Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/e16001-6525-404b-9b49-a57b1b392205/1/Dc2l0GC6k2a7QyWCi1cDO-8Y48A.mft
File: Dc2l0GC6k2a7QyWCi1cDO-8Y48A.mft (raw, json)
Hash identifier: BxjvYdYEblQBW6RQYNTVBQz2RcwwPcONHyvcJ2qGDA0=
Subject key identifier: 75:0B:F8:9B:22:98:D8:F8:3B:E7:36:37:26:6F:39:88:F3:EC:AB:C8
Authority key identifier: 0D:CD:A5:D0:60:BA:93:66:BB:43:25:82:8B:57:03:3B:EF:18:E3:C0
Certificate issuer: /CN=0dcda5d060ba9366bb4325828b57033bef18e3c0
Certificate serial: 0199FD6B2D9539DC7A0EC0F619FC63A68206
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dc2l0GC6k2a7QyWCi1cDO-8Y48A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/e16001-6525-404b-9b49-a57b1b392205/1/Dc2l0GC6k2a7QyWCi1cDO-8Y48A.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 17:01:23 +0000
Manifest this update: Sun 19 Oct 2025 17:01:23 +0000
Manifest next update: Mon 20 Oct 2025 17:01:23 +0000
Files and hashes: 1: Dc2l0GC6k2a7QyWCi1cDO-8Y48A.crl (hash: kYJb35Ou0FLS8ulgbkeicQOiDbckHHVeF3DvhqloKBY=)
2: TjtgoaArWXIQWELqrqb3xw0fhW8.roa (hash: U//dwICV6ljEsBioxVlDi+LuHGPP1lPYVY8ZQAvZ64M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/e16001-6525-404b-9b49-a57b1b392205/1/Dc2l0GC6k2a7QyWCi1cDO-8Y48A.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/e16001-6525-404b-9b49-a57b1b392205/1/Dc2l0GC6k2a7QyWCi1cDO-8Y48A.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dc2l0GC6k2a7QyWCi1cDO-8Y48A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 17:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6b:2d:95:39:dc:7a:0e:c0:f6:19:fc:63:a6:82:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dcda5d060ba9366bb4325828b57033bef18e3c0
Validity
Not Before: Oct 19 17:01:23 2025 GMT
Not After : Oct 20 17:01:23 2025 GMT
Subject: CN=750bf89b2298d8f83be73637266f3988f3ecabc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:be:e0:d3:af:64:8f:23:5b:9f:be:3a:2f:96:
bc:6b:2e:ad:b1:ad:66:09:2f:36:ec:ee:4c:cd:4a:
91:38:43:e7:4a:ff:71:f7:f7:4e:29:01:14:e2:fc:
7a:a3:ea:8e:cb:56:8c:a9:18:48:80:6a:1a:e6:3b:
c0:68:99:d6:a5:85:5b:f4:df:3a:be:18:b2:84:14:
43:45:19:55:4d:f3:c7:12:54:ab:11:ad:f1:ca:14:
08:e8:05:40:69:54:29:44:38:06:49:f5:63:f5:83:
37:3e:3d:ce:34:ac:ef:80:33:47:d5:5d:1e:5b:a2:
0a:9f:ef:aa:01:93:94:83:19:2a:27:40:0f:33:16:
d8:b1:a6:09:aa:3b:57:02:f1:28:d0:61:3c:75:56:
00:35:7c:8b:d9:c7:93:ed:d5:eb:72:74:a7:7e:19:
f2:3f:b5:e1:35:78:ee:0b:c8:b3:52:2b:f9:7c:e7:
a3:88:53:e4:6b:2a:ea:03:13:b2:56:5a:aa:f9:d3:
0e:b3:d2:65:fa:d0:22:ce:af:97:11:74:95:53:15:
f6:bd:73:36:d0:04:f3:2f:4b:73:57:46:81:f1:7d:
44:73:e6:fd:e0:24:df:b9:79:eb:7f:35:bf:ae:2c:
82:0c:32:2c:9b:a2:7c:cd:35:e8:8a:99:c3:e2:c4:
60:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:0B:F8:9B:22:98:D8:F8:3B:E7:36:37:26:6F:39:88:F3:EC:AB:C8
X509v3 Authority Key Identifier:
keyid:0D:CD:A5:D0:60:BA:93:66:BB:43:25:82:8B:57:03:3B:EF:18:E3:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dc2l0GC6k2a7QyWCi1cDO-8Y48A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/e16001-6525-404b-9b49-a57b1b392205/1/Dc2l0GC6k2a7QyWCi1cDO-8Y48A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/e16001-6525-404b-9b49-a57b1b392205/1/Dc2l0GC6k2a7QyWCi1cDO-8Y48A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:19:b1:28:f9:35:66:00:dd:e5:20:03:ae:7b:a1:56:7d:1f:
e7:4c:24:06:ed:45:fc:08:60:a7:0e:11:45:b7:9a:16:43:29:
66:0d:d6:a7:79:12:df:7f:cf:dc:a0:9f:4a:d4:49:33:e1:dd:
b5:54:b2:d5:29:f3:44:68:66:13:18:9f:f2:f7:e9:25:f0:c1:
57:20:94:12:d9:ec:cb:d2:3f:6c:cf:26:a1:dd:fb:54:8c:3c:
cd:d1:ad:c9:97:93:29:e8:ec:45:fa:79:c7:89:c5:cb:eb:44:
60:f7:30:de:dc:ed:d6:36:0f:56:63:8a:2d:9b:f7:a3:d2:97:
08:f9:c4:43:98:b6:fa:d7:f3:e0:37:14:b6:82:d5:51:b5:3f:
0d:e8:b8:ec:e9:c4:54:96:20:5c:71:7a:25:45:a1:2d:40:db:
82:3a:32:cb:cf:e9:fe:2b:6a:f5:e2:0a:34:a4:72:6f:ca:00:
2d:81:76:bf:f8:2a:04:b7:ee:6f:86:c9:63:ca:a4:4e:f9:7a:
d4:72:31:13:44:97:22:09:11:af:c5:27:57:22:9e:51:2f:12:
a5:00:36:a8:9c:90:10:0b:cc:9d:01:fb:90:e0:55:dd:58:57:
15:07:76:98:ab:93:96:e9:76:89:47:7c:ab:27:4b:63:f8:52:
c9:d7:53:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:14:41 2025 by rpki-client