Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/d22140-d961-4377-b8c6-3ef594e6c696/1/Dp4K_r9UpNIYr7rtVDB3G793d6k.mft
File: Dp4K_r9UpNIYr7rtVDB3G793d6k.mft (raw, json)
Hash identifier: ZzWNT6b8iftYH3pfXxXZqlOCC8F7oM8kr2RARk5rwno=
Subject key identifier: A8:A1:1F:82:87:5B:EA:23:91:95:B1:BA:41:61:32:6E:5E:62:54:F1
Authority key identifier: 0E:9E:0A:FE:BF:54:A4:D2:18:AF:BA:ED:54:30:77:1B:BF:77:77:A9
Certificate issuer: /CN=0e9e0afebf54a4d218afbaed5430771bbf7777a9
Certificate serial: 0199FC590785AD4BBF66D9F0181FABBA5169
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dp4K_r9UpNIYr7rtVDB3G793d6k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/d22140-d961-4377-b8c6-3ef594e6c696/1/Dp4K_r9UpNIYr7rtVDB3G793d6k.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 12:01:57 +0000
Manifest this update: Sun 19 Oct 2025 12:01:57 +0000
Manifest next update: Mon 20 Oct 2025 12:01:57 +0000
Files and hashes: 1: Dp4K_r9UpNIYr7rtVDB3G793d6k.crl (hash: 6fJwIDfUYqdbjkmQGhQlTejIGPDMZOP/uSY73CiTprU=)
2: RX3j6hG8jPHQlqgQDFsxWI9wjiU.roa (hash: iX9OHbXh9X/4e6G7wovNf6r/WuAf8SkEeNMsZiGLv+M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/d22140-d961-4377-b8c6-3ef594e6c696/1/Dp4K_r9UpNIYr7rtVDB3G793d6k.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/d22140-d961-4377-b8c6-3ef594e6c696/1/Dp4K_r9UpNIYr7rtVDB3G793d6k.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dp4K_r9UpNIYr7rtVDB3G793d6k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:59:07:85:ad:4b:bf:66:d9:f0:18:1f:ab:ba:51:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e9e0afebf54a4d218afbaed5430771bbf7777a9
Validity
Not Before: Oct 19 12:01:57 2025 GMT
Not After : Oct 20 12:01:57 2025 GMT
Subject: CN=a8a11f82875bea239195b1ba4161326e5e6254f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:bf:cb:3e:51:c3:67:e6:6c:a1:d5:0e:84:a0:
cf:40:1a:5b:2a:3a:86:04:08:89:d0:9c:b5:dc:07:
0d:f8:cc:d6:4b:43:db:c7:25:9c:e7:5c:96:0b:9c:
83:25:3c:1b:35:7b:bb:90:9e:36:59:2c:fd:fa:a4:
a3:67:e2:a9:dd:0a:ca:3a:54:45:65:8e:1d:f1:62:
8b:b5:02:03:4a:6f:84:e0:61:7b:2d:52:dd:36:2f:
48:59:b2:cd:e4:e9:ab:0e:a3:bc:76:55:2d:92:cd:
30:84:f0:20:65:f4:b8:65:85:5f:b5:e1:fc:9a:7e:
e8:c8:57:ff:fb:85:72:e3:f7:0b:c4:8a:c4:47:70:
7c:ec:9e:f8:c8:1d:61:60:a6:bf:80:1d:06:e3:1f:
5c:a6:45:ad:18:9c:70:c0:81:ef:76:08:ce:81:bf:
f3:21:ad:f7:1b:c9:a2:8f:06:f8:a6:71:03:62:6e:
c6:5b:03:ba:10:b3:5d:d0:89:41:cd:ad:c0:01:e5:
db:84:c4:13:f0:8e:3b:2b:88:89:4e:b7:56:4f:72:
26:f7:ee:a5:47:9a:d1:59:99:dc:a6:c7:cd:13:63:
ed:95:e9:85:cb:66:7c:8d:8e:1c:13:9d:f7:4e:00:
17:eb:90:ee:8d:13:72:ea:ae:2b:2e:d1:bc:8f:29:
b2:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:A1:1F:82:87:5B:EA:23:91:95:B1:BA:41:61:32:6E:5E:62:54:F1
X509v3 Authority Key Identifier:
keyid:0E:9E:0A:FE:BF:54:A4:D2:18:AF:BA:ED:54:30:77:1B:BF:77:77:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dp4K_r9UpNIYr7rtVDB3G793d6k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d22140-d961-4377-b8c6-3ef594e6c696/1/Dp4K_r9UpNIYr7rtVDB3G793d6k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d22140-d961-4377-b8c6-3ef594e6c696/1/Dp4K_r9UpNIYr7rtVDB3G793d6k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:dd:96:6e:03:d1:20:e5:26:d2:e9:94:82:43:e8:81:74:d2:
eb:80:0a:87:39:73:fb:e4:aa:cc:88:cc:64:a3:cc:72:a7:3e:
14:d2:f3:d9:eb:9b:e4:72:51:70:e0:96:05:ec:47:e7:0a:40:
c8:73:12:b1:4c:ab:9a:db:55:8f:1d:08:f1:6d:8b:18:c2:a6:
10:3e:5d:e9:af:23:8e:af:18:f4:6e:0d:22:9e:cc:2c:13:5b:
a0:46:30:61:4b:1c:1b:86:f4:e1:c8:0a:20:fe:dc:9b:31:32:
cc:82:b6:4a:1d:72:57:a0:2d:41:14:2d:b6:5f:15:ee:2d:d2:
bd:13:26:aa:9b:2c:e8:5b:e4:22:ba:e7:1e:48:5d:9a:34:3b:
ef:66:11:53:2b:f3:da:c8:89:40:95:d0:26:ea:72:fc:73:25:
56:07:1f:49:40:d2:a6:b8:fa:aa:28:42:c1:2b:16:69:ec:e4:
42:1b:46:25:3d:c1:65:8a:7e:9e:72:fb:4d:6e:65:f6:44:18:
d8:f7:54:3b:ad:e0:1d:4b:6a:ac:dd:b1:db:87:b6:19:9a:30:
06:0d:d4:31:36:64:e7:44:32:50:2e:59:45:5d:4d:c3:40:08:
a5:42:a8:aa:2b:ec:74:75:48:8d:ac:29:1f:c0:4f:b6:37:06:
80:56:b6:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:33:31 2025 by rpki-client