Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/dece63-f0c0-465b-ad82-c8751f954524/1/dlIO_x7h4o493PuJ58tvfYmnfJw.mft
File: dlIO_x7h4o493PuJ58tvfYmnfJw.mft (raw, json)
Hash identifier: K+FMcgmLUOp4UKLYsn3ZGwys/vOboACaX0c2k7Jyw0o=
Subject key identifier: 42:CA:61:DC:96:FA:1D:F3:5F:9E:55:AF:0B:DE:BE:AB:19:DC:A6:90
Authority key identifier: 76:52:0E:FF:1E:E1:E2:8E:3D:DC:FB:89:E7:CB:6F:7D:89:A7:7C:9C
Certificate issuer: /CN=76520eff1ee1e28e3ddcfb89e7cb6f7d89a77c9c
Certificate serial: 019A71EE75A02F28D48C61EFA48C5110EC7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dlIO_x7h4o493PuJ58tvfYmnfJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/dece63-f0c0-465b-ad82-c8751f954524/1/dlIO_x7h4o493PuJ58tvfYmnfJw.mft
Manifest number: 02AB
Signing time: Tue 11 Nov 2025 08:00:44 +0000
Manifest this update: Tue 11 Nov 2025 08:00:44 +0000
Manifest next update: Wed 12 Nov 2025 08:00:44 +0000
Files and hashes: 1: dlIO_x7h4o493PuJ58tvfYmnfJw.crl (hash: LzW2ZbQR2+/jWV3Vqph8vhZ+rb0BSFEVg6ULlSujLpg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/dece63-f0c0-465b-ad82-c8751f954524/1/dlIO_x7h4o493PuJ58tvfYmnfJw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/dece63-f0c0-465b-ad82-c8751f954524/1/dlIO_x7h4o493PuJ58tvfYmnfJw.mft
rsync://rpki.ripe.net/repository/DEFAULT/dlIO_x7h4o493PuJ58tvfYmnfJw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:75:a0:2f:28:d4:8c:61:ef:a4:8c:51:10:ec:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76520eff1ee1e28e3ddcfb89e7cb6f7d89a77c9c
Validity
Not Before: Nov 11 08:00:44 2025 GMT
Not After : Nov 12 08:00:44 2025 GMT
Subject: CN=42ca61dc96fa1df35f9e55af0bdebeab19dca690
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:23:ee:b4:31:ca:a2:6f:0a:f0:ea:5b:09:61:
09:07:4f:56:e9:56:32:f4:77:dc:f0:47:85:68:70:
40:71:cb:04:62:17:ea:a8:cf:43:fd:ac:17:73:40:
3d:9d:94:fc:00:f9:b9:f4:95:9a:cb:ba:5c:e5:4e:
4a:1f:1d:f2:1f:d1:dd:ef:f1:a4:71:f1:19:b7:0f:
8f:b4:7d:43:e8:63:d0:52:65:30:9b:4b:e7:78:58:
94:2d:5e:e0:69:aa:74:1d:e7:64:69:63:cf:43:85:
18:01:6e:5d:3b:12:85:d0:55:2e:19:d1:e5:3f:23:
73:1b:6b:d1:de:92:f1:dd:f8:17:7c:00:42:ec:b5:
2d:45:2b:80:57:5f:e2:35:c1:1e:74:3b:68:68:82:
1c:f4:b3:dd:1a:0d:21:a9:2d:12:87:3c:91:21:50:
a1:0d:2a:15:c7:79:a8:60:e0:db:b6:4c:50:9f:49:
f6:8d:c5:a8:84:fb:a3:0e:a5:47:78:1f:7d:84:0e:
e3:1a:b7:b9:5d:47:00:e9:35:d4:0a:4c:12:96:e6:
b7:ea:06:95:df:ec:08:92:d5:f1:aa:25:28:3d:07:
fe:0b:8b:66:d0:eb:4a:e0:c4:1b:ae:f0:78:bf:bc:
d4:51:0e:fb:77:8f:0f:f3:42:3c:45:43:0b:b2:f3:
57:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:CA:61:DC:96:FA:1D:F3:5F:9E:55:AF:0B:DE:BE:AB:19:DC:A6:90
X509v3 Authority Key Identifier:
keyid:76:52:0E:FF:1E:E1:E2:8E:3D:DC:FB:89:E7:CB:6F:7D:89:A7:7C:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dlIO_x7h4o493PuJ58tvfYmnfJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/dece63-f0c0-465b-ad82-c8751f954524/1/dlIO_x7h4o493PuJ58tvfYmnfJw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/dece63-f0c0-465b-ad82-c8751f954524/1/dlIO_x7h4o493PuJ58tvfYmnfJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:c1:d5:e4:bb:22:fb:20:12:f3:f5:40:5c:b2:93:6a:54:0d:
32:a0:2a:66:a2:90:88:e8:e3:67:b6:c4:51:64:ae:2d:ef:3e:
3b:a5:7d:25:5e:6b:69:c4:99:9d:23:ec:24:16:0b:74:93:d9:
86:d4:7a:e5:bd:34:b9:48:32:3f:d2:4d:0d:c9:fb:3f:45:a4:
a6:13:bb:e6:08:e7:d1:0d:32:2a:49:c8:84:a0:b4:06:1a:bf:
bf:87:82:94:c9:75:b8:d5:fb:3a:82:1d:bb:32:39:17:ee:bb:
31:e6:4f:a6:f3:3f:77:73:42:cd:6a:b1:bb:a1:f6:ce:e9:3f:
fa:57:66:5d:59:b5:6c:f5:22:c8:24:20:44:69:11:e6:17:b7:
85:c5:74:81:ae:91:01:92:1b:c3:ec:13:1d:bd:bc:54:d3:1b:
85:d1:e5:f0:df:0f:ab:58:e5:6d:56:f6:e7:8a:2f:8d:20:19:
61:ea:1d:5a:7c:df:2a:bf:34:37:1b:1a:89:fd:92:ed:a1:3d:
12:64:b0:5f:f2:e9:80:27:5b:e9:ed:94:67:32:c9:51:8d:ea:
09:22:1f:c3:bb:ab:db:b2:7b:54:a3:fc:f9:c6:27:a5:fa:17:
ad:ae:18:7b:1e:3e:1d:b9:48:9f:5e:d0:88:ae:ac:9b:33:b3:
5f:ad:2d:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:47:38 2025 by rpki-client