Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/143b40-583a-4a64-bdb1-a5e97cf3502d/1/d_6XGE2oKjbX6-P4WEAxW4qyIUw.mft
File: d_6XGE2oKjbX6-P4WEAxW4qyIUw.mft (raw, json)
Hash identifier: vOQ0TAPjh+dmiTJ2wwE2rNpsKAdOsHbtPJgv74Mt7Sg=
Subject key identifier: 88:32:3D:57:F6:FE:C8:02:88:37:BE:62:4A:0B:03:23:2B:16:25:A5
Authority key identifier: 77:FE:97:18:4D:A8:2A:36:D7:EB:E3:F8:58:40:31:5B:8A:B2:21:4C
Certificate issuer: /CN=77fe97184da82a36d7ebe3f85840315b8ab2214c
Certificate serial: 0199FC58279CE51848CFD9E30C74E1C5362F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d_6XGE2oKjbX6-P4WEAxW4qyIUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/143b40-583a-4a64-bdb1-a5e97cf3502d/1/d_6XGE2oKjbX6-P4WEAxW4qyIUw.mft
Manifest number: 037D
Signing time: Sun 19 Oct 2025 12:00:59 +0000
Manifest this update: Sun 19 Oct 2025 12:00:59 +0000
Manifest next update: Mon 20 Oct 2025 12:00:59 +0000
Files and hashes: 1: d_6XGE2oKjbX6-P4WEAxW4qyIUw.crl (hash: gc1AWQgajrg/XBF7LPOcxl0Hu+oXEMXICiUs3LbT93U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/143b40-583a-4a64-bdb1-a5e97cf3502d/1/d_6XGE2oKjbX6-P4WEAxW4qyIUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/143b40-583a-4a64-bdb1-a5e97cf3502d/1/d_6XGE2oKjbX6-P4WEAxW4qyIUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/d_6XGE2oKjbX6-P4WEAxW4qyIUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:27:9c:e5:18:48:cf:d9:e3:0c:74:e1:c5:36:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77fe97184da82a36d7ebe3f85840315b8ab2214c
Validity
Not Before: Oct 19 12:00:59 2025 GMT
Not After : Oct 20 12:00:59 2025 GMT
Subject: CN=88323d57f6fec8028837be624a0b03232b1625a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:37:e9:67:09:10:d7:96:3f:92:4f:fd:54:d7:
dc:75:e9:8c:f1:05:b4:00:41:07:09:44:32:99:12:
69:09:53:72:ad:98:67:44:bc:73:17:e0:8c:63:ba:
1c:15:bc:ed:dc:5a:5a:fd:ad:40:7d:3a:1d:cf:05:
52:91:eb:70:07:33:ae:0c:23:15:cf:40:8a:d9:90:
58:eb:6a:8a:54:38:f0:72:e6:b1:77:0c:ec:2a:db:
88:af:59:0b:58:62:01:ca:7b:9b:24:60:6a:40:87:
c9:ab:45:69:ac:e0:09:1d:18:79:8b:db:cf:ae:63:
b0:64:a2:b9:e5:dc:5e:95:8f:5a:c5:ac:cf:05:c5:
ac:a2:58:8b:7f:25:61:d8:a9:13:30:ee:bf:90:a2:
a5:d6:46:af:ac:e6:7f:e2:9e:46:07:06:c5:7e:ac:
15:f1:80:ae:5c:e7:52:ef:cb:41:5f:76:15:f5:5a:
51:42:2e:f9:ad:b9:71:b9:36:e3:8a:34:0f:4a:d6:
38:3e:54:4c:f0:97:bc:74:68:44:58:18:a2:bd:99:
b9:ea:ff:fa:41:3d:ec:13:25:c7:25:95:ae:61:8e:
93:cd:27:52:e1:5c:cf:5c:d7:25:7e:e1:b0:86:17:
70:8f:5a:a3:75:41:7c:39:d8:8d:fc:1d:0b:f9:01:
d9:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:32:3D:57:F6:FE:C8:02:88:37:BE:62:4A:0B:03:23:2B:16:25:A5
X509v3 Authority Key Identifier:
keyid:77:FE:97:18:4D:A8:2A:36:D7:EB:E3:F8:58:40:31:5B:8A:B2:21:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d_6XGE2oKjbX6-P4WEAxW4qyIUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/143b40-583a-4a64-bdb1-a5e97cf3502d/1/d_6XGE2oKjbX6-P4WEAxW4qyIUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/143b40-583a-4a64-bdb1-a5e97cf3502d/1/d_6XGE2oKjbX6-P4WEAxW4qyIUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:48:a3:4c:b9:eb:5f:21:db:c8:2e:da:23:ec:9e:bb:b6:72:
dc:18:73:77:91:7a:de:a6:ed:53:c2:f1:9e:8e:11:4f:93:fd:
87:ac:9b:06:e6:3f:e3:07:92:ec:c2:75:2f:24:5e:a3:c7:2e:
2d:aa:6d:cd:12:ae:f4:50:9c:cb:20:c2:a2:ca:0a:d7:8d:9c:
cc:22:08:87:df:7a:55:c3:b5:8e:e8:b0:ec:b3:9a:73:15:07:
c6:0a:6c:ba:33:e9:80:19:ed:e4:32:dd:28:87:af:f2:b9:bf:
4a:db:da:33:aa:4c:c0:8e:f8:e2:06:1e:72:8a:68:a9:70:59:
5d:0a:1f:6c:0a:54:b2:c5:6f:29:c7:ae:f4:8d:d8:73:bd:33:
5c:ee:f1:c9:5c:45:ca:11:66:44:b3:32:36:3d:e9:c6:30:e1:
9b:23:27:0d:a9:ef:d0:80:f4:f7:92:c5:0e:9f:98:00:30:1a:
6a:65:a4:ed:70:48:b3:80:0b:98:bb:8d:f6:c0:e1:5d:47:79:
5a:61:a3:2e:d1:19:4e:3e:ea:cd:ed:18:3e:ce:fa:0f:79:a7:
8f:8c:5a:49:ea:0a:b9:11:4f:50:e8:02:09:43:be:01:89:c1:
c1:5a:ff:ad:19:f2:f6:9a:3a:7e:fb:2f:cc:8b:ea:13:16:86:
60:64:f5:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:33:49 2025 by rpki-client