Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/043b18-9be6-47b3-b778-bf836c5b9907/1/dTjEeQ1t2TuTDlzdIPUD4gKR97Q.mft
File: dTjEeQ1t2TuTDlzdIPUD4gKR97Q.mft (raw, json)
Hash identifier: J/o5Frn0+ZQ5luu4cjX9etQrmgvoh6SXJuUurQvVHLc=
Subject key identifier: ED:C4:07:A4:C5:E5:7F:DC:D8:FB:1B:7D:BF:77:0D:2F:4E:78:03:AA
Authority key identifier: 75:38:C4:79:0D:6D:D9:3B:93:0E:5C:DD:20:F5:03:E2:02:91:F7:B4
Certificate issuer: /CN=7538c4790d6dd93b930e5cdd20f503e20291f7b4
Certificate serial: 019A718093768D6DA56A88EB74624DAB65D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dTjEeQ1t2TuTDlzdIPUD4gKR97Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/043b18-9be6-47b3-b778-bf836c5b9907/1/dTjEeQ1t2TuTDlzdIPUD4gKR97Q.mft
Manifest number: C9
Signing time: Tue 11 Nov 2025 06:00:43 +0000
Manifest this update: Tue 11 Nov 2025 06:00:43 +0000
Manifest next update: Wed 12 Nov 2025 06:00:43 +0000
Files and hashes: 1: dTjEeQ1t2TuTDlzdIPUD4gKR97Q.crl (hash: uWs+SKxqLT1929FKOMMjeq2JacbVkRzkmYoTW67Ain0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/043b18-9be6-47b3-b778-bf836c5b9907/1/dTjEeQ1t2TuTDlzdIPUD4gKR97Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/043b18-9be6-47b3-b778-bf836c5b9907/1/dTjEeQ1t2TuTDlzdIPUD4gKR97Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/dTjEeQ1t2TuTDlzdIPUD4gKR97Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 06:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:80:93:76:8d:6d:a5:6a:88:eb:74:62:4d:ab:65:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7538c4790d6dd93b930e5cdd20f503e20291f7b4
Validity
Not Before: Nov 11 06:00:43 2025 GMT
Not After : Nov 12 06:00:43 2025 GMT
Subject: CN=edc407a4c5e57fdcd8fb1b7dbf770d2f4e7803aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:aa:75:ff:9f:e8:df:24:14:30:12:c4:1f:d9:
b1:3c:cc:44:9c:12:59:a7:56:d3:1a:3a:49:c1:1d:
d1:5d:cb:ae:f3:f0:0c:6f:27:cf:5e:05:e7:1a:88:
04:0a:ab:c6:93:fd:e8:67:fc:85:f9:03:0f:99:2f:
13:4e:b6:7a:fc:d1:eb:8e:10:48:82:de:f3:7d:94:
38:82:ec:5f:51:28:77:b9:94:10:e2:1e:18:af:13:
ea:40:2f:b6:72:17:58:5e:35:80:ed:55:1b:c9:a1:
9d:28:0a:91:ff:47:f9:2a:76:15:11:cf:17:29:83:
08:b0:68:e3:03:f9:e7:a0:a2:c2:3a:33:d1:c8:ff:
ee:24:8c:75:80:01:29:89:53:ab:85:91:59:f5:75:
e4:b2:ad:f1:b7:ed:40:0c:da:97:8a:ad:ac:4a:b4:
59:a7:92:f8:7f:53:db:6b:9c:c7:c0:3d:e4:84:2e:
77:80:d6:0f:e9:49:50:9d:48:7a:80:e2:42:1d:bf:
1d:ec:6f:77:60:78:8d:f5:34:cc:e5:59:e0:8e:b0:
fb:a4:cd:f8:02:e9:e5:f7:5c:0e:11:7c:79:3e:81:
ef:35:45:a0:a4:97:e3:e6:ab:50:98:8b:93:3d:18:
56:ca:d7:86:4e:ce:e5:80:ef:8a:22:cb:0c:2b:02:
1c:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:C4:07:A4:C5:E5:7F:DC:D8:FB:1B:7D:BF:77:0D:2F:4E:78:03:AA
X509v3 Authority Key Identifier:
keyid:75:38:C4:79:0D:6D:D9:3B:93:0E:5C:DD:20:F5:03:E2:02:91:F7:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dTjEeQ1t2TuTDlzdIPUD4gKR97Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/043b18-9be6-47b3-b778-bf836c5b9907/1/dTjEeQ1t2TuTDlzdIPUD4gKR97Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/043b18-9be6-47b3-b778-bf836c5b9907/1/dTjEeQ1t2TuTDlzdIPUD4gKR97Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:02:0b:e3:db:76:c9:46:fb:13:bb:1c:93:d4:ec:6f:bf:97:
a7:e9:92:39:b6:90:84:f1:41:24:66:65:eb:21:7e:4f:11:d8:
44:fe:60:b3:17:f5:e7:4a:3b:f0:ae:32:54:dc:45:d1:dd:bc:
61:70:e0:2e:26:b4:c4:19:be:12:7b:ea:7a:9c:b4:6e:39:29:
23:11:81:3a:21:00:d2:ba:1b:b8:57:20:4d:6e:97:b5:d1:e6:
2d:3a:6c:dd:57:fa:b9:ea:40:bb:c4:3a:b5:fa:45:30:ea:bb:
35:28:91:11:aa:78:73:ed:03:30:74:76:7e:8d:b7:40:0e:7f:
94:c9:0c:c9:18:4f:26:21:36:32:05:e2:ec:23:64:67:62:3c:
da:d6:22:68:fe:55:fb:36:3d:48:b3:22:fd:64:2e:63:41:03:
b3:aa:d3:12:c7:a6:f7:bc:6f:ed:49:aa:81:db:1f:df:77:22:
62:d1:3a:2c:25:d8:c1:da:10:bd:51:22:60:0a:15:c6:84:dc:
7e:89:51:97:70:ec:1f:cc:7b:70:9d:95:d3:d3:82:ec:11:6d:
58:89:7e:55:0f:e2:c4:d8:0d:23:b9:3a:7d:33:2e:18:1c:fa:
12:a6:b9:2a:ce:15:4d:7f:0d:a5:70:20:f1:13:33:eb:b3:33:
14:93:72:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:49:40 2025 by rpki-client