Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/da33ae-16cc-4c9a-bf9c-717998aa3cff/1/dOQ_nlrj9ur7UGiuiPGMKeRDWQc.mft
File: dOQ_nlrj9ur7UGiuiPGMKeRDWQc.mft (raw, json)
Hash identifier: RIc2POHPhanFmuk88uYMj5w/KGB3W9eXNaHQVyNuqow=
Subject key identifier: 32:A4:FC:6E:35:E2:35:24:CC:13:A0:E3:F9:CA:08:62:3E:32:16:04
Authority key identifier: 74:E4:3F:9E:5A:E3:F6:EA:FB:50:68:AE:88:F1:8C:29:E4:43:59:07
Certificate issuer: /CN=74e43f9e5ae3f6eafb5068ae88f18c29e4435907
Certificate serial: 0199FDD8C609AA4374B00258C3E5E8D37878
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dOQ_nlrj9ur7UGiuiPGMKeRDWQc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/da33ae-16cc-4c9a-bf9c-717998aa3cff/1/dOQ_nlrj9ur7UGiuiPGMKeRDWQc.mft
Manifest number: 16DF
Signing time: Sun 19 Oct 2025 19:01:06 +0000
Manifest this update: Sun 19 Oct 2025 19:01:06 +0000
Manifest next update: Mon 20 Oct 2025 19:01:06 +0000
Files and hashes: 1: dOQ_nlrj9ur7UGiuiPGMKeRDWQc.crl (hash: mz6i4MIaig46cmMNPsFcSGJlRqDiQ2pvxUp/kme3L2k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/da33ae-16cc-4c9a-bf9c-717998aa3cff/1/dOQ_nlrj9ur7UGiuiPGMKeRDWQc.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/da33ae-16cc-4c9a-bf9c-717998aa3cff/1/dOQ_nlrj9ur7UGiuiPGMKeRDWQc.mft
rsync://rpki.ripe.net/repository/DEFAULT/dOQ_nlrj9ur7UGiuiPGMKeRDWQc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d8:c6:09:aa:43:74:b0:02:58:c3:e5:e8:d3:78:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74e43f9e5ae3f6eafb5068ae88f18c29e4435907
Validity
Not Before: Oct 19 19:01:06 2025 GMT
Not After : Oct 20 19:01:06 2025 GMT
Subject: CN=32a4fc6e35e23524cc13a0e3f9ca08623e321604
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ef:3e:db:ed:35:b7:c5:d0:dd:87:d5:c9:fb:
96:58:fe:e0:7f:9f:48:19:0d:d4:a1:ad:65:7f:9e:
3f:0a:5c:6f:67:40:03:17:4c:19:58:a0:fb:00:5a:
bd:74:83:d1:c7:7b:17:37:61:61:a1:fa:22:76:da:
38:e1:1d:a5:82:8a:3c:b1:59:bd:8c:c9:3c:ac:e9:
09:a8:8a:6a:c1:40:ca:5c:94:d5:d7:b8:1d:5b:b3:
2a:41:1b:10:2a:cf:5b:c9:1b:27:5f:a7:62:fd:47:
21:f2:37:6d:c8:85:88:81:c5:55:eb:74:65:36:dc:
15:07:b1:1d:3c:96:8c:c5:96:68:42:b6:04:c2:de:
b0:61:a4:3e:de:fa:34:f6:d8:32:a6:21:10:d0:45:
66:2a:e8:5d:34:40:9d:63:95:98:0a:d0:37:68:d4:
0a:78:2c:0f:31:de:fc:4e:99:5f:d1:d7:6a:0c:67:
4f:bf:46:4e:b5:c0:b4:9a:c8:74:17:0b:1c:6a:23:
8a:bf:ba:30:24:40:e3:55:c2:16:6d:20:d8:c6:97:
32:ff:d4:b1:d9:68:f9:73:c7:d1:1d:cd:d5:0a:31:
59:02:9d:b8:92:11:a0:44:ec:05:c3:c1:3e:d7:2f:
ea:c9:a5:af:f2:4a:75:05:c5:34:d1:f4:e9:bf:c2:
4c:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:A4:FC:6E:35:E2:35:24:CC:13:A0:E3:F9:CA:08:62:3E:32:16:04
X509v3 Authority Key Identifier:
keyid:74:E4:3F:9E:5A:E3:F6:EA:FB:50:68:AE:88:F1:8C:29:E4:43:59:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dOQ_nlrj9ur7UGiuiPGMKeRDWQc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/da33ae-16cc-4c9a-bf9c-717998aa3cff/1/dOQ_nlrj9ur7UGiuiPGMKeRDWQc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/da33ae-16cc-4c9a-bf9c-717998aa3cff/1/dOQ_nlrj9ur7UGiuiPGMKeRDWQc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:44:b7:53:b3:7c:8f:0a:6e:27:1f:1a:49:fd:af:4e:4f:3b:
fe:4e:12:8a:7b:77:4e:41:dc:cb:3b:d6:5e:47:ec:eb:0b:63:
8c:c1:0a:da:6e:78:4f:41:22:f4:d2:50:db:fc:49:05:04:f0:
2a:c0:dd:2d:e5:e5:41:c5:03:3a:08:27:0c:f2:3a:81:4c:99:
47:d0:8d:a9:11:9a:73:64:ea:de:8e:fc:f8:ed:8b:78:72:c3:
86:6b:22:f5:6f:7e:f7:78:21:d9:f8:a7:e8:f8:47:57:c3:05:
c5:0a:14:e0:c8:27:90:55:0f:14:11:5d:e1:bc:5e:40:06:12:
d1:9d:31:5d:04:6b:bc:68:7d:91:fb:34:5d:11:09:a9:09:c9:
e7:bc:ce:0f:bc:7a:91:10:e1:c9:49:54:ad:dd:1a:4c:f9:47:
30:26:38:fc:fe:4c:1f:dd:3f:cd:bb:8a:71:47:d5:ed:7a:5d:
5c:3f:fc:ea:ae:79:75:f6:a2:5d:ee:07:ad:bc:22:f2:3e:99:
5f:24:51:50:6f:e9:af:36:ff:33:29:ea:82:60:9f:3d:2e:9c:
85:41:f7:d6:2c:a1:5b:63:a8:a5:4f:53:ae:be:bc:3e:04:11:
da:0b:be:3c:9c:80:b3:d7:06:3e:d3:6f:5a:67:3b:85:bf:aa:
55:05:c9:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 21:12:34 2025 by rpki-client