Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/909975-4e86-4478-b81e-72df6fedd748/1/Dx1bnYi1edDd98Ics9OH1h6lFsE.mft
File: Dx1bnYi1edDd98Ics9OH1h6lFsE.mft (raw, json)
Hash identifier: 20MZcWsO+S3G+hCdYMlvnUWP6Zm9nSJIb4wmFDhX6P0=
Subject key identifier: CD:DB:4C:93:12:94:62:17:22:83:8B:C2:5C:2E:37:74:6D:56:F1:59
Authority key identifier: 0F:1D:5B:9D:88:B5:79:D0:DD:F7:C2:1C:B3:D3:87:D6:1E:A5:16:C1
Certificate issuer: /CN=0f1d5b9d88b579d0ddf7c21cb3d387d61ea516c1
Certificate serial: 0199FD346A829E7815C1EBE3C8A416156582
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dx1bnYi1edDd98Ics9OH1h6lFsE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/909975-4e86-4478-b81e-72df6fedd748/1/Dx1bnYi1edDd98Ics9OH1h6lFsE.mft
Manifest number: 16DF
Signing time: Sun 19 Oct 2025 16:01:34 +0000
Manifest this update: Sun 19 Oct 2025 16:01:34 +0000
Manifest next update: Mon 20 Oct 2025 16:01:34 +0000
Files and hashes: 1: Dx1bnYi1edDd98Ics9OH1h6lFsE.crl (hash: RFrFIUVdXdwmtVJtK7fKYrBfHTK05EWEaU522o/+RP4=)
2: v4JI5sgw_p3rivCunMet_POOF2w.roa (hash: HrxRsSTft3bYHQ8KkRnRYehAe6cSQ1K0zkkE09H7dNQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/909975-4e86-4478-b81e-72df6fedd748/1/Dx1bnYi1edDd98Ics9OH1h6lFsE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/909975-4e86-4478-b81e-72df6fedd748/1/Dx1bnYi1edDd98Ics9OH1h6lFsE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dx1bnYi1edDd98Ics9OH1h6lFsE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:6a:82:9e:78:15:c1:eb:e3:c8:a4:16:15:65:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f1d5b9d88b579d0ddf7c21cb3d387d61ea516c1
Validity
Not Before: Oct 19 16:01:34 2025 GMT
Not After : Oct 20 16:01:34 2025 GMT
Subject: CN=cddb4c931294621722838bc25c2e37746d56f159
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:2f:87:b5:db:7b:64:66:3c:57:2e:99:af:b5:
4d:ff:6c:0c:84:84:f5:a8:79:1f:1e:9e:92:2f:10:
d4:5c:cc:a7:83:cb:2d:da:c8:c0:e1:59:50:75:6c:
c6:6d:c4:e1:16:57:c4:d6:87:16:36:c8:2a:e5:76:
5c:ac:d0:65:7f:50:f4:23:91:d6:9c:51:cb:0c:28:
25:b0:ae:43:27:17:45:fe:00:4e:41:46:48:36:4a:
39:94:42:d7:26:b5:eb:ef:d4:0f:3e:70:29:6b:ad:
92:7d:a0:9a:af:50:2d:70:54:99:15:8f:9c:12:aa:
72:fc:0b:a4:44:17:2a:d6:c4:d0:49:14:b6:f1:7d:
4f:f4:11:a8:d8:5d:26:0b:ef:04:30:81:41:6c:46:
d3:6d:c0:dd:65:55:e4:b4:52:94:64:f1:1a:eb:54:
16:45:30:3c:f9:01:41:76:78:88:ea:f0:64:33:78:
ce:0a:a4:a0:a9:14:12:4f:71:aa:75:cf:01:19:32:
ed:dd:f1:90:01:e5:64:8b:06:6b:7a:ce:41:66:96:
6f:02:7c:0c:9d:05:f3:81:ca:f8:a6:dd:9b:2c:bb:
e5:f8:0e:58:6e:d2:49:8a:c1:4a:a8:f7:2e:64:30:
19:fb:04:6d:0a:2a:61:99:74:8b:d1:4f:ae:af:67:
f7:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:DB:4C:93:12:94:62:17:22:83:8B:C2:5C:2E:37:74:6D:56:F1:59
X509v3 Authority Key Identifier:
keyid:0F:1D:5B:9D:88:B5:79:D0:DD:F7:C2:1C:B3:D3:87:D6:1E:A5:16:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dx1bnYi1edDd98Ics9OH1h6lFsE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/909975-4e86-4478-b81e-72df6fedd748/1/Dx1bnYi1edDd98Ics9OH1h6lFsE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/909975-4e86-4478-b81e-72df6fedd748/1/Dx1bnYi1edDd98Ics9OH1h6lFsE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:50:2c:7f:1f:a3:37:3d:27:91:de:c5:1d:49:c1:77:12:64:
00:d1:02:24:dd:17:30:9e:07:75:b7:a5:75:fd:98:b8:53:2e:
83:fd:c2:1b:0b:28:e9:8f:26:fe:28:35:3c:4e:02:a9:ca:46:
7d:35:5d:78:0d:3d:ce:ae:43:ad:fa:c7:18:4f:b5:2c:12:e9:
ea:fa:ff:5c:7a:98:a3:ea:a9:9b:77:48:91:9d:98:ec:88:23:
28:e2:c4:d0:45:d3:1e:32:9a:a9:f5:59:11:16:09:86:cc:6e:
51:9f:35:32:a2:aa:61:1e:a1:ec:f8:7f:7a:45:6e:c4:fc:cc:
48:3b:0c:27:72:81:e0:c9:2f:df:cd:10:dc:a2:9c:86:e3:34:
76:81:aa:6d:12:28:b3:53:26:4f:c0:d4:4f:aa:0c:15:bc:0d:
b3:a5:b0:3d:54:8e:c3:c9:62:23:83:a4:bb:a7:2e:bc:80:3b:
1a:e9:56:35:9d:d8:37:26:95:3b:e6:18:c5:6d:7e:9b:6d:f1:
e4:a6:78:e2:4f:50:69:02:e7:32:e8:c0:1e:2f:a5:cc:a0:ea:
c5:71:ac:0e:c6:1f:eb:3c:dc:a3:6d:fd:75:bd:08:ea:61:d2:
76:53:40:96:22:32:40:d5:ac:96:0b:e1:22:c9:bb:47:f7:8d:
f1:e5:c5:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:29:50 2025 by rpki-client