Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/fb147f-04ee-48f0-807d-fe3db5253eb0/1/DtlRtDq5cf2S62PsJqWyJu0Tx1I.mft
File: DtlRtDq5cf2S62PsJqWyJu0Tx1I.mft (raw, json)
Hash identifier: 5z+MFQ5ZGhAifRmkHFt5xbNqTr5PjraLmpYYSDtdmZQ=
Subject key identifier: B7:C7:3E:9B:3A:CF:06:AA:05:51:35:FB:09:B0:13:3C:26:6A:00:35
Authority key identifier: 0E:D9:51:B4:3A:B9:71:FD:92:EB:63:EC:26:A5:B2:26:ED:13:C7:52
Certificate issuer: /CN=0ed951b43ab971fd92eb63ec26a5b226ed13c752
Certificate serial: 0199FDDA33DE83B23A1B51DC9A250C5400B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DtlRtDq5cf2S62PsJqWyJu0Tx1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/fb147f-04ee-48f0-807d-fe3db5253eb0/1/DtlRtDq5cf2S62PsJqWyJu0Tx1I.mft
Manifest number: 04C4
Signing time: Sun 19 Oct 2025 19:02:39 +0000
Manifest this update: Sun 19 Oct 2025 19:02:39 +0000
Manifest next update: Mon 20 Oct 2025 19:02:39 +0000
Files and hashes: 1: DtlRtDq5cf2S62PsJqWyJu0Tx1I.crl (hash: IMA7PHoFiV2x+wB95JzwuxEmn2xIIzbTr22jqIromzk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/fb147f-04ee-48f0-807d-fe3db5253eb0/1/DtlRtDq5cf2S62PsJqWyJu0Tx1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/fb147f-04ee-48f0-807d-fe3db5253eb0/1/DtlRtDq5cf2S62PsJqWyJu0Tx1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/DtlRtDq5cf2S62PsJqWyJu0Tx1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:da:33:de:83:b2:3a:1b:51:dc:9a:25:0c:54:00:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ed951b43ab971fd92eb63ec26a5b226ed13c752
Validity
Not Before: Oct 19 19:02:39 2025 GMT
Not After : Oct 20 19:02:39 2025 GMT
Subject: CN=b7c73e9b3acf06aa055135fb09b0133c266a0035
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:59:3a:10:cf:b9:54:16:e2:62:90:35:3b:fe:
15:af:a3:18:8b:8e:0d:5a:ee:07:3c:49:7c:7c:95:
e7:a8:43:e8:7a:7c:44:74:94:0e:72:ac:6a:ec:cc:
7b:a2:cc:00:ba:94:18:6a:95:ad:e5:01:9a:d2:61:
f1:af:c9:8d:74:91:54:75:47:05:70:18:4b:04:94:
8a:e8:f2:6e:31:7d:96:2c:fc:e4:ee:b2:8b:c9:cb:
9d:e0:9d:c7:db:0a:17:1c:60:e6:21:72:b2:97:04:
ef:14:35:17:06:d2:85:44:f6:68:5f:fa:ab:20:ad:
fd:19:02:f6:bb:15:07:86:61:77:81:43:85:9b:fd:
f8:61:7e:bd:04:a7:03:d0:fe:b0:df:f7:01:45:1c:
e4:35:0c:a2:4a:44:14:af:ed:9b:46:80:cf:04:d9:
1b:e1:6a:30:42:50:9b:09:d1:45:06:8a:37:ce:ed:
25:dd:14:ba:e9:a1:7d:62:6e:79:b1:e4:a6:6e:7d:
9b:96:7e:be:5c:96:dc:2e:d5:05:b5:5c:1c:7f:a0:
02:59:23:74:9c:a2:5d:54:5c:40:00:1a:2c:c7:aa:
38:2c:e0:76:8a:16:16:ca:98:45:9f:aa:82:26:bd:
ad:16:a2:95:df:6f:3f:da:9c:f0:e5:00:3c:38:7c:
7e:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:C7:3E:9B:3A:CF:06:AA:05:51:35:FB:09:B0:13:3C:26:6A:00:35
X509v3 Authority Key Identifier:
keyid:0E:D9:51:B4:3A:B9:71:FD:92:EB:63:EC:26:A5:B2:26:ED:13:C7:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DtlRtDq5cf2S62PsJqWyJu0Tx1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/fb147f-04ee-48f0-807d-fe3db5253eb0/1/DtlRtDq5cf2S62PsJqWyJu0Tx1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/fb147f-04ee-48f0-807d-fe3db5253eb0/1/DtlRtDq5cf2S62PsJqWyJu0Tx1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:0e:48:ad:d9:a3:6e:2e:36:bf:40:70:9e:8b:65:2b:55:f0:
f8:3b:bd:d2:01:94:62:c0:2b:b7:12:1a:b8:b7:de:73:b6:0c:
de:53:bb:57:25:cb:1d:d3:28:9e:0c:38:7b:6a:2f:e1:78:d3:
27:c9:cf:dd:f2:f8:fb:68:dd:ff:28:e4:49:14:c0:4a:66:a1:
3b:c5:d2:d4:a6:95:5b:80:5d:cb:7a:c8:86:da:99:9d:67:f2:
69:5f:b6:1f:42:b0:ab:22:42:b6:6e:82:6d:f4:89:0c:68:66:
a3:b6:f1:49:cf:25:1b:28:21:c5:f2:ea:97:26:76:a9:43:d1:
20:a6:5d:3f:e3:a3:0f:2b:cd:15:bb:65:9a:ce:7f:d1:72:2f:
56:fb:fb:45:d6:dc:eb:c5:24:c9:c6:9d:7f:16:3d:e2:da:62:
9d:84:8c:3d:6c:c5:3b:78:c0:93:03:0f:7b:ef:a5:0b:b1:bf:
39:f7:a0:bf:79:3e:ca:33:c0:ba:13:4b:54:ec:b6:b6:e9:f6:
7b:b5:31:fa:e5:13:fe:33:80:00:cf:04:2a:82:9d:c0:94:5c:
b7:da:7d:e7:10:97:22:62:a1:6d:01:a2:d1:a0:56:d5:f1:79:
c0:f7:17:3d:d6:59:be:8b:61:d7:3c:a6:da:4e:c9:60:77:49:
e3:a5:77:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:52:57 2025 by rpki-client