Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/be3593-7972-4da3-ae16-293ec6322966/1/DOf4uSjz9S4LuXZD007OWeuWNKM.mft
File: DOf4uSjz9S4LuXZD007OWeuWNKM.mft (raw, json)
Hash identifier: i5PPVOn1C15NYxP3S9CHKaeIW67clTv0gZNoRNt7cZg=
Subject key identifier: E3:C9:AB:C3:7F:56:B3:89:64:74:7A:87:25:9F:BA:A7:84:DA:F7:08
Authority key identifier: 0C:E7:F8:B9:28:F3:F5:2E:0B:B9:76:43:D3:4E:CE:59:EB:96:34:A3
Certificate issuer: /CN=0ce7f8b928f3f52e0bb97643d34ece59eb9634a3
Certificate serial: 0199FBEB9530D47B691CF84876D117F7AD42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOf4uSjz9S4LuXZD007OWeuWNKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/be3593-7972-4da3-ae16-293ec6322966/1/DOf4uSjz9S4LuXZD007OWeuWNKM.mft
Manifest number: 76
Signing time: Sun 19 Oct 2025 10:02:24 +0000
Manifest this update: Sun 19 Oct 2025 10:02:24 +0000
Manifest next update: Mon 20 Oct 2025 10:02:24 +0000
Files and hashes: 1: DOf4uSjz9S4LuXZD007OWeuWNKM.crl (hash: 8qcBHgV5yRmRJ9DIce+t196nlog0W9pRTdwHFe4hiAM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/be3593-7972-4da3-ae16-293ec6322966/1/DOf4uSjz9S4LuXZD007OWeuWNKM.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/be3593-7972-4da3-ae16-293ec6322966/1/DOf4uSjz9S4LuXZD007OWeuWNKM.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOf4uSjz9S4LuXZD007OWeuWNKM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:95:30:d4:7b:69:1c:f8:48:76:d1:17:f7:ad:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce7f8b928f3f52e0bb97643d34ece59eb9634a3
Validity
Not Before: Oct 19 10:02:24 2025 GMT
Not After : Oct 20 10:02:24 2025 GMT
Subject: CN=e3c9abc37f56b38964747a87259fbaa784daf708
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fe:44:e6:bd:99:f5:d3:6f:7f:61:2b:be:2a:16:
3d:35:db:2a:51:e0:eb:a0:ae:ef:29:d7:1d:c2:fd:
a3:d9:4a:25:24:72:4d:ad:96:34:b7:68:d4:86:0b:
64:f5:84:19:6c:a9:4c:2f:0d:ea:f6:72:03:2e:98:
3b:6c:f7:00:14:86:55:36:1f:79:bb:1b:90:6f:72:
13:a1:4a:0f:ce:02:d9:69:62:a8:54:d8:0d:8f:8b:
4d:e5:45:db:69:ba:14:e5:45:36:ff:b4:de:71:a3:
b9:6f:7a:64:c6:c3:c1:f3:18:92:a2:6c:b8:db:33:
8a:5a:d4:ad:d5:3d:fe:c1:86:46:10:79:3a:6a:c8:
66:67:ba:90:9f:2b:37:c2:7e:8c:1e:f5:da:e1:06:
b6:f5:b3:c7:6f:5c:47:f9:9d:71:6a:22:19:2c:f4:
20:f9:c9:4b:df:1e:e6:bc:c2:44:e0:e4:9c:6d:94:
de:dc:0f:e9:da:e9:0c:61:0b:36:ec:4a:ac:d3:18:
f4:0f:1a:99:73:5b:d6:00:65:91:f7:f8:28:f3:f6:
19:83:39:cb:e2:5d:56:61:f7:4b:a2:2e:be:e8:99:
bf:e5:f0:0c:c9:4d:dc:6e:c5:64:90:cb:b6:1d:b3:
d9:eb:c1:49:3c:fd:1d:28:74:46:c9:19:96:86:11:
ee:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:C9:AB:C3:7F:56:B3:89:64:74:7A:87:25:9F:BA:A7:84:DA:F7:08
X509v3 Authority Key Identifier:
keyid:0C:E7:F8:B9:28:F3:F5:2E:0B:B9:76:43:D3:4E:CE:59:EB:96:34:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOf4uSjz9S4LuXZD007OWeuWNKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/be3593-7972-4da3-ae16-293ec6322966/1/DOf4uSjz9S4LuXZD007OWeuWNKM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/be3593-7972-4da3-ae16-293ec6322966/1/DOf4uSjz9S4LuXZD007OWeuWNKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:68:38:c5:d3:92:78:c8:11:d5:5c:0a:25:68:ae:d9:8c:78:
07:41:12:94:66:05:c4:0c:2a:90:90:de:26:aa:28:4c:f7:cd:
f5:a9:72:9e:7e:bd:82:ef:e9:c4:60:31:a0:0d:cb:32:81:7b:
4d:d8:09:06:fe:8e:28:03:f5:30:0f:88:20:d3:61:a4:ff:b6:
de:79:65:e6:82:ea:bd:e3:20:ec:5f:be:d4:fa:23:57:c9:9e:
ac:12:f8:f8:eb:e4:75:cc:3e:9f:3e:cd:b0:36:36:91:e8:55:
9f:f8:5e:9a:7a:a9:6f:8b:29:49:e9:06:f2:1b:e4:16:18:00:
e6:44:2f:4c:a0:d2:26:88:79:32:02:67:f3:da:a0:a1:3e:b5:
de:71:37:65:c3:a2:1b:c2:5e:38:50:13:5e:c9:e2:15:53:be:
36:83:46:13:7a:e4:44:cc:6e:51:a8:b3:6d:5c:bf:82:9b:2a:
2b:37:f3:8c:5a:af:f0:eb:bd:d1:ec:c9:bd:ce:9d:76:6d:d3:
c5:dd:94:69:3f:f8:1d:4f:ee:cd:c1:58:b9:40:43:b9:f4:96:
a1:33:60:a0:aa:a6:b5:3c:28:71:7e:f3:98:98:ea:a0:2a:5c:
98:f6:67:46:6c:a3:c4:e3:a7:a4:8b:eb:d3:ab:23:f9:19:ef:
54:53:a2:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:03:55 2025 by rpki-client