Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/ca7809-a7a8-48bc-84e8-6304232bec3c/1/DwgImqp8KDZUvNpQqTNGTnEnkbA.mft
File: DwgImqp8KDZUvNpQqTNGTnEnkbA.mft (raw, json)
Hash identifier: 6KQBHB4JwT+PNT75tCQYQ7gpkVc+IBCdXXk3kxpOOm4=
Subject key identifier: BB:3E:5D:11:AF:BC:EE:A0:B9:F4:08:E2:12:24:BB:FB:E9:C2:D2:65
Authority key identifier: 0F:08:08:9A:AA:7C:28:36:54:BC:DA:50:A9:33:46:4E:71:27:91:B0
Certificate issuer: /CN=0f08089aaa7c283654bcda50a933464e712791b0
Certificate serial: 0199FC5908026D002E79D3026D3B6CE2551C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DwgImqp8KDZUvNpQqTNGTnEnkbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/ca7809-a7a8-48bc-84e8-6304232bec3c/1/DwgImqp8KDZUvNpQqTNGTnEnkbA.mft
Manifest number: 1390
Signing time: Sun 19 Oct 2025 12:01:57 +0000
Manifest this update: Sun 19 Oct 2025 12:01:57 +0000
Manifest next update: Mon 20 Oct 2025 12:01:57 +0000
Files and hashes: 1: DwgImqp8KDZUvNpQqTNGTnEnkbA.crl (hash: ZuNCrmgRNSlintL38iz0DO0cb3EzJ/GeMR/FIP+0EPc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/ca7809-a7a8-48bc-84e8-6304232bec3c/1/DwgImqp8KDZUvNpQqTNGTnEnkbA.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/ca7809-a7a8-48bc-84e8-6304232bec3c/1/DwgImqp8KDZUvNpQqTNGTnEnkbA.mft
rsync://rpki.ripe.net/repository/DEFAULT/DwgImqp8KDZUvNpQqTNGTnEnkbA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:59:08:02:6d:00:2e:79:d3:02:6d:3b:6c:e2:55:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f08089aaa7c283654bcda50a933464e712791b0
Validity
Not Before: Oct 19 12:01:57 2025 GMT
Not After : Oct 20 12:01:57 2025 GMT
Subject: CN=bb3e5d11afbceea0b9f408e21224bbfbe9c2d265
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b7:e7:62:27:e1:b9:98:93:9b:3a:04:83:5a:
4b:63:17:93:2d:1f:80:7c:63:a6:76:01:fd:20:d2:
81:f3:5f:96:18:1a:42:cf:24:d9:95:62:11:2e:37:
31:3f:2a:c0:27:8e:38:73:ff:51:6c:9e:0e:fd:98:
30:3b:9c:45:b4:bd:f1:01:05:6a:46:29:d6:86:22:
6a:24:b0:4c:c2:5f:96:85:a7:6a:7e:08:e1:97:a4:
0d:78:d6:19:ed:f2:7b:28:fa:66:d1:e2:37:3a:2f:
e3:fc:93:6c:79:dd:e0:af:69:ea:e6:93:05:f6:cb:
f9:d4:d2:37:f0:82:52:a5:b3:ad:6f:f4:a5:55:61:
fa:1b:a0:ee:ef:20:75:4d:42:c5:2d:db:7c:a7:92:
5f:ed:a2:7a:4c:87:7e:2e:91:99:76:46:5b:db:58:
16:d5:b4:50:9b:2c:dd:50:aa:a8:6e:fb:b0:87:16:
e2:b2:7f:61:4f:2a:a6:85:5c:52:e2:93:99:c7:12:
f7:d5:9c:db:31:f6:fe:39:43:c3:84:3a:8e:0d:2f:
65:bc:32:9c:b1:00:0e:02:11:62:76:ca:65:3a:4c:
43:11:c7:42:ab:24:d3:41:cd:61:89:ab:cd:44:af:
33:cd:5c:0a:10:6f:ed:a6:19:8c:70:33:2d:8f:84:
03:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:3E:5D:11:AF:BC:EE:A0:B9:F4:08:E2:12:24:BB:FB:E9:C2:D2:65
X509v3 Authority Key Identifier:
keyid:0F:08:08:9A:AA:7C:28:36:54:BC:DA:50:A9:33:46:4E:71:27:91:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DwgImqp8KDZUvNpQqTNGTnEnkbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/ca7809-a7a8-48bc-84e8-6304232bec3c/1/DwgImqp8KDZUvNpQqTNGTnEnkbA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/ca7809-a7a8-48bc-84e8-6304232bec3c/1/DwgImqp8KDZUvNpQqTNGTnEnkbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:84:ec:07:c1:87:2a:a1:51:ae:f2:14:15:b9:84:36:74:d2:
17:d5:35:3d:9d:c5:2d:ab:39:ef:cf:3e:08:39:f7:d7:69:de:
04:85:3b:92:e8:7c:c8:22:22:ba:f8:d8:95:4c:17:ce:f9:b2:
57:c7:d5:b1:85:e5:d9:b1:4a:5b:0c:a4:5d:b7:01:f8:c2:c7:
d3:6c:71:60:51:52:64:eb:c0:d2:f8:9a:55:1c:7d:1e:46:52:
36:14:25:c3:e1:8e:73:6f:7b:cf:1f:c8:fe:ba:11:b6:31:18:
c8:27:77:1a:ed:1a:15:1d:27:b0:59:df:77:45:1f:c6:66:f3:
bc:5a:d7:6b:22:03:55:f9:d5:53:d8:e6:bd:74:49:02:e8:ed:
83:5b:53:e3:66:b8:72:ea:de:d6:e8:9c:44:73:3e:01:5b:d9:
51:e9:f6:ce:9d:23:11:42:92:2e:a2:88:f8:1a:71:f0:e0:41:
ba:54:a0:5c:a3:62:bd:7d:9b:e1:8b:b7:6b:e7:7a:16:5a:34:
3b:ee:af:9a:f7:21:06:eb:08:a9:a9:80:59:36:c3:1a:83:af:
ee:84:76:67:48:e9:bc:67:69:d2:f1:c0:30:66:3b:1f:78:a0:
2c:0b:02:b8:a6:f1:ba:ae:bd:85:90:3f:4d:b0:17:ef:99:03:
f8:c1:41:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:41:45 2025 by rpki-client