Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/0cc875-610f-4add-a719-3caaf905cfc6/1/dWQXildKJgm7bv8cxSG0U9dch9w.mft
File: dWQXildKJgm7bv8cxSG0U9dch9w.mft (raw, json)
Hash identifier: OcGqXihEjTnZlR29vHJJrF6s0plizdMiFyRvhZFlE48=
Subject key identifier: 8C:DB:0D:CD:93:E8:0C:CD:69:B7:5E:17:5A:AE:AD:01:19:E1:C8:99
Authority key identifier: 75:64:17:8A:57:4A:26:09:BB:6E:FF:1C:C5:21:B4:53:D7:5C:87:DC
Certificate issuer: /CN=7564178a574a2609bb6eff1cc521b453d75c87dc
Certificate serial: 0199FFC8629B78491589DE6D52260DAA51E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dWQXildKJgm7bv8cxSG0U9dch9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/0cc875-610f-4add-a719-3caaf905cfc6/1/dWQXildKJgm7bv8cxSG0U9dch9w.mft
Manifest number: 0E44
Signing time: Mon 20 Oct 2025 04:02:26 +0000
Manifest this update: Mon 20 Oct 2025 04:02:26 +0000
Manifest next update: Tue 21 Oct 2025 04:02:26 +0000
Files and hashes: 1: dWQXildKJgm7bv8cxSG0U9dch9w.crl (hash: T8/N4jSBU99wKKj710krIQMnjYj9VkcGBbvebjSkHRk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/0cc875-610f-4add-a719-3caaf905cfc6/1/dWQXildKJgm7bv8cxSG0U9dch9w.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/0cc875-610f-4add-a719-3caaf905cfc6/1/dWQXildKJgm7bv8cxSG0U9dch9w.mft
rsync://rpki.ripe.net/repository/DEFAULT/dWQXildKJgm7bv8cxSG0U9dch9w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c8:62:9b:78:49:15:89:de:6d:52:26:0d:aa:51:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7564178a574a2609bb6eff1cc521b453d75c87dc
Validity
Not Before: Oct 20 04:02:26 2025 GMT
Not After : Oct 21 04:02:26 2025 GMT
Subject: CN=8cdb0dcd93e80ccd69b75e175aaead0119e1c899
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:0f:3d:82:73:c2:84:90:6e:44:f8:60:c0:fa:
35:98:07:9f:06:88:1a:15:c6:d2:dd:ce:85:3d:aa:
6a:da:fc:b2:2e:d9:b4:42:d9:19:fa:30:74:ab:48:
81:7d:8d:7b:96:66:2d:6a:9d:cd:54:c4:b1:d0:6a:
2c:02:d4:f6:2d:ce:09:b4:51:0b:93:56:4f:74:5c:
41:78:6d:29:1c:12:5e:71:32:e1:10:49:d3:02:59:
12:cf:6a:7e:1a:af:33:c2:cf:28:cc:22:58:b7:a1:
e8:ff:28:fd:b0:a4:1f:97:c3:fd:c5:1a:af:68:2d:
cb:d5:3d:dc:dd:bb:65:70:29:95:b2:16:74:f6:9a:
a2:dd:ac:3a:e5:e8:84:35:75:8a:57:1f:2f:2a:c0:
55:6a:7a:41:05:00:8c:eb:d9:7d:c6:99:d4:90:2d:
29:82:4c:c9:08:ae:1c:ee:e8:24:c0:bd:52:f7:60:
7a:60:91:95:df:f9:d9:08:11:74:9d:12:c3:20:44:
5a:77:be:d4:2d:75:7d:bd:06:f2:94:65:87:61:8a:
df:c1:1e:1f:85:ac:f3:a9:be:27:a2:42:6c:37:7d:
cc:a9:4e:2c:71:d4:b0:59:04:4a:e7:53:db:75:a6:
27:2e:c8:ea:ea:ec:a7:04:b8:69:77:db:54:a1:37:
94:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:DB:0D:CD:93:E8:0C:CD:69:B7:5E:17:5A:AE:AD:01:19:E1:C8:99
X509v3 Authority Key Identifier:
keyid:75:64:17:8A:57:4A:26:09:BB:6E:FF:1C:C5:21:B4:53:D7:5C:87:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dWQXildKJgm7bv8cxSG0U9dch9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/0cc875-610f-4add-a719-3caaf905cfc6/1/dWQXildKJgm7bv8cxSG0U9dch9w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/0cc875-610f-4add-a719-3caaf905cfc6/1/dWQXildKJgm7bv8cxSG0U9dch9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:b7:85:a8:0c:00:d8:20:a5:2d:0f:66:c9:b4:d5:e6:83:5b:
52:22:bb:83:ac:ee:a1:83:92:d6:77:e0:87:0b:12:be:5c:e5:
7c:11:cc:53:f1:da:f0:54:7a:de:a7:70:b6:20:52:71:a5:dd:
e8:ad:f5:ef:1a:29:e0:ef:b8:45:3b:12:7b:d1:1c:2e:af:6a:
74:17:26:16:0b:75:80:b9:12:47:ca:97:93:a5:9e:e0:42:c3:
fb:40:63:09:38:f2:02:31:44:08:00:ef:85:ba:d9:94:45:df:
f4:c7:74:33:3b:26:f5:fa:b1:9a:36:87:bb:f3:82:d4:69:23:
1b:7f:54:4b:39:b1:1b:bc:f2:70:01:b0:a1:32:96:a1:05:3d:
85:19:12:c2:4a:9a:c6:e6:06:bb:ed:6c:e1:6c:be:24:0e:73:
2f:2a:75:61:15:14:17:fa:91:28:0b:78:d8:93:3a:93:11:0d:
9a:62:e0:83:fc:53:31:9b:b3:ba:90:c6:89:33:33:5b:93:fe:
e7:24:8f:88:18:2b:d4:f1:63:56:f4:60:5a:f1:d8:de:df:59:
62:d2:24:f8:02:fb:9d:ed:56:cd:d4:fa:9e:50:24:57:57:ea:
a9:27:d8:65:cf:20:95:14:1b:b1:03:f9:76:eb:65:ee:ce:d1:
21:8a:53:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn/yGKbeEkVid5tUiYNqlHjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1NjQxNzhhNTc0YTI2MDliYjZlZmYxY2M1MjFiNDUzZDc1
Yzg3ZGMwHhcNMjUxMDIwMDQwMjI2WhcNMjUxMDIxMDQwMjI2WjAzMTEwLwYDVQQD
Eyg4Y2RiMGRjZDkzZTgwY2NkNjliNzVlMTc1YWFlYWQwMTE5ZTFjODk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzQ89gnPChJBuRPhgwPo1mAefBoga
FcbS3c6FPapq2vyyLtm0QtkZ+jB0q0iBfY17lmYtap3NVMSx0GosAtT2Lc4JtFEL
k1ZPdFxBeG0pHBJecTLhEEnTAlkSz2p+Gq8zws8ozCJYt6Ho/yj9sKQfl8P9xRqv
aC3L1T3c3btlcCmVshZ09pqi3aw65eiENXWKVx8vKsBVanpBBQCM69l9xpnUkC0p
gkzJCK4c7ugkwL1S92B6YJGV3/nZCBF0nRLDIERad77ULXV9vQbylGWHYYrfwR4f
hazzqb4nokJsN33MqU4scdSwWQRK51PbdaYnLsjq6uynBLhpd9tUoTeUhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIzbDc2T6AzNabdeF1qurQEZ4ciZMB8GA1UdIwQY
MBaAFHVkF4pXSiYJu27/HMUhtFPXXIfcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZFdRWGlsZEtKZ203YnY4Y3hTRzBVOWRjaDl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC8wY2M4NzUtNjEwZi00YWRkLWE3MTkt
M2NhYWY5MDVjZmM2LzEvZFdRWGlsZEtKZ203YnY4Y3hTRzBVOWRjaDl3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC8wY2M4NzUtNjEwZi00YWRkLWE3MTktM2NhYWY5MDVjZmM2
LzEvZFdRWGlsZEtKZ203YnY4Y3hTRzBVOWRjaDl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfreFqAwA
2CClLQ9mybTV5oNbUiK7g6zuoYOS1nfghwsSvlzlfBHMU/Ha8FR63qdwtiBScaXd
6K317xop4O+4RTsSe9EcLq9qdBcmFgt1gLkSR8qXk6We4ELD+0BjCTjyAjFECADv
hbrZlEXf9Md0Mzsm9fqxmjaHu/OC1GkjG39USzmxG7zycAGwoTKWoQU9hRkSwkqa
xuYGu+1s4Wy+JA5zLyp1YRUUF/qRKAt42JM6kxENmmLgg/xTMZuzupDGiTMzW5P+
5ySPiBgr1PFjVvRgWvHY3t9ZYtIk+AL7ne1WzdT6nlAkV1fqqSfYZc8glRQbsQP5
dutl7s7RIYpTcA==
-----END CERTIFICATE-----
Generated at Mon Oct 20 09:26:15 2025 by rpki-client