Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/9d881b-0376-4aa8-8835-fc26b6637a90/1/dAfptxiBm4G8Wv1JF6o-s5zN3ZI.mft
File: dAfptxiBm4G8Wv1JF6o-s5zN3ZI.mft (raw, json)
Hash identifier: sQ7uWY3zLuxS2v/okEAt000ajEpnQ9R59KEioFaoUQM=
Subject key identifier: 2A:2A:44:A9:5E:D9:81:C2:56:F1:8C:99:60:8A:E5:00:D8:60:A1:A9
Authority key identifier: 74:07:E9:B7:18:81:9B:81:BC:5A:FD:49:17:AA:3E:B3:9C:CD:DD:92
Certificate issuer: /CN=7407e9b718819b81bc5afd4917aa3eb39ccddd92
Certificate serial: 019A70A5540DB404AFB14664485C2088E0C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dAfptxiBm4G8Wv1JF6o-s5zN3ZI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/9d881b-0376-4aa8-8835-fc26b6637a90/1/dAfptxiBm4G8Wv1JF6o-s5zN3ZI.mft
Manifest number: 03
Signing time: Tue 11 Nov 2025 02:01:14 +0000
Manifest this update: Tue 11 Nov 2025 02:01:14 +0000
Manifest next update: Wed 12 Nov 2025 02:01:14 +0000
Files and hashes: 1: dAfptxiBm4G8Wv1JF6o-s5zN3ZI.crl (hash: a7z518SC4mW3TXl9suVewu0w6BvZSiNiHIp6yfEjEbQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/9d881b-0376-4aa8-8835-fc26b6637a90/1/dAfptxiBm4G8Wv1JF6o-s5zN3ZI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/9d881b-0376-4aa8-8835-fc26b6637a90/1/dAfptxiBm4G8Wv1JF6o-s5zN3ZI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dAfptxiBm4G8Wv1JF6o-s5zN3ZI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a5:54:0d:b4:04:af:b1:46:64:48:5c:20:88:e0:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7407e9b718819b81bc5afd4917aa3eb39ccddd92
Validity
Not Before: Nov 11 02:01:14 2025 GMT
Not After : Nov 12 02:01:14 2025 GMT
Subject: CN=2a2a44a95ed981c256f18c99608ae500d860a1a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:be:12:43:09:b4:1d:fb:39:80:e0:32:39:9d:
bb:24:03:c3:65:2d:31:8e:02:3d:2a:7d:6c:43:a7:
91:a6:9b:ad:95:68:10:17:a3:35:02:25:75:86:3c:
c3:f1:df:6a:d7:f9:47:c1:20:92:68:03:3a:36:2e:
56:4a:64:12:f7:f8:42:a4:7a:0b:0e:19:38:1c:8e:
98:be:42:fc:df:b0:12:da:99:f6:24:22:9f:af:75:
94:70:e0:f2:07:e8:33:95:5e:30:eb:4c:e4:4e:a5:
38:c3:da:e4:1a:7d:04:12:2c:96:56:51:ea:46:f2:
9b:a8:48:f6:9e:29:dc:d4:1d:b3:62:86:78:a3:2f:
09:bc:ef:56:ab:01:de:00:88:c7:57:94:5b:80:3a:
68:82:47:38:c2:02:a5:e0:af:55:78:bc:be:26:ac:
de:8a:6b:70:77:37:3f:55:fc:94:04:fc:3d:67:31:
0c:42:7c:36:33:39:ef:3e:c3:3a:e0:16:8b:44:86:
99:b6:72:cf:8f:b9:11:ef:42:b9:dd:16:f8:a0:e6:
53:ae:70:b8:7d:da:d2:60:bb:2b:f8:af:fe:0a:7c:
ce:57:ce:0d:6c:47:98:63:51:16:90:d5:cc:4a:72:
20:35:ee:c3:15:82:08:5b:30:7c:81:93:96:a5:a0:
ea:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:2A:44:A9:5E:D9:81:C2:56:F1:8C:99:60:8A:E5:00:D8:60:A1:A9
X509v3 Authority Key Identifier:
keyid:74:07:E9:B7:18:81:9B:81:BC:5A:FD:49:17:AA:3E:B3:9C:CD:DD:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dAfptxiBm4G8Wv1JF6o-s5zN3ZI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/9d881b-0376-4aa8-8835-fc26b6637a90/1/dAfptxiBm4G8Wv1JF6o-s5zN3ZI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/9d881b-0376-4aa8-8835-fc26b6637a90/1/dAfptxiBm4G8Wv1JF6o-s5zN3ZI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:4d:32:a5:67:68:3c:25:98:0a:a2:ba:fc:71:4b:75:ce:1a:
ac:d8:46:56:f6:58:e8:80:95:05:d7:85:d2:03:26:f1:f2:f4:
dd:a7:7f:89:e7:c1:9c:dd:a7:e6:74:4e:a7:f2:2d:f2:eb:6d:
c6:e5:d8:02:41:ff:c9:c3:99:76:ee:a9:36:a9:f8:79:99:b0:
d4:0b:13:4e:09:e4:18:43:38:d9:38:59:81:74:79:08:ce:9e:
d3:b9:65:fe:8c:0c:5c:4d:e6:b2:6c:c6:5c:2d:cd:db:ee:1e:
1b:4b:90:e7:21:b8:c6:e0:14:0d:fe:53:20:d6:f6:0b:3f:85:
cc:bf:88:84:71:df:da:19:e1:62:1e:24:d7:db:7f:f7:a3:8d:
36:0b:a4:ef:22:9a:32:ab:cf:35:36:2a:7a:9b:3a:0d:54:88:
5a:ef:fa:aa:b4:0c:74:6e:6d:41:6b:b3:72:8e:4b:23:84:63:
b2:a6:cf:bd:21:e6:30:06:3d:14:94:2b:32:ad:1b:ec:8b:31:
7a:60:ce:53:cc:93:4c:eb:7a:ee:84:e5:14:99:7d:7b:b0:2d:
49:23:95:f9:4b:f7:1a:35:ff:c8:48:a5:a7:fc:28:63:d4:c7:
d9:05:c1:73:30:6d:fb:62:70:66:63:f9:1a:e7:a8:51:31:e6:
09:b4:2c:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:24:56 2025 by rpki-client