Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/440cb1-b6f5-48cf-8886-e144ab19c5d1/1/D7o0uxz-i22g8bKwUkBsPpFhvyM.mft
File: D7o0uxz-i22g8bKwUkBsPpFhvyM.mft (raw, json)
Hash identifier: zJzMT7/pjYNoL5IUmI1x7iVf/6/cpfeTYshMz/l05Vk=
Subject key identifier: 5B:F8:BF:FF:C5:4C:89:E7:EE:61:F7:CF:18:27:9B:B0:F7:DF:6B:04
Authority key identifier: 0F:BA:34:BB:1C:FE:8B:6D:A0:F1:B2:B0:52:40:6C:3E:91:61:BF:23
Certificate issuer: /CN=0fba34bb1cfe8b6da0f1b2b052406c3e9161bf23
Certificate serial: 0199FBEBB77E23B69A2093CA82440BC11EE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D7o0uxz-i22g8bKwUkBsPpFhvyM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/440cb1-b6f5-48cf-8886-e144ab19c5d1/1/D7o0uxz-i22g8bKwUkBsPpFhvyM.mft
Manifest number: 16DE
Signing time: Sun 19 Oct 2025 10:02:33 +0000
Manifest this update: Sun 19 Oct 2025 10:02:33 +0000
Manifest next update: Mon 20 Oct 2025 10:02:33 +0000
Files and hashes: 1: D7o0uxz-i22g8bKwUkBsPpFhvyM.crl (hash: gIzTMS16x3hjQAqLCxMPBrWuNZumtbG/u9V81LtF8gA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/440cb1-b6f5-48cf-8886-e144ab19c5d1/1/D7o0uxz-i22g8bKwUkBsPpFhvyM.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/440cb1-b6f5-48cf-8886-e144ab19c5d1/1/D7o0uxz-i22g8bKwUkBsPpFhvyM.mft
rsync://rpki.ripe.net/repository/DEFAULT/D7o0uxz-i22g8bKwUkBsPpFhvyM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:b7:7e:23:b6:9a:20:93:ca:82:44:0b:c1:1e:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fba34bb1cfe8b6da0f1b2b052406c3e9161bf23
Validity
Not Before: Oct 19 10:02:33 2025 GMT
Not After : Oct 20 10:02:33 2025 GMT
Subject: CN=5bf8bfffc54c89e7ee61f7cf18279bb0f7df6b04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:9a:f6:ad:90:a6:f6:39:d6:eb:bb:fd:c9:fc:
bf:34:e7:77:41:f2:be:c5:99:a9:a9:2b:30:d5:d7:
99:1a:f8:3c:38:27:a2:bb:9f:b5:4b:af:47:ec:1a:
2f:73:58:47:66:85:55:cd:44:31:b5:83:a0:a0:7e:
e0:a8:03:cb:0c:df:b9:8d:cb:8d:27:c5:2d:79:7f:
d7:07:25:47:a5:0a:f3:a6:aa:e3:62:c3:ec:ff:9e:
2f:e6:a1:7b:73:31:ac:7a:9a:16:a4:9e:9c:c8:0f:
a3:46:01:e8:61:10:a5:a9:1d:f9:99:18:e0:d1:e1:
6c:26:c2:aa:1c:97:ff:65:69:8c:7c:b5:15:69:42:
61:7d:fc:ef:42:09:f6:00:9b:6a:95:b6:03:90:43:
a5:61:77:70:65:57:9c:8f:c5:91:09:ed:e9:a5:f4:
a3:72:f2:ec:34:b4:94:66:b3:5e:0b:e4:ec:a5:af:
7a:9e:cd:a5:91:cb:6f:6e:2a:65:3f:bf:e3:7a:81:
56:fb:36:bc:16:41:b9:10:25:13:5a:15:7f:cf:27:
52:27:53:9d:a0:9d:c5:69:de:f4:c7:15:11:15:86:
05:6c:f5:36:b1:e6:51:33:31:04:33:18:cd:a7:4c:
6c:d0:62:36:39:26:5f:13:26:dd:a8:25:3c:7b:34:
c2:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:F8:BF:FF:C5:4C:89:E7:EE:61:F7:CF:18:27:9B:B0:F7:DF:6B:04
X509v3 Authority Key Identifier:
keyid:0F:BA:34:BB:1C:FE:8B:6D:A0:F1:B2:B0:52:40:6C:3E:91:61:BF:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D7o0uxz-i22g8bKwUkBsPpFhvyM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/440cb1-b6f5-48cf-8886-e144ab19c5d1/1/D7o0uxz-i22g8bKwUkBsPpFhvyM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/440cb1-b6f5-48cf-8886-e144ab19c5d1/1/D7o0uxz-i22g8bKwUkBsPpFhvyM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:f8:60:16:56:d6:af:4f:ec:4e:8a:ca:00:41:a9:97:57:de:
48:2e:42:10:08:9a:c5:35:49:26:13:f2:8b:0f:d6:92:0a:65:
ee:94:8a:0f:59:2a:76:c9:a9:ce:8d:4a:82:2e:50:96:12:f1:
8a:c4:99:75:0a:f0:e2:2a:43:60:cb:dd:57:c8:9b:f2:68:af:
e7:23:f7:10:2c:98:f1:68:7c:fe:74:3b:3a:c2:10:02:a5:39:
88:03:21:a0:2b:ee:f6:79:10:d7:8f:08:8c:60:51:ba:34:f5:
75:45:c6:29:68:fc:9a:06:d2:2c:62:e3:89:7e:94:ad:fe:6d:
a6:83:c6:d3:a3:cf:ff:d3:4f:b5:82:b8:2d:f9:54:40:21:bf:
ab:ba:9f:1f:68:bc:f1:2b:e4:ad:96:92:47:2e:1a:0e:90:2b:
b8:2a:dc:33:a7:08:2d:10:f8:ca:76:2a:ac:54:bc:0f:13:b6:
ad:2c:b2:8d:15:70:c5:6e:98:04:2e:27:a1:54:63:56:01:ea:
20:a9:de:fa:ec:59:c3:61:f0:15:68:3c:0f:96:d8:d3:30:ff:
25:35:95:6f:02:0f:5c:97:3b:7a:1c:86:d5:a1:9f:f4:ef:33:
bf:77:16:9a:3e:ab:e4:a7:41:27:2e:37:68:73:3e:8e:a4:e0:
34:99:75:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:43:32 2025 by rpki-client