Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/6a75ce-3c16-4300-a332-548d085b455d/1/Df5SSMH7abOKMYjflHLozbyFwZM.mft
File: Df5SSMH7abOKMYjflHLozbyFwZM.mft (raw, json)
Hash identifier: +LZ+HjxqDbvpiRHu3D84k+7uBPWSdApkkYHS4QC1Nhk=
Subject key identifier: 36:E6:01:7C:19:F5:65:0E:15:E8:67:7A:63:54:B0:7D:EC:79:D0:3B
Authority key identifier: 0D:FE:52:48:C1:FB:69:B3:8A:31:88:DF:94:72:E8:CD:BC:85:C1:93
Certificate issuer: /CN=0dfe5248c1fb69b38a3188df9472e8cdbc85c193
Certificate serial: 0199FB7CDA7792D7CD39AF9D037765EB35FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Df5SSMH7abOKMYjflHLozbyFwZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/6a75ce-3c16-4300-a332-548d085b455d/1/Df5SSMH7abOKMYjflHLozbyFwZM.mft
Manifest number: 05C1
Signing time: Sun 19 Oct 2025 08:01:27 +0000
Manifest this update: Sun 19 Oct 2025 08:01:27 +0000
Manifest next update: Mon 20 Oct 2025 08:01:27 +0000
Files and hashes: 1: Df5SSMH7abOKMYjflHLozbyFwZM.crl (hash: DntEP0rcce+StM9vFZSSpuQud/PxxqwHissRV4zFAWI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/6a75ce-3c16-4300-a332-548d085b455d/1/Df5SSMH7abOKMYjflHLozbyFwZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/6a75ce-3c16-4300-a332-548d085b455d/1/Df5SSMH7abOKMYjflHLozbyFwZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Df5SSMH7abOKMYjflHLozbyFwZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 08:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:da:77:92:d7:cd:39:af:9d:03:77:65:eb:35:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dfe5248c1fb69b38a3188df9472e8cdbc85c193
Validity
Not Before: Oct 19 08:01:27 2025 GMT
Not After : Oct 20 08:01:27 2025 GMT
Subject: CN=36e6017c19f5650e15e8677a6354b07dec79d03b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:72:7a:2f:7e:ec:a0:af:cc:05:ad:12:96:24:
b3:fd:a5:c7:e8:6e:30:f3:06:62:90:53:99:51:8e:
4f:11:9c:fa:24:10:c2:e8:ac:1b:e2:cc:c9:85:50:
df:cc:b4:60:aa:f0:4d:d9:76:a4:3a:a6:a3:ff:52:
a1:e2:b0:68:20:95:c9:a8:3b:ad:c3:73:c8:c5:77:
40:53:a6:7c:a3:30:a1:2e:23:f3:e5:e2:34:78:e7:
f9:b9:e3:a8:ce:11:d4:f1:f3:33:37:2f:a4:31:3b:
c3:2f:97:c4:13:74:89:54:b9:a4:f4:8f:59:70:eb:
01:00:19:46:fe:c7:5f:86:fc:fb:a0:68:29:d3:8f:
66:48:4e:e8:86:a6:c5:d0:10:69:86:fe:b1:43:19:
0c:52:84:89:4f:12:65:b0:6f:3a:de:eb:74:9d:13:
1a:7d:3e:fe:96:7c:f3:5b:4f:98:06:da:94:89:3a:
1b:b4:8c:18:22:ce:44:f1:4b:12:4a:c7:4b:3b:1e:
c8:ac:4e:85:5c:5c:fa:6d:09:ab:6b:aa:d1:d3:bc:
9a:99:3c:92:1e:7c:97:a0:f3:6a:f3:cd:e1:70:2b:
23:61:1d:14:c9:ea:18:03:14:ef:3d:b3:79:3e:c2:
af:2f:08:ea:cf:4b:88:60:70:ef:d1:af:33:e7:91:
4a:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:E6:01:7C:19:F5:65:0E:15:E8:67:7A:63:54:B0:7D:EC:79:D0:3B
X509v3 Authority Key Identifier:
keyid:0D:FE:52:48:C1:FB:69:B3:8A:31:88:DF:94:72:E8:CD:BC:85:C1:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Df5SSMH7abOKMYjflHLozbyFwZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/6a75ce-3c16-4300-a332-548d085b455d/1/Df5SSMH7abOKMYjflHLozbyFwZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/6a75ce-3c16-4300-a332-548d085b455d/1/Df5SSMH7abOKMYjflHLozbyFwZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:f9:a3:1c:89:62:fd:d5:21:0e:29:fa:ef:84:31:e3:31:9c:
1b:d7:17:4b:0e:35:4b:1b:73:8c:b2:35:0f:cf:93:61:be:1e:
c5:91:01:83:1c:84:b3:2a:bf:9b:29:e3:3e:04:21:c6:bb:75:
81:49:eb:e1:af:a2:91:9a:60:34:a1:4a:67:53:a5:66:0c:0c:
9e:12:5e:0e:7b:3c:d6:1c:44:ee:75:fc:9f:7a:d8:93:4b:94:
dd:a1:11:00:ce:28:79:c1:02:cd:d2:14:31:54:6d:e4:8f:65:
e2:1f:6c:8d:91:9b:c5:16:0f:da:15:17:01:e3:ba:c0:16:91:
1f:65:16:24:ae:65:d2:d2:fe:4d:67:bf:57:53:cc:40:b6:08:
2c:65:4c:8e:d2:0e:b0:95:7c:54:95:77:ef:c1:46:a7:b1:f9:
d5:54:ba:d7:7e:ad:34:85:6d:d6:60:88:58:87:63:0c:43:77:
e9:f0:68:98:de:9f:d7:77:0c:99:3d:e9:03:3b:b1:a5:78:17:
3c:65:35:6e:2c:40:d6:87:86:f3:52:d4:a2:c2:50:fa:c8:db:
2c:92:11:ec:bb:9a:ee:49:e4:d3:55:39:90:74:d9:94:2c:28:
aa:a6:dd:97:88:8b:41:22:ed:09:1c:b8:83:1d:61:3a:f9:4b:
0d:29:44:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:55:25 2025 by rpki-client