Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/2f4796-4512-464d-b9de-880f8238fe0b/1/Dp842O8xOufFpwiU9m6HGjMYA_8.mft
File: Dp842O8xOufFpwiU9m6HGjMYA_8.mft (raw, json)
Hash identifier: acvV7wAI/BlY5jLccQHWpmwL1KH+Lr7m3keKu9olKVc=
Subject key identifier: 1F:9A:8E:14:06:A9:23:89:70:71:C1:30:DE:FD:D4:AF:36:AA:A0:0D
Authority key identifier: 0E:9F:38:D8:EF:31:3A:E7:C5:A7:08:94:F6:6E:87:1A:33:18:03:FF
Certificate issuer: /CN=0e9f38d8ef313ae7c5a70894f66e871a331803ff
Certificate serial: 0199FBEA9AF0B84FB2A5DD913712C952CF69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dp842O8xOufFpwiU9m6HGjMYA_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/2f4796-4512-464d-b9de-880f8238fe0b/1/Dp842O8xOufFpwiU9m6HGjMYA_8.mft
Manifest number: 16DF
Signing time: Sun 19 Oct 2025 10:01:20 +0000
Manifest this update: Sun 19 Oct 2025 10:01:20 +0000
Manifest next update: Mon 20 Oct 2025 10:01:20 +0000
Files and hashes: 1: Dp842O8xOufFpwiU9m6HGjMYA_8.crl (hash: l8sw0Zl8ZjdAJHcLSL+1MD0yYJ/Gp0kMRBcIY+jvces=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/2f4796-4512-464d-b9de-880f8238fe0b/1/Dp842O8xOufFpwiU9m6HGjMYA_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/2f4796-4512-464d-b9de-880f8238fe0b/1/Dp842O8xOufFpwiU9m6HGjMYA_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dp842O8xOufFpwiU9m6HGjMYA_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:9a:f0:b8:4f:b2:a5:dd:91:37:12:c9:52:cf:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e9f38d8ef313ae7c5a70894f66e871a331803ff
Validity
Not Before: Oct 19 10:01:20 2025 GMT
Not After : Oct 20 10:01:20 2025 GMT
Subject: CN=1f9a8e1406a923897071c130defdd4af36aaa00d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:a0:84:e9:1f:62:11:81:33:26:5b:95:92:3c:
26:6a:7e:6d:ba:29:e8:a0:b0:dc:61:0c:a6:59:cd:
ac:5b:34:b4:a2:3c:61:1b:d0:d4:a1:82:68:e1:a5:
60:ca:88:bf:15:df:3b:34:93:ff:26:68:e7:24:77:
87:ac:3b:92:e6:8e:4d:84:d3:36:99:c5:8b:23:c9:
44:1c:a1:ec:44:e9:a9:64:57:8b:37:c5:30:94:f6:
f3:4f:f6:53:93:5a:77:37:0c:ee:f1:33:ab:ea:f8:
09:f0:9f:db:c6:f1:54:f3:53:54:48:31:82:1d:be:
70:38:cb:67:8d:44:94:1f:55:0d:fd:3e:35:17:ec:
d7:4c:dd:c7:30:b7:d4:70:98:8f:c1:73:17:8a:01:
f8:9b:8e:11:8f:a8:ef:0c:cd:07:63:d5:ed:0e:28:
cb:77:bc:45:85:9f:12:7b:d1:d7:f5:14:47:88:fd:
62:46:9e:3f:f8:de:ab:41:1d:b9:44:7c:e4:37:76:
64:ff:f8:a0:54:ac:7a:28:2d:a8:fd:fb:42:d3:cf:
94:0c:95:64:9f:16:09:81:71:05:53:b2:ed:ae:21:
e2:4a:47:80:5d:cb:68:a3:fd:8b:97:54:db:76:95:
ab:fb:8a:e4:2f:dc:13:a1:a4:73:de:4f:74:27:4b:
13:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:9A:8E:14:06:A9:23:89:70:71:C1:30:DE:FD:D4:AF:36:AA:A0:0D
X509v3 Authority Key Identifier:
keyid:0E:9F:38:D8:EF:31:3A:E7:C5:A7:08:94:F6:6E:87:1A:33:18:03:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dp842O8xOufFpwiU9m6HGjMYA_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/2f4796-4512-464d-b9de-880f8238fe0b/1/Dp842O8xOufFpwiU9m6HGjMYA_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/2f4796-4512-464d-b9de-880f8238fe0b/1/Dp842O8xOufFpwiU9m6HGjMYA_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:6a:45:a0:c0:82:c1:2b:8d:ae:0c:45:8f:6c:78:bb:3a:8a:
94:b5:bd:1b:b0:fd:7c:92:fe:8a:db:ee:9c:9b:bd:8d:22:58:
8b:3d:96:2e:89:f3:9e:ef:cb:85:d5:94:06:05:25:46:61:b0:
fe:d0:3f:9b:da:4f:28:84:22:87:4e:3d:aa:f6:96:79:52:c0:
4d:74:75:5b:c1:cb:40:84:39:4d:cf:1d:ce:3a:34:fb:35:6e:
68:dc:07:83:bb:a1:35:c1:d4:05:58:f4:51:a1:56:ab:c0:50:
fe:7a:07:fd:93:a7:ee:55:6e:a1:4c:30:d0:0a:b8:80:1f:89:
4f:33:08:9e:bf:e8:3f:5d:f1:c0:c2:40:bb:a6:0e:1c:73:04:
59:00:b2:b8:95:87:7c:5c:b8:cf:b4:7a:f0:c4:37:3d:83:d9:
49:eb:33:80:49:ff:98:49:11:c8:12:63:db:fa:48:26:36:12:
d7:b8:7b:ea:33:0d:d4:c2:4e:97:1f:a5:d1:fd:b3:a4:91:e5:
31:15:b9:1c:f6:e8:c0:b7:47:31:4e:7f:da:e9:84:61:0c:a2:
bf:a6:c6:64:c4:eb:3c:f5:2e:ec:65:e3:c9:b4:da:26:9e:ce:
46:7d:0a:d2:a2:a2:41:57:54:d7:5a:19:12:c9:b3:95:65:1e:
0b:9e:19:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:24:03 2025 by rpki-client