:1b:eb:a2:ad:dc:4b:b1:ad:ef:ae:e8:
d6:65:16:6a:fb:cd:ca:4d:1b:8e:89:60:70:6d:ca:
57:28:88:e5:8d:9c:ad:14:ae:d7:62:8f:03:3b:51:
45:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:F1:F8:A8:CE:84:DB:92:D1:28:74:78:22:B3:A6:10:86:B0:0E:89
X509v3 Authority Key Identifier:
keyid:74:2E:38:20:A0:78:DA:47:B0:A3:74:E2:D3:A6:6D:62:63:C1:E2:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dC44IKB42kewo3Ti06ZtYmPB4j8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/89fc51-d475-4eee-a970-930700ca617f/1/dC44IKB42kewo3Ti06ZtYmPB4j8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/89fc51-d475-4eee-a970-930700ca617f/1/dC44IKB42kewo3Ti06ZtYmPB4j8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:b6:28:5d:94:2c:c8:0f:e2:56:b6:31:29:de:d5:1e:15:ac:
e3:fc:5a:a6:2f:c4:ae:c1:49:0a:57:ad:2b:e7:9f:c4:59:25:
34:7e:2e:d7:5b:81:b9:3b:14:da:8f:43:01:e4:74:2f:c6:d0:
72:91:f0:fa:cb:1b:3e:88:cf:3b:41:c8:7c:3b:29:8e:77:93:
1a:e6:f2:cb:90:5a:cf:e5:e5:f1:6b:9b:2b:3a:ef:27:67:2f:
0c:0a:17:50:2a:4c:e2:dd:41:d7:4a:c3:c2:9b:55:6e:7c:26:
b7:ac:8e:3b:ca:3d:89:60:c9:0d:45:a0:bc:da:6b:29:07:5f:
dc:1d:fd:e1:77:3e:dd:4e:53:61:e7:3b:1e:53:a2:c1:8a:bf:
00:6f:42:5e:d2:ff:5a:c2:f6:ee:84:47:ad:a0:8c:9f:ad:e8:
16:52:05:7b:37:7c:a0:44:5d:4a:4a:d4:88:9b:26:d2:a6:3e:
7f:0d:d4:aa:44:a2:0f:30:ff:7c:10:46:cb:25:10:8d:49:16:
bc:fa:0a:a9:6c:13:c3:fa:60:7d:a3:7c:ae:74:78:02:c0:29:
cc:7e:95:d8:33:c0:be:02:bf:a5:a5:0a:e7:8b:d4:b6:a7:c5:
f6:be:8a:89:9f:01:b0:4f:c0:06:66:52:c8:58:50:b3:9e:d3:
84:63:58:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:47:37 2025 by rpki-client