Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/1f5681-b105-4ff1-9bf4-adc56d43e0c4/1/DlNS2UQbZcIBbtjrfi8jWVRDT10.mft
File: DlNS2UQbZcIBbtjrfi8jWVRDT10.mft (raw, json)
Hash identifier: xEVc3ToPtUtmCnwTx74wfLYBPHMcrS0+x5Xu3FoYdb0=
Subject key identifier: C6:A1:8F:AD:DE:14:6F:B8:67:60:C9:1B:1C:0B:7A:53:A5:09:94:FD
Authority key identifier: 0E:53:52:D9:44:1B:65:C2:01:6E:D8:EB:7E:2F:23:59:54:43:4F:5D
Certificate issuer: /CN=0e5352d9441b65c2016ed8eb7e2f235954434f5d
Certificate serial: 0199FC58B5849068A7F04B8F172F63739F9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DlNS2UQbZcIBbtjrfi8jWVRDT10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/1f5681-b105-4ff1-9bf4-adc56d43e0c4/1/DlNS2UQbZcIBbtjrfi8jWVRDT10.mft
Manifest number: 0289
Signing time: Sun 19 Oct 2025 12:01:35 +0000
Manifest this update: Sun 19 Oct 2025 12:01:35 +0000
Manifest next update: Mon 20 Oct 2025 12:01:35 +0000
Files and hashes: 1: DlNS2UQbZcIBbtjrfi8jWVRDT10.crl (hash: G+6mUIQ0fIjR0Ghb9GeC2ikhsSnBKTobAN2p4s+mj7Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/1f5681-b105-4ff1-9bf4-adc56d43e0c4/1/DlNS2UQbZcIBbtjrfi8jWVRDT10.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/1f5681-b105-4ff1-9bf4-adc56d43e0c4/1/DlNS2UQbZcIBbtjrfi8jWVRDT10.mft
rsync://rpki.ripe.net/repository/DEFAULT/DlNS2UQbZcIBbtjrfi8jWVRDT10.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:b5:84:90:68:a7:f0:4b:8f:17:2f:63:73:9f:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e5352d9441b65c2016ed8eb7e2f235954434f5d
Validity
Not Before: Oct 19 12:01:35 2025 GMT
Not After : Oct 20 12:01:35 2025 GMT
Subject: CN=c6a18fadde146fb86760c91b1c0b7a53a50994fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:93:7e:d9:f3:d8:b6:10:97:64:06:8b:ba:77:
dd:9b:81:51:c1:5b:f8:7d:ef:d6:c5:22:81:f2:50:
43:18:39:d1:9e:80:f1:31:9f:04:2f:3a:3a:2f:99:
39:cc:2d:24:9d:ed:81:28:c1:cb:fc:16:8d:7b:21:
7a:ce:03:2b:53:e3:fb:c7:1c:b4:19:68:6d:2f:30:
9e:4d:7b:30:ec:1f:e2:77:c3:e2:81:9d:4b:1d:ac:
9a:39:34:53:70:54:5e:1a:0a:bd:8d:2f:42:de:d1:
4f:59:ac:c8:ce:00:b5:6d:55:a4:8d:dc:b2:7e:62:
6d:39:c0:58:ea:53:89:fc:32:3e:f8:51:03:22:13:
e3:fd:62:8f:bc:a3:39:74:98:5b:db:08:4e:19:98:
ce:e3:18:05:be:d9:cf:d8:96:b8:ad:16:5e:2f:33:
da:a6:ff:30:c4:3c:20:14:27:f9:7a:39:23:29:7d:
67:a8:c7:ec:8b:4d:28:67:1e:08:10:55:3b:7d:7d:
c1:03:b0:36:60:7b:92:78:cb:91:1d:8f:24:10:18:
95:95:48:19:b5:40:c2:85:fd:bf:25:e8:13:cd:ab:
a3:ad:b0:55:75:45:7e:54:7e:c6:0c:65:37:73:0f:
70:e8:0c:37:6c:8a:ff:23:ed:aa:b8:f7:eb:d3:cc:
18:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:A1:8F:AD:DE:14:6F:B8:67:60:C9:1B:1C:0B:7A:53:A5:09:94:FD
X509v3 Authority Key Identifier:
keyid:0E:53:52:D9:44:1B:65:C2:01:6E:D8:EB:7E:2F:23:59:54:43:4F:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DlNS2UQbZcIBbtjrfi8jWVRDT10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/1f5681-b105-4ff1-9bf4-adc56d43e0c4/1/DlNS2UQbZcIBbtjrfi8jWVRDT10.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/1f5681-b105-4ff1-9bf4-adc56d43e0c4/1/DlNS2UQbZcIBbtjrfi8jWVRDT10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:98:cf:9f:d6:86:e1:b5:dc:30:0e:db:2a:a8:82:c0:5c:6f:
3a:e6:c8:56:c9:19:a0:cc:82:6d:f6:7c:dc:1e:a8:38:5c:d8:
c5:87:30:3d:b1:a8:5a:4d:e3:1b:6d:e3:d6:ea:76:35:f1:b3:
0f:42:ae:de:e8:e8:b9:72:8a:cc:89:93:06:b1:04:22:6a:06:
c3:ae:6b:11:66:ef:39:55:6f:a9:3f:e6:36:84:5a:cf:a6:73:
51:61:72:1f:5f:c6:b3:7d:a3:ed:a2:de:e1:c6:0f:b3:9b:80:
f9:6f:be:bd:bc:6a:35:82:a2:aa:1f:be:82:d1:9c:19:c9:e9:
bd:5d:b5:05:4d:c8:0a:3e:79:09:14:c4:1e:1b:7a:00:e3:31:
c9:cb:c6:4a:f9:20:55:99:6c:67:bd:77:98:7c:78:18:08:05:
f2:01:1b:a1:7c:19:ac:a7:cd:a8:dd:fc:58:4a:7a:d9:fb:7b:
f3:fc:33:d7:52:79:d7:cc:dd:c8:a7:55:97:a1:77:b1:17:d0:
2f:b8:84:5b:a6:94:fe:c2:1c:3b:e6:d8:24:57:2f:17:9d:a2:
a4:31:06:3e:f2:ab:35:89:72:1e:a8:1e:30:a1:57:a2:21:49:
8a:2b:6d:32:20:7a:9c:ae:25:5c:a5:7f:5e:c0:16:8e:3e:bd:
5e:1a:16:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:45:04 2025 by rpki-client