Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/2e03af-83a4-4c9f-911a-d5844b3c5177/1/dC5XHQAG_n9mCwMIzMYaFpnjSRc.mft
File: dC5XHQAG_n9mCwMIzMYaFpnjSRc.mft (raw, json)
Hash identifier: epSxIqzQ4wx+kXRWiBfKGM62yA1IBbkcMdTUzsCVMJc=
Subject key identifier: F4:F6:E6:DC:50:DC:79:0A:25:24:94:28:6A:EA:96:72:8A:D4:1D:10
Authority key identifier: 74:2E:57:1D:00:06:FE:7F:66:0B:03:08:CC:C6:1A:16:99:E3:49:17
Certificate issuer: /CN=742e571d0006fe7f660b0308ccc61a1699e34917
Certificate serial: 019A71B7EAF45551284DFB2806CEA955410C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dC5XHQAG_n9mCwMIzMYaFpnjSRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/2e03af-83a4-4c9f-911a-d5844b3c5177/1/dC5XHQAG_n9mCwMIzMYaFpnjSRc.mft
Manifest number: 171C
Signing time: Tue 11 Nov 2025 07:01:09 +0000
Manifest this update: Tue 11 Nov 2025 07:01:09 +0000
Manifest next update: Wed 12 Nov 2025 07:01:09 +0000
Files and hashes: 1: dC5XHQAG_n9mCwMIzMYaFpnjSRc.crl (hash: TPMoSe6YFg8wUquW1dpvIC2qfxBfJoF+b7cWUJzhN0Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/2e03af-83a4-4c9f-911a-d5844b3c5177/1/dC5XHQAG_n9mCwMIzMYaFpnjSRc.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/2e03af-83a4-4c9f-911a-d5844b3c5177/1/dC5XHQAG_n9mCwMIzMYaFpnjSRc.mft
rsync://rpki.ripe.net/repository/DEFAULT/dC5XHQAG_n9mCwMIzMYaFpnjSRc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:ea:f4:55:51:28:4d:fb:28:06:ce:a9:55:41:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=742e571d0006fe7f660b0308ccc61a1699e34917
Validity
Not Before: Nov 11 07:01:09 2025 GMT
Not After : Nov 12 07:01:09 2025 GMT
Subject: CN=f4f6e6dc50dc790a252494286aea96728ad41d10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:9c:0d:27:c2:50:d8:d0:e2:93:6c:02:53:2e:
6d:87:14:5c:42:1d:a0:4b:7a:6b:e8:3e:0c:e2:8f:
1a:72:6b:73:c9:48:3d:b4:5a:a3:35:ee:d2:04:45:
c9:0f:61:fb:4a:34:62:35:f4:a2:8a:eb:6a:ef:26:
35:45:94:60:22:3c:07:85:aa:e3:f9:02:11:85:67:
73:60:5c:c2:d7:ff:f9:26:65:e6:f1:26:a3:0e:f2:
d1:a2:db:74:72:0d:b0:a6:f9:81:80:95:57:2e:fd:
73:9d:ad:67:b4:57:21:f1:6f:2c:a9:cc:b7:53:38:
42:06:af:4d:62:b8:0b:0b:c0:1f:29:91:23:c5:48:
6e:9e:2f:ef:bd:92:a5:79:ae:11:84:ab:72:21:ed:
f7:dc:fd:96:c2:21:c0:c1:d5:70:16:22:27:3c:16:
df:d2:57:79:6e:dc:cd:88:97:17:c4:99:96:26:c4:
eb:29:d3:0c:27:08:23:bb:a1:26:a2:21:89:4b:7b:
ab:07:a8:67:3e:f0:53:0e:ed:4e:11:73:a7:c9:8d:
6b:60:f4:20:64:1f:83:d9:c1:22:cb:9a:fe:60:f2:
80:6d:eb:a1:c0:8a:8e:7f:6d:d4:f9:db:a3:f5:75:
57:46:6e:e3:d5:25:4c:d4:c9:2b:f7:55:1b:cb:5d:
c9:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:F6:E6:DC:50:DC:79:0A:25:24:94:28:6A:EA:96:72:8A:D4:1D:10
X509v3 Authority Key Identifier:
keyid:74:2E:57:1D:00:06:FE:7F:66:0B:03:08:CC:C6:1A:16:99:E3:49:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dC5XHQAG_n9mCwMIzMYaFpnjSRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/2e03af-83a4-4c9f-911a-d5844b3c5177/1/dC5XHQAG_n9mCwMIzMYaFpnjSRc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/2e03af-83a4-4c9f-911a-d5844b3c5177/1/dC5XHQAG_n9mCwMIzMYaFpnjSRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:61:31:47:b8:70:54:6a:0d:03:8e:ed:0a:29:df:57:07:6d:
ed:ff:ca:a4:93:f2:34:31:b1:75:e9:84:4a:c2:ec:91:3e:21:
e1:29:da:4f:ae:38:b8:b9:c7:d5:d8:a4:f9:82:46:bf:ef:ba:
20:66:60:85:c7:ae:a2:84:02:08:ab:91:50:f2:56:e9:21:dd:
f2:15:87:f0:f3:56:95:bc:69:cf:6d:2b:cc:58:54:fb:5d:ea:
00:b8:67:78:a5:2b:29:3c:f9:2f:8a:50:c2:d6:ac:3e:2a:23:
b3:35:5f:18:2f:60:36:bb:4d:a9:3c:2a:f6:da:77:c1:ab:7b:
2e:e2:62:47:54:63:2d:f2:7a:8d:d4:b0:95:7a:a3:f8:27:0e:
43:77:04:71:76:64:26:8e:9c:24:f4:c3:78:d3:0e:8e:d3:f6:
35:ca:b5:a5:e7:43:75:a7:39:91:3e:36:1f:24:88:24:18:20:
1a:24:01:05:7e:b5:76:d9:51:fe:aa:6f:64:8a:ab:3c:47:e2:
5e:05:28:0b:20:bd:56:d8:45:22:f5:81:3a:db:4b:d7:93:83:
64:a9:10:80:70:75:13:c4:6a:d1:c2:08:a6:47:d8:a7:c9:b4:
61:ed:f4:0b:58:a3:66:62:d5:cf:79:3e:f0:94:6d:90:75:55:
27:68:e0:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:20:18 2025 by rpki-client