
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/0fc900-7c48-4a51-83fe-dcf3a1c25cf3/1/DMw2Ao0AWBDKuiRhS9YHMd1JUDM.mft
File: DMw2Ao0AWBDKuiRhS9YHMd1JUDM.mft (raw, json)
Hash identifier: ooUrvdNYHgszw5/mHA1UMkonbkJ831TH96et3ocAtrA=
Subject key identifier: A3:A2:AC:00:78:30:15:71:B2:39:FA:3D:A8:3A:95:85:0F:92:40:1F
Authority key identifier: 0C:CC:36:02:8D:00:58:10:CA:BA:24:61:4B:D6:07:31:DD:49:50:33
Certificate issuer: /CN=0ccc36028d005810caba24614bd60731dd495033
Certificate serial: 0199FB461B807DDA1DEF1E46347AE8A21309
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DMw2Ao0AWBDKuiRhS9YHMd1JUDM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/0fc900-7c48-4a51-83fe-dcf3a1c25cf3/1/DMw2Ao0AWBDKuiRhS9YHMd1JUDM.mft
Manifest number: 0253
Signing time: Sun 19 Oct 2025 07:01:39 +0000
Manifest this update: Sun 19 Oct 2025 07:01:39 +0000
Manifest next update: Mon 20 Oct 2025 07:01:39 +0000
Files and hashes: 1: DMw2Ao0AWBDKuiRhS9YHMd1JUDM.crl (hash: blPGaauZMwtBIrcYsUnRRtOY73NRu+Xgyky/+Rmi72g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/0fc900-7c48-4a51-83fe-dcf3a1c25cf3/1/DMw2Ao0AWBDKuiRhS9YHMd1JUDM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/0fc900-7c48-4a51-83fe-dcf3a1c25cf3/1/DMw2Ao0AWBDKuiRhS9YHMd1JUDM.mft
rsync://rpki.ripe.net/repository/DEFAULT/DMw2Ao0AWBDKuiRhS9YHMd1JUDM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:46:1b:80:7d:da:1d:ef:1e:46:34:7a:e8:a2:13:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ccc36028d005810caba24614bd60731dd495033
Validity
Not Before: Oct 19 07:01:39 2025 GMT
Not After : Oct 20 07:01:39 2025 GMT
Subject: CN=a3a2ac0078301571b239fa3da83a95850f92401f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c7:78:f3:d5:1e:b7:51:9b:06:6b:f3:b5:a6:
32:c9:03:9c:fd:e0:56:d8:b2:3d:ab:24:45:ed:62:
2b:05:33:4b:de:6f:16:95:0f:c1:9e:be:ed:0f:40:
9f:22:1e:60:e5:2d:c5:4e:a1:f5:20:3b:d3:b9:fb:
25:55:c5:89:64:2c:dc:bd:b8:d8:4a:e5:c8:5a:9a:
8b:7d:c8:de:74:89:31:c4:49:86:3f:2b:d8:cf:33:
1f:74:c3:53:2c:c1:16:63:69:3d:3e:ad:d7:67:1f:
6d:85:bb:7e:f8:dc:c1:69:02:3c:c5:92:61:0c:7a:
97:14:a5:7e:3c:3b:4c:2e:dd:09:e6:58:18:0c:03:
be:21:43:39:0a:15:2e:b5:df:9e:62:8f:8a:ef:6a:
6a:50:d8:ef:28:58:7e:52:e8:ac:08:cc:7a:09:f1:
bf:84:0c:14:e8:a5:25:49:8c:f7:52:3b:6a:f9:7c:
ff:75:e1:11:13:cd:ba:20:bb:f4:d4:e3:73:1d:ec:
87:de:3e:14:2d:65:af:1b:e4:1e:23:b8:c2:2a:b5:
c1:98:1f:67:22:44:75:e5:ac:f1:e7:c3:df:10:d4:
d6:66:d5:19:e1:3f:5f:24:94:3d:33:1b:ad:5e:26:
78:6a:0c:b4:73:56:6b:00:e0:b3:c4:3e:54:f3:7b:
2b:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:A2:AC:00:78:30:15:71:B2:39:FA:3D:A8:3A:95:85:0F:92:40:1F
X509v3 Authority Key Identifier:
keyid:0C:CC:36:02:8D:00:58:10:CA:BA:24:61:4B:D6:07:31:DD:49:50:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DMw2Ao0AWBDKuiRhS9YHMd1JUDM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/0fc900-7c48-4a51-83fe-dcf3a1c25cf3/1/DMw2Ao0AWBDKuiRhS9YHMd1JUDM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/0fc900-7c48-4a51-83fe-dcf3a1c25cf3/1/DMw2Ao0AWBDKuiRhS9YHMd1JUDM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:31:74:af:51:f0:c9:bf:af:52:d8:57:da:db:18:8e:58:1a:
7e:4b:41:b2:f2:44:93:2f:3f:d2:ab:d5:46:6d:8c:4d:51:a4:
a7:a7:02:e9:22:d8:d3:17:f6:8d:93:d4:f0:89:46:46:25:ef:
0f:2b:18:da:4a:31:90:7d:46:07:bf:4b:08:fd:ba:fa:4c:3c:
1d:7f:01:8d:64:5d:a9:10:7f:60:6e:9b:af:90:d4:b5:4d:71:
8e:6b:1e:42:f6:ef:93:fe:14:74:61:63:c9:86:c3:f9:b1:8c:
c1:54:8c:a3:53:b5:42:bb:00:41:4e:a1:5b:fe:66:5c:2f:af:
47:8d:53:64:8f:62:bc:ec:83:7e:6c:6b:0a:23:e2:7c:da:a4:
e1:a8:23:11:10:26:3c:cd:3f:c3:72:88:db:25:51:e6:63:6a:
ab:ff:39:0e:bf:78:a4:5c:61:3e:a0:9b:1e:75:ff:b9:85:4c:
83:c3:70:7f:ef:74:d2:a1:98:1d:a2:2b:dd:53:e7:c8:f8:a9:
8d:0a:fa:25:5f:f9:a6:61:d8:50:9d:1f:c4:18:55:22:ad:e6:
1c:6e:58:41:f8:5e:3a:f2:25:86:0c:69:23:68:b8:2f:76:03:
19:4a:ee:b2:4f:42:ae:43:1b:6c:77:98:ff:33:b2:f6:79:49:
c2:db:3c:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:12:35 2025 by rpki-client