Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/8c918e-3aaf-4aa6-8c4d-24ed40c9f389/1/DwxSlP25wrH3QxZPyWDAB-a_5gE.mft
File: DwxSlP25wrH3QxZPyWDAB-a_5gE.mft (raw, json)
Hash identifier: 5zDCzL9XpBj3ZDjaDPQG5xDwiWhUyFM2e7AsT5QV2Kw=
Subject key identifier: A7:96:06:78:80:0B:AF:45:03:87:6E:24:21:BD:CB:F6:CD:B6:BB:17
Authority key identifier: 0F:0C:52:94:FD:B9:C2:B1:F7:43:16:4F:C9:60:C0:07:E6:BF:E6:01
Certificate issuer: /CN=0f0c5294fdb9c2b1f743164fc960c007e6bfe601
Certificate serial: 0199FBEB984E7ADD052C060F1A6A52E1EB4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DwxSlP25wrH3QxZPyWDAB-a_5gE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/8c918e-3aaf-4aa6-8c4d-24ed40c9f389/1/DwxSlP25wrH3QxZPyWDAB-a_5gE.mft
Manifest number: 16DF
Signing time: Sun 19 Oct 2025 10:02:25 +0000
Manifest this update: Sun 19 Oct 2025 10:02:25 +0000
Manifest next update: Mon 20 Oct 2025 10:02:25 +0000
Files and hashes: 1: DwxSlP25wrH3QxZPyWDAB-a_5gE.crl (hash: 4G3LczoKyVX7oGnkHFfZnYoNGMGANRftaQK9DBNoIxE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/8c918e-3aaf-4aa6-8c4d-24ed40c9f389/1/DwxSlP25wrH3QxZPyWDAB-a_5gE.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/8c918e-3aaf-4aa6-8c4d-24ed40c9f389/1/DwxSlP25wrH3QxZPyWDAB-a_5gE.mft
rsync://rpki.ripe.net/repository/DEFAULT/DwxSlP25wrH3QxZPyWDAB-a_5gE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:98:4e:7a:dd:05:2c:06:0f:1a:6a:52:e1:eb:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f0c5294fdb9c2b1f743164fc960c007e6bfe601
Validity
Not Before: Oct 19 10:02:25 2025 GMT
Not After : Oct 20 10:02:25 2025 GMT
Subject: CN=a7960678800baf4503876e2421bdcbf6cdb6bb17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:8b:4e:c5:0a:3e:c0:0d:2d:1f:5a:6a:e7:c0:
90:5c:1d:5d:0f:67:4f:17:f5:c5:0e:43:9b:70:0a:
45:6f:3c:07:59:c2:00:e9:7f:d2:55:7c:2d:fb:76:
85:61:cc:cd:c0:46:87:ec:65:ee:af:84:06:e9:a9:
57:df:82:01:e1:e5:a1:62:01:55:f0:f8:df:1e:f1:
f5:51:40:f2:b1:ca:69:fe:04:98:5c:0c:f7:32:9d:
9a:92:19:d3:8c:0f:2c:9e:fb:12:22:e4:bd:61:87:
59:7a:b5:76:4e:38:11:8f:9d:7f:62:cd:18:1c:16:
18:4c:b1:a6:22:fc:08:b5:40:89:e6:de:0b:3b:20:
36:14:2c:d5:25:04:ec:48:b0:1d:d4:00:5a:a4:0d:
4e:f9:7b:12:ec:2e:74:1c:d4:95:6e:6f:a2:7f:e4:
79:17:fc:b6:9a:c9:f3:a9:7a:4d:50:85:1a:81:76:
a0:d0:a1:84:96:7e:a7:8c:67:60:09:85:f9:56:6c:
29:df:30:a0:96:a7:d8:65:cc:9b:84:60:f8:1c:7a:
d4:8e:9d:25:06:4e:87:5d:a1:f0:34:f1:23:40:79:
18:8d:09:c3:a8:36:37:00:96:9b:e6:b5:70:86:f4:
3f:fc:57:d2:38:7f:c8:e2:a1:86:3a:bc:bc:bd:15:
cd:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:96:06:78:80:0B:AF:45:03:87:6E:24:21:BD:CB:F6:CD:B6:BB:17
X509v3 Authority Key Identifier:
keyid:0F:0C:52:94:FD:B9:C2:B1:F7:43:16:4F:C9:60:C0:07:E6:BF:E6:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DwxSlP25wrH3QxZPyWDAB-a_5gE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8c918e-3aaf-4aa6-8c4d-24ed40c9f389/1/DwxSlP25wrH3QxZPyWDAB-a_5gE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8c918e-3aaf-4aa6-8c4d-24ed40c9f389/1/DwxSlP25wrH3QxZPyWDAB-a_5gE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:a4:d7:e5:db:ac:21:08:cf:de:b7:ca:6e:5d:be:33:00:0d:
c0:ec:90:63:6a:5c:50:b5:4c:62:d3:d4:3d:77:1a:8d:ba:81:
00:1c:55:d4:dc:9c:e0:a8:bd:7e:cd:33:e1:59:c4:01:5c:0a:
48:d7:6c:ce:46:a7:f5:50:21:4f:1b:5a:ba:cd:e7:55:2f:ea:
f6:bf:9b:86:87:23:85:76:6f:3d:6f:d2:ce:4f:ea:c0:31:ba:
78:f9:87:b8:6e:b3:67:53:8b:01:13:c4:ca:4a:79:84:ac:24:
2e:e3:c8:68:f9:63:16:f6:c5:2a:8f:73:7e:5e:ac:a9:3c:6b:
59:73:03:25:3c:b5:63:3f:f8:05:6e:17:95:b1:92:a7:15:8d:
fd:0f:28:66:35:34:be:e4:7a:30:82:d0:27:c9:f3:1e:b6:48:
7f:33:87:f4:6c:81:99:9f:38:f5:7b:9a:81:95:db:d1:8a:34:
74:13:62:07:bb:d5:13:fc:54:a4:d7:49:4b:78:3f:06:18:47:
61:62:69:7e:3b:f7:55:2b:ce:4c:bc:7c:0d:11:a0:81:e1:a5:
de:7d:8a:3f:81:c9:56:e1:88:f7:c0:b2:32:fe:f6:ca:50:dc:
5f:5b:dd:d5:a0:82:45:70:6c:bc:06:49:9c:bc:15:4b:65:66:
81:b8:4c:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:25:57 2025 by rpki-client