Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/b09218-89e7-4859-b32c-60e9b7dc550b/1/D48Gw1SUYI2azOsHCkzRarlf9qY.mft
File: D48Gw1SUYI2azOsHCkzRarlf9qY.mft (raw, json)
Hash identifier: EVAIn1LUxDNlyUGWmQagKmCmIslVsVso6iGfKU02ZYc=
Subject key identifier: 80:20:19:FA:A2:91:04:6D:11:B4:A4:03:8F:93:D4:2E:38:10:20:42
Authority key identifier: 0F:8F:06:C3:54:94:60:8D:9A:CC:EB:07:0A:4C:D1:6A:B9:5F:F6:A6
Certificate issuer: /CN=0f8f06c35494608d9acceb070a4cd16ab95ff6a6
Certificate serial: 0199FE103A7F22D2C014F1C3D65C751E7A28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D48Gw1SUYI2azOsHCkzRarlf9qY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/b09218-89e7-4859-b32c-60e9b7dc550b/1/D48Gw1SUYI2azOsHCkzRarlf9qY.mft
Manifest number: 02E9
Signing time: Sun 19 Oct 2025 20:01:40 +0000
Manifest this update: Sun 19 Oct 2025 20:01:40 +0000
Manifest next update: Mon 20 Oct 2025 20:01:40 +0000
Files and hashes: 1: D48Gw1SUYI2azOsHCkzRarlf9qY.crl (hash: IWX7ptZORm8IFZ20zoajYHV/sm402DXAgkZoNIbcGvQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/b09218-89e7-4859-b32c-60e9b7dc550b/1/D48Gw1SUYI2azOsHCkzRarlf9qY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/b09218-89e7-4859-b32c-60e9b7dc550b/1/D48Gw1SUYI2azOsHCkzRarlf9qY.mft
rsync://rpki.ripe.net/repository/DEFAULT/D48Gw1SUYI2azOsHCkzRarlf9qY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:10:3a:7f:22:d2:c0:14:f1:c3:d6:5c:75:1e:7a:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f8f06c35494608d9acceb070a4cd16ab95ff6a6
Validity
Not Before: Oct 19 20:01:40 2025 GMT
Not After : Oct 20 20:01:40 2025 GMT
Subject: CN=802019faa291046d11b4a4038f93d42e38102042
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:50:5c:a2:91:e2:c4:fa:17:41:df:1a:c6:c5:
36:18:a9:7d:99:25:71:c0:63:fd:52:4e:25:dd:3f:
97:9a:f2:f0:f1:e1:92:2d:99:a8:eb:47:9e:0e:13:
c3:ef:10:78:7f:46:87:3b:96:64:72:0e:cd:e4:9c:
a7:8f:76:c5:e7:6a:d9:f7:8b:8b:45:6c:ba:3b:b2:
30:3f:8e:6b:06:74:e3:45:0c:6a:6b:41:0e:0c:56:
5a:d8:d6:72:52:11:94:e8:26:93:84:68:2f:c9:6b:
3a:06:b1:a4:7a:9d:49:3b:a2:27:d8:ec:64:2c:c6:
4a:54:59:1d:22:8d:47:e0:e3:f4:84:ab:fa:00:81:
7d:b2:a0:06:a7:bd:58:50:6f:ed:bc:07:07:d0:bd:
b2:87:7b:65:5c:12:cf:27:3b:c0:a6:ba:bb:18:02:
6c:39:cc:d3:da:2d:65:fb:45:46:70:04:ad:3c:4d:
79:b8:a6:49:ce:c1:cf:e2:8c:15:59:ef:89:b4:57:
ca:2e:ff:05:82:05:84:ca:0a:4d:ce:a4:50:3e:d5:
8a:e2:04:a7:f2:22:90:f9:c3:0b:c0:b7:8f:13:52:
3c:be:8a:97:97:b9:ed:ca:27:60:7b:3f:37:95:a3:
0d:46:b0:61:2e:b4:22:4a:0b:f7:1c:75:f5:29:e5:
59:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:20:19:FA:A2:91:04:6D:11:B4:A4:03:8F:93:D4:2E:38:10:20:42
X509v3 Authority Key Identifier:
keyid:0F:8F:06:C3:54:94:60:8D:9A:CC:EB:07:0A:4C:D1:6A:B9:5F:F6:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D48Gw1SUYI2azOsHCkzRarlf9qY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/b09218-89e7-4859-b32c-60e9b7dc550b/1/D48Gw1SUYI2azOsHCkzRarlf9qY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/b09218-89e7-4859-b32c-60e9b7dc550b/1/D48Gw1SUYI2azOsHCkzRarlf9qY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:bd:44:30:7b:50:24:3b:91:66:9e:1a:5c:a7:1a:6f:d9:77:
2b:76:32:04:04:cb:48:57:ba:b5:9a:85:c9:5b:73:20:b9:83:
e0:7a:62:5d:62:9c:84:29:91:65:be:b7:19:83:cf:f2:06:17:
a3:96:46:14:7e:49:c3:44:55:b0:9a:2c:d8:07:07:3a:c2:52:
d0:5c:76:fa:7f:a2:83:35:41:08:dd:c0:c8:cf:5d:92:8a:00:
f4:f6:7c:e9:e9:8c:36:85:11:53:74:6f:6d:2a:4f:51:d9:f3:
d6:d9:79:e5:8e:20:b5:b3:dd:86:44:fd:05:f5:8c:69:54:09:
11:b8:f2:86:da:7d:23:48:95:36:f7:87:98:86:1c:c2:e3:6b:
50:8a:19:4a:a1:40:f1:30:98:59:cd:37:5a:18:20:4e:82:94:
60:12:a6:8b:19:29:56:f0:9f:9d:38:35:77:b0:21:2e:30:3e:
47:02:f5:d8:52:28:a5:cb:6a:41:74:22:87:17:e7:31:47:89:
ee:e7:c9:d3:f8:be:f8:38:74:5a:b3:8a:d9:c3:86:d5:dd:2b:
54:8f:7e:4c:2a:eb:94:27:e4:34:1b:d5:9c:9a:8b:de:62:ae:
73:39:39:ba:82:aa:9e:ad:11:05:16:f8:94:80:90:df:a4:06:
68:1f:d5:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:26:26 2025 by rpki-client