Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/8978cb-1a27-4f24-b552-336293734507/1/dPZ1oWeYFnk9WzCtLyU_VsjiRFw.mft
File: dPZ1oWeYFnk9WzCtLyU_VsjiRFw.mft (raw, json)
Hash identifier: Lxil4UhHx70p8Zafh8n7zWxXkVNdgmJEphK8GJfuCzc=
Subject key identifier: 56:DE:0F:76:89:EE:AD:96:4A:8F:8B:54:79:B9:D4:21:23:F7:68:F0
Authority key identifier: 74:F6:75:A1:67:98:16:79:3D:5B:30:AD:2F:25:3F:56:C8:E2:44:5C
Certificate issuer: /CN=74f675a1679816793d5b30ad2f253f56c8e2445c
Certificate serial: 019A7301AC1567D006078F05BDB58D1512E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dPZ1oWeYFnk9WzCtLyU_VsjiRFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/8978cb-1a27-4f24-b552-336293734507/1/dPZ1oWeYFnk9WzCtLyU_VsjiRFw.mft
Manifest number: 171B
Signing time: Tue 11 Nov 2025 13:01:20 +0000
Manifest this update: Tue 11 Nov 2025 13:01:20 +0000
Manifest next update: Wed 12 Nov 2025 13:01:20 +0000
Files and hashes: 1: dPZ1oWeYFnk9WzCtLyU_VsjiRFw.crl (hash: Y6DMe7eRQGV+5ekpFbUlS+TUD1vbqFflHlpC4xQyqtw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/8978cb-1a27-4f24-b552-336293734507/1/dPZ1oWeYFnk9WzCtLyU_VsjiRFw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/8978cb-1a27-4f24-b552-336293734507/1/dPZ1oWeYFnk9WzCtLyU_VsjiRFw.mft
rsync://rpki.ripe.net/repository/DEFAULT/dPZ1oWeYFnk9WzCtLyU_VsjiRFw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:ac:15:67:d0:06:07:8f:05:bd:b5:8d:15:12:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74f675a1679816793d5b30ad2f253f56c8e2445c
Validity
Not Before: Nov 11 13:01:20 2025 GMT
Not After : Nov 12 13:01:20 2025 GMT
Subject: CN=56de0f7689eead964a8f8b5479b9d42123f768f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:fd:39:cb:a0:f5:29:a3:7a:61:37:f3:29:b8:
71:65:2e:40:91:27:b1:97:ea:9a:97:e2:21:3f:5a:
96:62:62:37:a5:01:b9:35:00:30:0a:c4:07:15:96:
05:62:fd:b3:57:af:a4:66:6a:d8:61:5a:54:b7:39:
70:c9:20:f1:28:32:39:9e:40:8c:7f:d7:bb:e1:88:
20:2c:0e:7d:03:01:84:7a:6b:7e:57:09:d7:98:f3:
27:99:21:80:e4:2c:b0:be:17:50:8c:19:23:7a:eb:
77:31:a9:40:7f:de:9d:20:b3:91:7d:bd:94:6a:7a:
8b:a0:cf:da:a4:91:0c:fb:95:bd:26:ca:e8:6f:a8:
0e:9f:f1:f9:70:ce:8c:fd:19:b5:be:7d:56:a3:46:
25:6e:af:56:6f:56:32:db:65:cd:d3:12:11:b4:ea:
f3:6e:85:89:3c:d9:4f:d1:96:eb:d3:7e:bf:eb:f3:
1a:8e:62:4f:fd:ef:57:f2:ed:c7:b9:8c:d8:63:d7:
2b:64:2c:c9:d8:e4:ff:17:33:a7:f7:e3:2b:fa:cd:
cd:78:ad:3d:63:9c:a0:5d:4d:dc:bb:6c:07:60:a2:
55:d7:83:ce:6a:d0:f6:13:5d:95:a8:d7:61:4a:1d:
12:71:17:44:15:ec:4c:00:a0:4e:e6:a8:cb:9b:f5:
1e:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:DE:0F:76:89:EE:AD:96:4A:8F:8B:54:79:B9:D4:21:23:F7:68:F0
X509v3 Authority Key Identifier:
keyid:74:F6:75:A1:67:98:16:79:3D:5B:30:AD:2F:25:3F:56:C8:E2:44:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dPZ1oWeYFnk9WzCtLyU_VsjiRFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8978cb-1a27-4f24-b552-336293734507/1/dPZ1oWeYFnk9WzCtLyU_VsjiRFw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8978cb-1a27-4f24-b552-336293734507/1/dPZ1oWeYFnk9WzCtLyU_VsjiRFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:61:38:3d:85:d8:64:f5:4f:38:1e:28:8d:d6:c8:3e:f5:ab:
45:ae:7d:85:db:ae:68:5a:13:38:9f:d5:cb:f5:db:48:67:16:
3c:cd:de:64:84:fd:53:72:f7:db:86:3a:9f:cc:b2:63:44:23:
a7:10:c5:91:a3:f9:2c:7e:9d:a0:ed:a4:d0:4e:da:65:b2:c9:
c0:2f:14:1e:26:ca:d0:dd:ee:ea:af:bb:eb:d9:cc:09:f4:fe:
81:22:df:0f:89:69:dc:15:da:00:35:3c:03:37:4d:e8:55:de:
8b:3d:df:80:c3:66:6c:e3:36:aa:68:9e:dd:5e:16:58:be:b7:
fe:12:d8:cd:16:05:39:04:70:79:09:cc:ab:8b:64:33:f4:25:
5c:c2:e3:87:b9:cd:b6:95:29:33:20:68:8d:e8:4b:2c:df:15:
de:66:a4:00:6c:b9:1b:24:4b:c9:20:b0:84:71:a2:5b:49:ec:
53:ae:36:d0:76:17:54:ba:72:08:ef:ec:b7:6f:5b:e5:e4:20:
61:c9:e5:b2:e9:97:93:d7:93:a5:89:77:8f:ee:7e:e8:a5:de:
62:67:81:9b:6d:61:da:b7:ef:c0:20:f2:fa:2f:ea:69:2e:6e:
eb:5e:75:8b:3d:0d:1b:a3:e4:f5:1b:be:01:99:32:13:d8:b2:
f5:e8:52:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:14:05 2025 by rpki-client