Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/427e2c-96f6-4e43-914a-8c7c54f3c5b0/1/daRvv8jeUjM5XHPeUflVO7doRgU.mft
File: daRvv8jeUjM5XHPeUflVO7doRgU.mft (raw, json)
Hash identifier: Cj5eYC4JXMal0Ex4UAdscyMb2Bvni9Z5IXVeWCiGayU=
Subject key identifier: 64:16:1D:00:AB:3C:19:1E:7D:7F:67:A5:F0:F9:24:0D:9B:7B:D5:12
Authority key identifier: 75:A4:6F:BF:C8:DE:52:33:39:5C:73:DE:51:F9:55:3B:B7:68:46:05
Certificate issuer: /CN=75a46fbfc8de5233395c73de51f9553bb7684605
Certificate serial: 0199FDD96C5E7A0B1972EF3FD8AAEAC62F66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/daRvv8jeUjM5XHPeUflVO7doRgU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/427e2c-96f6-4e43-914a-8c7c54f3c5b0/1/daRvv8jeUjM5XHPeUflVO7doRgU.mft
Manifest number: 16DE
Signing time: Sun 19 Oct 2025 19:01:48 +0000
Manifest this update: Sun 19 Oct 2025 19:01:48 +0000
Manifest next update: Mon 20 Oct 2025 19:01:48 +0000
Files and hashes: 1: daRvv8jeUjM5XHPeUflVO7doRgU.crl (hash: 69Sc5kfqzg+V4DlMOS5V+Dj/nHbRHMyZE/uADH0N+jE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/427e2c-96f6-4e43-914a-8c7c54f3c5b0/1/daRvv8jeUjM5XHPeUflVO7doRgU.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/427e2c-96f6-4e43-914a-8c7c54f3c5b0/1/daRvv8jeUjM5XHPeUflVO7doRgU.mft
rsync://rpki.ripe.net/repository/DEFAULT/daRvv8jeUjM5XHPeUflVO7doRgU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:6c:5e:7a:0b:19:72:ef:3f:d8:aa:ea:c6:2f:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75a46fbfc8de5233395c73de51f9553bb7684605
Validity
Not Before: Oct 19 19:01:48 2025 GMT
Not After : Oct 20 19:01:48 2025 GMT
Subject: CN=64161d00ab3c191e7d7f67a5f0f9240d9b7bd512
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:2a:6d:ef:d8:9e:88:c3:ed:74:97:5f:51:a8:
e7:3b:7d:d6:5c:85:f0:c7:2d:ab:ae:17:85:d7:24:
36:28:40:59:bd:60:d1:0e:f7:95:12:b6:8b:b0:20:
da:76:9b:e7:c2:b0:b1:7f:8c:aa:cd:19:41:05:86:
f1:8c:b0:a0:8d:39:c4:17:13:f3:ae:41:8b:2c:11:
2c:f4:5c:dd:4c:3c:66:31:4a:4f:b6:67:8d:ea:19:
49:0b:fd:3a:bb:3b:ec:13:94:6d:f5:45:27:07:2b:
87:7d:d1:5b:d3:3e:11:d3:2c:75:d7:cf:60:10:78:
46:70:47:9b:50:5f:3e:29:2e:c9:c5:84:74:ff:6e:
cd:e8:58:90:52:34:30:5b:39:35:1a:42:24:36:9c:
1b:39:47:60:e8:dc:76:d3:bb:9e:96:ad:0a:79:61:
b9:af:83:34:f2:ff:b8:4d:9d:39:8e:4a:f9:73:ad:
ee:cd:41:ba:33:6c:cc:bb:7b:43:91:cd:5d:ac:6b:
b6:ab:4e:7c:bd:35:7c:7d:bd:b3:b2:1c:b8:f4:73:
d8:ef:c7:96:62:93:23:ba:8e:a0:d0:bc:b4:66:a1:
6f:14:72:25:09:9d:c8:f1:33:9e:dd:cc:70:9a:76:
cc:78:61:98:bf:c9:6a:f3:91:67:94:ad:ea:e6:b0:
4d:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:16:1D:00:AB:3C:19:1E:7D:7F:67:A5:F0:F9:24:0D:9B:7B:D5:12
X509v3 Authority Key Identifier:
keyid:75:A4:6F:BF:C8:DE:52:33:39:5C:73:DE:51:F9:55:3B:B7:68:46:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/daRvv8jeUjM5XHPeUflVO7doRgU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/427e2c-96f6-4e43-914a-8c7c54f3c5b0/1/daRvv8jeUjM5XHPeUflVO7doRgU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/427e2c-96f6-4e43-914a-8c7c54f3c5b0/1/daRvv8jeUjM5XHPeUflVO7doRgU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:29:fb:4d:4a:55:36:df:a2:5e:6b:8e:b0:84:36:86:d3:2b:
12:29:a1:e9:83:a7:30:8f:63:38:97:07:8f:4f:f3:27:f9:a3:
26:18:d9:c7:53:3b:ea:9c:07:d3:1a:15:0a:58:be:14:71:23:
bf:4f:31:ac:8e:de:a4:f4:36:42:91:59:d2:5e:f5:1c:82:0a:
46:e2:14:85:ff:42:78:b2:d1:86:5b:97:1b:42:c3:82:55:21:
4d:17:06:d8:85:29:75:ac:d6:c2:e1:fb:29:b0:35:c1:da:a2:
f9:4c:3a:4c:ce:82:bf:16:46:58:6e:86:08:fc:41:4a:8b:ff:
b6:48:9a:54:b4:e2:f4:81:fb:34:b1:96:ae:16:5e:7d:74:04:
b1:25:dd:cd:26:3f:5f:87:b2:48:58:37:05:ae:7a:55:98:13:
e9:d9:9e:cb:85:f5:52:3d:76:d4:48:d5:90:03:ba:ad:9d:c6:
49:98:4d:af:2f:8c:d0:d9:c8:74:e7:19:77:63:bd:ef:00:27:
a3:d4:ff:6b:0f:ba:c2:64:40:21:5d:fa:f8:87:80:66:34:06:
07:68:bb:92:39:6d:aa:79:10:40:c5:0d:d5:bc:07:b3:e0:7b:
40:8f:bb:73:a9:d0:06:b5:bd:66:b5:36:d4:0a:a9:15:94:ce:
76:21:e1:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:07:13 2025 by rpki-client