Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/df99d3-5028-4361-b795-3af4a9463b77/1/Dv0crRIZAnVQiePKgLptfMxLm3E.mft
File: Dv0crRIZAnVQiePKgLptfMxLm3E.mft (raw, json)
Hash identifier: 4QfonWbZxoAgGPCBTT5nMU380KDXZOJmnW5yYZuwpW4=
Subject key identifier: 1C:FC:BE:F1:EF:00:40:DF:95:40:DF:91:D8:6A:68:2B:50:BB:E6:15
Authority key identifier: 0E:FD:1C:AD:12:19:02:75:50:89:E3:CA:80:BA:6D:7C:CC:4B:9B:71
Certificate issuer: /CN=0efd1cad121902755089e3ca80ba6d7ccc4b9b71
Certificate serial: 0199FCFD53BE64BA0B92414D9333DC867554
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dv0crRIZAnVQiePKgLptfMxLm3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/df99d3-5028-4361-b795-3af4a9463b77/1/Dv0crRIZAnVQiePKgLptfMxLm3E.mft
Manifest number: 0CDE
Signing time: Sun 19 Oct 2025 15:01:24 +0000
Manifest this update: Sun 19 Oct 2025 15:01:24 +0000
Manifest next update: Mon 20 Oct 2025 15:01:24 +0000
Files and hashes: 1: Dv0crRIZAnVQiePKgLptfMxLm3E.crl (hash: l/wVWMNJl8jPVT5qB6C3mTkjGc5FynTKvuXbgRpkKuI=)
2: kzypufx1A54QL9RnefA55meWSPM.roa (hash: cK+sc1FxI2UgckK1YuVxFsSFuYcOk8chhmHAVw1PhQ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/df99d3-5028-4361-b795-3af4a9463b77/1/Dv0crRIZAnVQiePKgLptfMxLm3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/df99d3-5028-4361-b795-3af4a9463b77/1/Dv0crRIZAnVQiePKgLptfMxLm3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dv0crRIZAnVQiePKgLptfMxLm3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:53:be:64:ba:0b:92:41:4d:93:33:dc:86:75:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0efd1cad121902755089e3ca80ba6d7ccc4b9b71
Validity
Not Before: Oct 19 15:01:24 2025 GMT
Not After : Oct 20 15:01:24 2025 GMT
Subject: CN=1cfcbef1ef0040df9540df91d86a682b50bbe615
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:50:ca:2e:91:f5:1d:43:63:73:d3:db:59:6d:
4c:5d:88:9b:b3:85:e3:5e:85:2a:3e:39:f7:34:d6:
2e:ee:20:f8:8b:60:83:f4:26:0f:68:2c:d8:a1:63:
0f:5e:11:45:70:f9:e1:5f:48:3c:2a:ba:ae:9a:18:
6a:6b:63:60:38:ad:3b:74:13:74:99:9e:a0:0c:92:
d6:46:52:a2:59:f0:d6:8c:58:14:76:a0:46:0e:2e:
5b:e9:e4:f3:c1:c6:1d:4c:1b:3e:6e:49:ac:87:4b:
24:88:e1:d1:58:2a:1e:9e:91:f8:3a:12:7a:12:e8:
67:0d:65:88:88:58:79:d6:35:92:5f:e0:5f:6d:b4:
2e:aa:23:a5:e5:51:e5:7d:1c:e3:fa:f1:58:52:c9:
e1:c1:9b:1d:10:85:a7:a7:6d:52:e2:00:bd:67:b2:
8d:50:93:4d:9f:02:50:ce:ae:ea:b3:50:9e:09:d7:
51:c8:3a:fe:dd:ac:52:fc:6e:45:c4:ee:78:99:80:
2a:86:77:0e:97:44:e0:03:49:4d:a9:5b:a8:fa:2b:
4f:3d:51:45:0f:1c:2d:7e:75:75:f5:05:4f:55:17:
9c:64:46:20:f9:55:0c:47:a3:9d:a6:66:76:88:ac:
72:0e:0e:40:98:ae:87:7c:26:0c:85:b6:e9:f2:da:
83:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:FC:BE:F1:EF:00:40:DF:95:40:DF:91:D8:6A:68:2B:50:BB:E6:15
X509v3 Authority Key Identifier:
keyid:0E:FD:1C:AD:12:19:02:75:50:89:E3:CA:80:BA:6D:7C:CC:4B:9B:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dv0crRIZAnVQiePKgLptfMxLm3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/df99d3-5028-4361-b795-3af4a9463b77/1/Dv0crRIZAnVQiePKgLptfMxLm3E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/df99d3-5028-4361-b795-3af4a9463b77/1/Dv0crRIZAnVQiePKgLptfMxLm3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:fe:55:9e:50:fd:18:e6:a0:44:cf:a7:3a:f2:fb:bb:4b:c0:
f2:65:55:60:02:32:8a:97:eb:a7:76:e3:0e:36:f5:de:cd:2e:
e8:c3:84:4a:3e:24:d0:eb:1b:34:de:ae:30:f6:e4:6e:7d:99:
6b:3d:43:cd:b1:93:32:fc:6b:38:d5:93:cf:49:b1:7b:21:b5:
cd:b3:7a:11:0a:da:68:9c:33:5e:39:f1:49:6c:2d:7c:19:6d:
32:44:8f:5f:ff:61:49:94:ef:5b:fe:51:10:9f:d5:ed:ef:94:
62:37:ab:32:ae:7e:e5:3a:ff:6e:1e:63:e3:d5:b1:01:4e:e8:
cb:19:0f:1b:02:b3:b3:ea:db:c8:92:b0:01:47:70:cb:8a:51:
b0:b1:23:5e:00:18:c8:fe:f9:4f:9e:7d:28:d0:7a:c6:8d:26:
b1:35:ef:30:26:00:2f:a9:97:5b:13:88:e9:ce:c6:e6:dd:67:
a8:f0:23:1d:e7:84:41:86:a8:b6:4b:99:c5:7d:8f:0d:51:c2:
6d:6c:83:8b:43:14:5a:5f:a6:c0:d6:47:73:9c:b8:f2:7e:fd:
b0:7e:30:df:74:6a:39:fb:63:87:89:cd:f2:ec:0b:9b:e5:2c:
aa:df:16:48:f2:62:35:83:10:c3:2e:6d:99:67:5b:d8:e2:44:
2d:7b:b2:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:00:30 2025 by rpki-client