Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/66b77e-5a29-47b5-b5a7-007e08b3af8f/1/DmuhOkKdJETI5sfYf-vxnVD-dQo.mft
File: DmuhOkKdJETI5sfYf-vxnVD-dQo.mft (raw, json)
Hash identifier: wYok52eVLkFRpcOWZYoKrAmMXKSIjWFsYwjnTSB5jLQ=
Subject key identifier: 74:17:E1:6E:CA:55:BC:FB:13:09:96:D8:78:85:E0:AE:08:C5:A8:86
Authority key identifier: 0E:6B:A1:3A:42:9D:24:44:C8:E6:C7:D8:7F:EB:F1:9D:50:FE:75:0A
Certificate issuer: /CN=0e6ba13a429d2444c8e6c7d87febf19d50fe750a
Certificate serial: 0199FBEA731607113FB578D292A7EA917AFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DmuhOkKdJETI5sfYf-vxnVD-dQo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/66b77e-5a29-47b5-b5a7-007e08b3af8f/1/DmuhOkKdJETI5sfYf-vxnVD-dQo.mft
Manifest number: 16DF
Signing time: Sun 19 Oct 2025 10:01:10 +0000
Manifest this update: Sun 19 Oct 2025 10:01:10 +0000
Manifest next update: Mon 20 Oct 2025 10:01:10 +0000
Files and hashes: 1: DmuhOkKdJETI5sfYf-vxnVD-dQo.crl (hash: MzygW++W2hfxUr0jeTMDBsMMiOxzYJsokugbXyYaRjU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/66b77e-5a29-47b5-b5a7-007e08b3af8f/1/DmuhOkKdJETI5sfYf-vxnVD-dQo.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/66b77e-5a29-47b5-b5a7-007e08b3af8f/1/DmuhOkKdJETI5sfYf-vxnVD-dQo.mft
rsync://rpki.ripe.net/repository/DEFAULT/DmuhOkKdJETI5sfYf-vxnVD-dQo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:73:16:07:11:3f:b5:78:d2:92:a7:ea:91:7a:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e6ba13a429d2444c8e6c7d87febf19d50fe750a
Validity
Not Before: Oct 19 10:01:10 2025 GMT
Not After : Oct 20 10:01:10 2025 GMT
Subject: CN=7417e16eca55bcfb130996d87885e0ae08c5a886
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:89:62:19:67:64:07:ca:e9:ec:89:c5:4b:9b:
03:17:9f:64:35:25:2e:cd:b4:ab:4b:fe:a1:1b:ff:
d1:b2:5b:25:85:48:39:a2:fe:fc:6f:8e:d0:b5:b7:
4e:28:0e:ec:29:0d:7b:18:4d:fb:62:f8:42:2c:32:
8d:87:3b:91:85:63:fc:d0:35:4e:09:46:23:7f:6c:
e4:7c:b5:18:14:b8:24:51:73:7b:ce:67:47:76:99:
36:e8:b7:04:cc:fc:6f:f1:9a:5c:f5:a1:c7:46:e7:
c2:1b:64:a3:2a:75:51:cf:b6:67:f1:75:19:60:f7:
d1:52:14:b9:8b:46:88:e0:b6:e3:18:64:08:02:aa:
c7:a1:8b:84:90:ca:85:27:91:94:c0:f9:0f:64:97:
17:97:b5:72:36:f9:6f:01:ba:d3:ac:ac:c3:69:9f:
d6:e4:9d:3a:0f:4e:96:9d:9e:c6:11:5c:33:66:2f:
15:40:b9:5f:eb:29:52:83:ac:f2:cf:e7:e2:6c:78:
9d:7e:43:a4:1e:08:83:d6:bd:97:74:b0:49:d8:e6:
e6:21:66:bd:90:7c:7b:87:64:1c:00:34:12:80:29:
1c:09:44:dd:18:80:0d:50:a7:9c:b6:b8:03:97:8c:
d6:c9:c3:3f:01:f3:13:75:dc:68:3f:72:37:a7:a0:
44:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:17:E1:6E:CA:55:BC:FB:13:09:96:D8:78:85:E0:AE:08:C5:A8:86
X509v3 Authority Key Identifier:
keyid:0E:6B:A1:3A:42:9D:24:44:C8:E6:C7:D8:7F:EB:F1:9D:50:FE:75:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DmuhOkKdJETI5sfYf-vxnVD-dQo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/66b77e-5a29-47b5-b5a7-007e08b3af8f/1/DmuhOkKdJETI5sfYf-vxnVD-dQo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/66b77e-5a29-47b5-b5a7-007e08b3af8f/1/DmuhOkKdJETI5sfYf-vxnVD-dQo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:3c:d5:a6:7c:94:20:1b:32:de:dc:1c:9b:40:b0:b1:40:fb:
84:85:e8:0d:9a:d8:c4:84:13:aa:0d:5e:dd:3e:82:24:ad:f5:
58:10:71:2a:a4:67:a3:9a:0a:8b:b0:ba:26:10:9d:58:b8:9b:
32:60:71:c1:e9:8c:db:35:13:65:25:57:c3:80:e3:e5:b3:c4:
e9:05:45:1c:43:e6:02:6f:44:ff:fe:09:cf:ab:6c:1e:29:ef:
5a:ad:a6:17:2c:c8:c2:f3:bb:7f:9d:6e:3e:08:45:fa:2f:b2:
a3:6a:3c:6a:a8:ce:95:fc:df:66:ac:fa:58:63:ba:53:f5:04:
81:55:2a:14:5c:d4:b5:31:06:9e:74:8a:fe:66:69:64:13:bf:
15:bc:aa:59:3a:d2:dc:fe:24:f3:02:b9:1c:85:21:a0:b5:db:
6d:37:c7:69:0b:21:91:5c:c4:c9:3a:76:41:95:db:30:e1:88:
a7:be:48:09:60:f8:a4:11:49:9b:e5:47:f0:31:ec:16:1f:6a:
cf:65:03:2e:6e:c1:11:09:38:34:bf:a0:8a:55:6e:87:3b:18:
90:67:dc:07:40:5b:0a:24:98:8a:22:a4:c7:55:0d:f5:7a:f2:
1a:34:aa:8c:b5:ab:18:26:d2:88:f7:88:ac:b0:aa:07:05:36:
9b:b7:f1:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:31:21 2025 by rpki-client