Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/a6777d-b778-442c-b82f-438d404edc2a/1/rDRA8w4wW8AFi4WbaKg0CgM7a0I.mft
File: rDRA8w4wW8AFi4WbaKg0CgM7a0I.mft (raw, json)
Hash identifier: C5YNQikplKi2+D7OyiUVVoKWLy6k3riRGnhV/fu/nJA=
Subject key identifier: D3:40:3F:FC:24:69:83:57:91:AE:2F:67:DB:5A:80:83:F1:CB:EE:48
Authority key identifier: AC:34:40:F3:0E:30:5B:C0:05:8B:85:9B:68:A8:34:0A:03:3B:6B:42
Certificate issuer: /CN=ac3440f30e305bc0058b859b68a8340a033b6b42
Certificate serial: 0199FFC8ACBA5CD87F8C3FB3F34C4A22D7EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rDRA8w4wW8AFi4WbaKg0CgM7a0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/a6777d-b778-442c-b82f-438d404edc2a/1/rDRA8w4wW8AFi4WbaKg0CgM7a0I.mft
Manifest number: 06D3
Signing time: Mon 20 Oct 2025 04:02:45 +0000
Manifest this update: Mon 20 Oct 2025 04:02:45 +0000
Manifest next update: Tue 21 Oct 2025 04:02:45 +0000
Files and hashes: 1: rDRA8w4wW8AFi4WbaKg0CgM7a0I.crl (hash: 6IRaKhf4wdCFGO8vr/tEbxnlejiX5N4j9Gw8esa8cRI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/a6777d-b778-442c-b82f-438d404edc2a/1/rDRA8w4wW8AFi4WbaKg0CgM7a0I.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/a6777d-b778-442c-b82f-438d404edc2a/1/rDRA8w4wW8AFi4WbaKg0CgM7a0I.mft
rsync://rpki.ripe.net/repository/DEFAULT/rDRA8w4wW8AFi4WbaKg0CgM7a0I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 04:02:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c8:ac:ba:5c:d8:7f:8c:3f:b3:f3:4c:4a:22:d7:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac3440f30e305bc0058b859b68a8340a033b6b42
Validity
Not Before: Oct 20 04:02:45 2025 GMT
Not After : Oct 21 04:02:45 2025 GMT
Subject: CN=d3403ffc2469835791ae2f67db5a8083f1cbee48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:5c:98:ee:2f:cd:c1:5e:28:4c:f1:cf:04:6f:
2c:79:94:91:2c:21:e8:b6:32:54:d3:f5:42:62:bf:
09:38:7e:ba:8e:8f:a4:c3:9f:0c:a2:c4:62:52:85:
36:fa:59:c2:08:57:1f:9c:d1:d3:cb:ef:27:32:51:
81:ef:87:2b:3a:3e:9d:c4:0a:9d:06:5f:a7:d1:0d:
28:a4:3a:b4:4d:ec:6f:94:36:dd:7d:f9:7d:ab:23:
1d:eb:7e:bb:71:5d:e6:0c:c7:bb:e6:4a:ef:68:35:
0b:2b:12:15:c4:7d:2f:3b:03:57:70:e6:93:39:be:
95:77:7d:1c:43:41:ca:e7:31:ee:28:ca:0e:27:f2:
cd:01:e5:81:c0:7b:ea:a9:b6:fb:85:05:ba:de:1c:
3e:9c:9d:74:1a:77:64:e1:4e:ff:01:c0:58:f3:32:
56:7b:3c:b2:62:81:fc:01:7e:71:18:52:39:70:86:
86:bc:aa:0e:94:0d:5a:5d:ec:02:d3:e2:f3:96:89:
42:e4:a8:19:b7:04:52:4a:30:af:1c:5f:d1:a0:b2:
3d:c2:a1:7a:8f:97:8d:ac:0c:cc:5d:81:75:67:13:
80:c9:00:d2:01:10:25:79:fc:f3:58:42:c8:82:83:
5f:c8:58:d8:ac:eb:4b:90:8b:2e:6a:48:f1:60:c4:
45:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:40:3F:FC:24:69:83:57:91:AE:2F:67:DB:5A:80:83:F1:CB:EE:48
X509v3 Authority Key Identifier:
keyid:AC:34:40:F3:0E:30:5B:C0:05:8B:85:9B:68:A8:34:0A:03:3B:6B:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rDRA8w4wW8AFi4WbaKg0CgM7a0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/a6777d-b778-442c-b82f-438d404edc2a/1/rDRA8w4wW8AFi4WbaKg0CgM7a0I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/a6777d-b778-442c-b82f-438d404edc2a/1/rDRA8w4wW8AFi4WbaKg0CgM7a0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:dc:c9:aa:61:dd:c9:82:23:cb:eb:d1:fe:dc:4e:e9:7b:54:
4f:5b:8a:a2:4b:bc:f3:d5:96:2e:a0:8c:a9:12:6b:fd:b3:05:
bb:06:3d:9a:aa:1d:ce:1d:2e:37:17:0e:22:7e:7c:5f:fe:0d:
49:62:79:6e:4d:8f:38:5a:28:1f:36:82:f1:d6:09:56:ef:04:
fb:36:0f:1e:3b:51:4c:06:a6:33:53:31:be:b9:84:b7:eb:89:
5e:7b:95:54:25:8a:b2:31:19:44:53:56:b0:db:2c:86:85:7a:
0e:b1:c9:b4:21:5c:ea:d2:fd:13:b6:bd:47:f2:5a:f9:05:52:
94:81:a0:ee:84:78:2e:3c:3c:d1:76:79:d2:6f:e8:19:80:ca:
ce:47:87:ba:7d:f2:7a:23:9b:57:7f:61:39:15:38:b5:f9:79:
46:82:03:0d:58:25:46:6e:9b:99:3c:68:8a:f6:98:95:e6:51:
2a:c4:a6:04:62:19:5a:a6:a3:dc:13:cb:9e:e8:37:f6:c0:f7:
1e:59:dd:ac:22:ab:1b:40:aa:32:09:3b:90:af:e7:25:66:d5:
d2:ef:aa:8d:d3:0b:74:7a:6d:08:8d:e7:c9:0c:e4:90:95:d5:
27:d0:30:17:3a:47:b8:c9:2b:d3:f7:bd:46:cb:7a:a8:70:ab:
b6:13:68:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:40:16 2025 by rpki-client