Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/688943-713d-491e-a721-eca59f82018a/1/8DpbV31dnm0cX9O-1ADpacC-fDQ.mft
File: 8DpbV31dnm0cX9O-1ADpacC-fDQ.mft (raw, json)
Hash identifier: 5G1lorPiPol8vJpNrLbRzNn5iFNDLtddNQKeNtWCM0E=
Subject key identifier: D4:3A:15:4F:6A:1D:71:A7:86:43:01:80:10:72:6D:DD:01:F8:B8:A0
Authority key identifier: F0:3A:5B:57:7D:5D:9E:6D:1C:5F:D3:BE:D4:00:E9:69:C0:BE:7C:34
Certificate issuer: /CN=f03a5b577d5d9e6d1c5fd3bed400e969c0be7c34
Certificate serial: 0199FCC66266740FBB6A9DABB466808BBD80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8DpbV31dnm0cX9O-1ADpacC-fDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/688943-713d-491e-a721-eca59f82018a/1/8DpbV31dnm0cX9O-1ADpacC-fDQ.mft
Manifest number: 16DD
Signing time: Sun 19 Oct 2025 14:01:23 +0000
Manifest this update: Sun 19 Oct 2025 14:01:23 +0000
Manifest next update: Mon 20 Oct 2025 14:01:23 +0000
Files and hashes: 1: 8DpbV31dnm0cX9O-1ADpacC-fDQ.crl (hash: 3ZOYTAMaxv/FPiBYIEdc1+4b9odCI7zZW03MfShXPiU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/688943-713d-491e-a721-eca59f82018a/1/8DpbV31dnm0cX9O-1ADpacC-fDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/688943-713d-491e-a721-eca59f82018a/1/8DpbV31dnm0cX9O-1ADpacC-fDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8DpbV31dnm0cX9O-1ADpacC-fDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 14:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:62:66:74:0f:bb:6a:9d:ab:b4:66:80:8b:bd:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f03a5b577d5d9e6d1c5fd3bed400e969c0be7c34
Validity
Not Before: Oct 19 14:01:23 2025 GMT
Not After : Oct 20 14:01:23 2025 GMT
Subject: CN=d43a154f6a1d71a78643018010726ddd01f8b8a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:db:c0:4a:97:68:22:6f:0b:ee:2d:cd:65:ab:
5a:b0:32:3f:32:29:1e:69:c6:b1:8b:9d:17:28:7f:
eb:c7:74:92:e3:62:db:d8:d8:4a:fd:53:2d:8e:c4:
11:1c:90:d4:86:59:3e:90:be:c8:36:f2:eb:dc:8c:
bc:0d:31:8b:b4:11:a9:3b:93:b9:0b:aa:ef:6b:77:
46:a1:12:4f:dc:f3:b1:48:82:9a:34:81:5e:0e:99:
1a:e8:7c:66:e1:7e:96:ff:57:43:9b:3b:97:64:4c:
35:97:6d:90:fd:5f:52:e2:06:26:cd:ad:a7:3f:30:
ca:ea:a5:85:75:7f:54:d7:87:90:ef:e0:dd:ad:10:
a2:2e:94:2c:34:87:3f:f8:65:c6:c3:89:f3:93:5e:
2c:2a:4e:08:ee:8b:f6:a2:e5:18:06:fc:95:2d:b4:
f1:4b:85:46:d6:58:63:9b:d1:94:74:6f:ac:b3:6b:
fb:00:08:3a:75:f6:08:9b:8f:59:ed:17:9b:f7:50:
52:c8:d6:5f:fe:d7:d2:31:ab:d1:b1:f1:c8:ee:24:
fe:69:96:3e:99:73:47:48:82:54:d3:63:53:bb:dc:
21:bd:10:94:ca:3c:b6:f3:f9:8e:6e:b4:21:f5:30:
a1:40:dc:02:e4:77:92:6c:1f:ad:d7:2f:8c:a0:c2:
66:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:3A:15:4F:6A:1D:71:A7:86:43:01:80:10:72:6D:DD:01:F8:B8:A0
X509v3 Authority Key Identifier:
keyid:F0:3A:5B:57:7D:5D:9E:6D:1C:5F:D3:BE:D4:00:E9:69:C0:BE:7C:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8DpbV31dnm0cX9O-1ADpacC-fDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/688943-713d-491e-a721-eca59f82018a/1/8DpbV31dnm0cX9O-1ADpacC-fDQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/688943-713d-491e-a721-eca59f82018a/1/8DpbV31dnm0cX9O-1ADpacC-fDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:9a:ae:a6:9e:c1:9e:82:e4:dd:8b:e7:54:ca:d0:43:3d:51:
1d:1e:e6:62:bb:f4:52:bf:50:50:ee:35:0d:82:e9:96:43:73:
04:7a:35:b0:f9:92:67:6c:c6:68:18:23:a7:06:c2:2d:cb:c5:
8a:60:46:4d:c2:5c:e0:f8:fa:58:64:cb:57:fc:4b:43:e0:8a:
d1:e9:c6:ff:3b:77:0b:51:b9:c8:ad:12:ef:b1:d6:0a:0c:90:
85:90:7b:55:6c:88:63:a0:ec:82:39:59:7f:34:d9:88:b8:70:
fb:4d:5b:a8:36:fa:c7:1a:82:19:d1:c9:91:00:1c:9c:a0:c5:
bc:91:6c:67:98:17:5d:0f:3c:df:c1:3c:df:44:23:ed:2f:e0:
d1:1f:68:7d:d2:a4:2a:9a:bb:ed:35:4d:65:f7:26:eb:e5:13:
ca:38:00:77:c8:01:b1:fc:64:fb:36:da:59:85:30:63:9a:5b:
c0:e6:e1:fd:ca:91:1d:91:ca:08:56:a1:b8:97:28:f4:72:a1:
e7:a2:d2:4a:56:71:e6:71:6e:91:9f:73:d6:d4:16:68:eb:38:
6d:b9:b6:b5:d1:fd:49:37:7c:25:b1:34:b6:bd:b6:07:d4:ca:
82:48:12:42:23:76:42:c3:10:f6:7d:34:b1:47:52:da:d2:97:
d0:41:e6:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:31:53 2025 by rpki-client