Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/89fc51-d475-4eee-a970-930700ca617f/1/dC44IKB42kewo3Ti06ZtYmPB4j8.mft
File: dC44IKB42kewo3Ti06ZtYmPB4j8.mft (raw, json)
Hash identifier: moZHdYedOiU3QKV7Ffa/+THIrmmTDt7f1YYbCohLSfw=
Subject key identifier: 33:23:DF:57:51:EE:AA:D9:27:5D:2B:96:B9:4A:2A:9D:DA:DD:31:59
Authority key identifier: 74:2E:38:20:A0:78:DA:47:B0:A3:74:E2:D3:A6:6D:62:63:C1:E2:3F
Certificate issuer: /CN=742e3820a078da47b0a374e2d3a66d6263c1e23f
Certificate serial: 0199FDDA29DD17C69A6A1F0C3F05DAA0764F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dC44IKB42kewo3Ti06ZtYmPB4j8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/89fc51-d475-4eee-a970-930700ca617f/1/dC44IKB42kewo3Ti06ZtYmPB4j8.mft
Manifest number: 0FB3
Signing time: Sun 19 Oct 2025 19:02:37 +0000
Manifest this update: Sun 19 Oct 2025 19:02:37 +0000
Manifest next update: Mon 20 Oct 2025 19:02:37 +0000
Files and hashes: 1: dC44IKB42kewo3Ti06ZtYmPB4j8.crl (hash: GNuXCmoWJ/ImQLwBCEO/5kQL1DuJd0qfM7n6oD6DPII=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/89fc51-d475-4eee-a970-930700ca617f/1/dC44IKB42kewo3Ti06ZtYmPB4j8.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/89fc51-d475-4eee-a970-930700ca617f/1/dC44IKB42kewo3Ti06ZtYmPB4j8.mft
rsync://rpki.ripe.net/repository/DEFAULT/dC44IKB42kewo3Ti06ZtYmPB4j8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:da:29:dd:17:c6:9a:6a:1f:0c:3f:05:da:a0:76:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=742e3820a078da47b0a374e2d3a66d6263c1e23f
Validity
Not Before: Oct 19 19:02:37 2025 GMT
Not After : Oct 20 19:02:37 2025 GMT
Subject: CN=3323df5751eeaad9275d2b96b94a2a9ddadd3159
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:05:cd:30:8e:a2:7b:a0:30:29:20:09:9d:7b:
4e:77:91:4c:2a:c8:23:d0:e8:95:65:02:32:57:ae:
a2:66:84:ac:04:1f:88:f9:86:0c:da:19:d8:2f:04:
01:4d:f8:25:6d:1f:3c:b5:c6:76:38:6f:7d:20:af:
72:81:b1:2f:04:68:79:a9:0d:24:ab:7a:b0:04:61:
24:be:53:8e:10:95:ca:0c:4e:f0:43:6f:d0:6a:70:
04:ab:85:d6:e5:61:65:e8:24:93:dd:7a:bc:72:61:
5c:77:b1:55:cc:68:6f:56:ab:41:59:2d:e0:c2:d3:
f8:3c:9c:98:b0:74:61:78:21:3d:0a:93:d2:0c:fb:
9e:6d:13:2e:76:1c:5d:85:15:09:a9:ed:17:04:24:
52:fc:11:77:0a:a3:4c:e7:53:ad:f7:1f:4d:20:bb:
1a:d8:fa:08:7b:8c:10:2a:91:9f:c8:1d:7a:f8:5e:
50:ff:d2:10:b1:67:53:fe:18:bc:09:93:e1:d9:5c:
f9:0a:fb:ff:de:fd:35:89:d1:e9:34:4e:b3:62:5a:
be:0b:65:ed:ba:5c:dd:4f:16:03:6f:6e:ab:6f:67:
b0:15:d2:0a:56:cc:c2:05:85:1d:52:0b:21:89:c3:
b2:fb:ac:1a:87:a4:d4:68:e9:d3:03:0f:c4:ce:e7:
e2:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:23:DF:57:51:EE:AA:D9:27:5D:2B:96:B9:4A:2A:9D:DA:DD:31:59
X509v3 Authority Key Identifier:
keyid:74:2E:38:20:A0:78:DA:47:B0:A3:74:E2:D3:A6:6D:62:63:C1:E2:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dC44IKB42kewo3Ti06ZtYmPB4j8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/89fc51-d475-4eee-a970-930700ca617f/1/dC44IKB42kewo3Ti06ZtYmPB4j8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/89fc51-d475-4eee-a970-930700ca617f/1/dC44IKB42kewo3Ti06ZtYmPB4j8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:3a:b5:a6:b9:9b:45:e8:76:00:ae:b0:63:3d:94:41:42:c5:
b8:12:2e:25:ef:ef:f1:36:3c:ec:52:86:cc:8c:10:7f:89:e5:
5c:bf:32:c2:b2:3e:42:f1:0d:40:68:3c:38:0a:17:f8:b3:39:
51:73:f9:70:07:c7:d5:ca:0c:6e:c5:ca:07:f1:7e:ce:27:65:
db:dc:39:ac:ea:b1:4c:fa:9d:2b:d9:c4:df:02:d2:8a:fb:0d:
12:58:30:a1:55:90:3a:26:48:07:5c:13:71:a7:b8:e1:90:86:
ad:15:f1:6c:c3:c4:d1:9c:b2:c9:b2:70:3a:ee:5d:d6:36:d3:
23:14:c4:66:48:b7:ec:40:41:a3:83:97:c9:a3:9e:b4:ce:ed:
fd:c4:49:f2:33:90:2e:30:ac:87:d6:4f:2c:8b:e0:53:58:f8:
f5:8e:59:d7:14:f7:7c:ea:f0:71:55:98:b6:e8:87:22:d3:12:
c5:fb:e5:6c:d1:b5:76:fe:99:ab:0f:76:b6:af:da:9e:9a:1c:
47:03:e7:8c:b4:ee:3b:b4:db:96:f5:17:40:a2:76:a1:c7:a3:
53:60:dc:78:87:40:6b:e6:fb:df:bb:51:9f:94:a3:cc:14:61:
e0:37:8e:bc:fe:4d:27:31:38:99:77:38:3c:7f:1d:a2:f6:33:
b6:db:20:39
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn92indF8aaah8MPwXaoHZPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0MmUzODIwYTA3OGRhNDdiMGEzNzRlMmQzYTY2ZDYyNjNj
MWUyM2YwHhcNMjUxMDE5MTkwMjM3WhcNMjUxMDIwMTkwMjM3WjAzMTEwLwYDVQQD
EygzMzIzZGY1NzUxZWVhYWQ5Mjc1ZDJiOTZiOTRhMmE5ZGRhZGQzMTU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsAXNMI6ie6AwKSAJnXtOd5FMKsgj
0OiVZQIyV66iZoSsBB+I+YYM2hnYLwQBTfglbR88tcZ2OG99IK9ygbEvBGh5qQ0k
q3qwBGEkvlOOEJXKDE7wQ2/QanAEq4XW5WFl6CST3Xq8cmFcd7FVzGhvVqtBWS3g
wtP4PJyYsHRheCE9CpPSDPuebRMudhxdhRUJqe0XBCRS/BF3CqNM51Ot9x9NILsa
2PoIe4wQKpGfyB16+F5Q/9IQsWdT/hi8CZPh2Vz5Cvv/3v01idHpNE6zYlq+C2Xt
ulzdTxYDb26rb2ewFdIKVszCBYUdUgshicOy+6wah6TUaOnTAw/EzufiHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDMj31dR7qrZJ10rlrlKKp3a3TFZMB8GA1UdIwQY
MBaAFHQuOCCgeNpHsKN04tOmbWJjweI/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEM0NElLQjQya2V3bzNUaTA2WnRZbVBCNGo4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS84OWZjNTEtZDQ3NS00ZWVlLWE5NzAt
OTMwNzAwY2E2MTdmLzEvZEM0NElLQjQya2V3bzNUaTA2WnRZbVBCNGo4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS84OWZjNTEtZDQ3NS00ZWVlLWE5NzAtOTMwNzAwY2E2MTdm
LzEvZEM0NElLQjQya2V3bzNUaTA2WnRZbVBCNGo4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACzq1prmb
Reh2AK6wYz2UQULFuBIuJe/v8TY87FKGzIwQf4nlXL8ywrI+QvENQGg8OAoX+LM5
UXP5cAfH1coMbsXKB/F+zidl29w5rOqxTPqdK9nE3wLSivsNElgwoVWQOiZIB1wT
cae44ZCGrRXxbMPE0ZyyybJwOu5d1jbTIxTEZki37EBBo4OXyaOetM7t/cRJ8jOQ
LjCsh9ZPLIvgU1j49Y5Z1xT3fOrwcVWYtuiHItMSxfvlbNG1dv6Zqw92tq/anpoc
RwPnjLTuO7TblvUXQKJ2ocejU2DceIdAa+b737tRn5SjzBRh4DeOvP5NJzE4mXc4
PH8dovYzttsgOQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 22:36:58 2025 by rpki-client