Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/dece63-f0c0-465b-ad82-c8751f954524/1/dlIO_x7h4o493PuJ58tvfYmnfJw.mft
File: dlIO_x7h4o493PuJ58tvfYmnfJw.mft (raw, json)
Hash identifier: 57r71N2bbpu29rPNFAh9gCyIwZ2tldlCw+QAG6KiCZA=
Subject key identifier: EF:64:2C:5D:2A:44:11:0A:62:28:CC:C7:51:B2:B4:B5:4E:5F:73:6B
Authority key identifier: 76:52:0E:FF:1E:E1:E2:8E:3D:DC:FB:89:E7:CB:6F:7D:89:A7:7C:9C
Certificate issuer: /CN=76520eff1ee1e28e3ddcfb89e7cb6f7d89a77c9c
Certificate serial: 0199FC215F56C8F26B416995A72A2E752AE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dlIO_x7h4o493PuJ58tvfYmnfJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/dece63-f0c0-465b-ad82-c8751f954524/1/dlIO_x7h4o493PuJ58tvfYmnfJw.mft
Manifest number: 026E
Signing time: Sun 19 Oct 2025 11:01:09 +0000
Manifest this update: Sun 19 Oct 2025 11:01:09 +0000
Manifest next update: Mon 20 Oct 2025 11:01:09 +0000
Files and hashes: 1: dlIO_x7h4o493PuJ58tvfYmnfJw.crl (hash: VfaKICZ46NNv8tHnpSxPwTzI+mIydTbwuKiSOLS8jRQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/dece63-f0c0-465b-ad82-c8751f954524/1/dlIO_x7h4o493PuJ58tvfYmnfJw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/dece63-f0c0-465b-ad82-c8751f954524/1/dlIO_x7h4o493PuJ58tvfYmnfJw.mft
rsync://rpki.ripe.net/repository/DEFAULT/dlIO_x7h4o493PuJ58tvfYmnfJw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:5f:56:c8:f2:6b:41:69:95:a7:2a:2e:75:2a:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76520eff1ee1e28e3ddcfb89e7cb6f7d89a77c9c
Validity
Not Before: Oct 19 11:01:09 2025 GMT
Not After : Oct 20 11:01:09 2025 GMT
Subject: CN=ef642c5d2a44110a6228ccc751b2b4b54e5f736b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:14:bd:66:2d:97:54:c5:02:c1:82:9e:ce:fe:
50:21:17:d3:f0:ba:31:a1:23:d7:d9:cb:2a:a8:92:
82:77:9c:6c:9f:03:9b:13:4d:c8:9c:9f:50:50:4f:
4b:c9:1c:f1:d2:b9:32:52:aa:d5:21:7f:23:81:92:
55:99:3b:90:86:9c:0c:f0:51:92:11:cf:58:f0:17:
5a:87:ed:a5:9a:db:51:ca:2d:74:b9:00:62:1e:07:
73:60:fc:e7:58:dc:19:53:06:ce:03:b1:3f:b3:cf:
4d:80:1d:43:45:aa:f2:09:d4:a3:43:f5:61:1d:ea:
d9:d7:e5:95:6d:6a:94:f3:07:f1:8c:17:a3:11:0f:
7f:ac:97:89:81:30:d7:1f:0c:e2:57:f3:76:8d:5a:
59:e3:ff:dc:cf:38:ac:37:dc:7b:ea:08:72:97:89:
d8:c7:24:1b:a7:4f:34:ef:ce:2d:4c:ae:b2:4f:20:
14:c2:36:36:de:cb:64:cc:ce:2e:ce:da:74:d2:9d:
da:bd:21:a7:f0:8a:a5:7b:0c:88:d6:7b:ba:d7:ba:
d1:7e:a7:45:71:de:50:85:5a:06:5a:06:31:93:5c:
eb:84:9b:11:38:c8:8f:ca:74:a7:e7:5a:f5:aa:61:
54:52:da:65:5e:8d:61:42:0b:77:bd:41:fc:ec:28:
89:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:64:2C:5D:2A:44:11:0A:62:28:CC:C7:51:B2:B4:B5:4E:5F:73:6B
X509v3 Authority Key Identifier:
keyid:76:52:0E:FF:1E:E1:E2:8E:3D:DC:FB:89:E7:CB:6F:7D:89:A7:7C:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dlIO_x7h4o493PuJ58tvfYmnfJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/dece63-f0c0-465b-ad82-c8751f954524/1/dlIO_x7h4o493PuJ58tvfYmnfJw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/dece63-f0c0-465b-ad82-c8751f954524/1/dlIO_x7h4o493PuJ58tvfYmnfJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:47:2b:8b:7e:51:26:ab:20:82:5a:e9:4f:53:48:6a:45:ad:
ec:2f:4e:99:61:57:f5:0b:ff:8f:3b:fe:b6:3d:1f:02:d6:cb:
d2:dd:e6:e1:11:52:17:d4:d9:ec:cd:3f:d6:60:26:0b:f6:e7:
35:1b:ef:35:61:e2:ba:6f:fd:ac:01:eb:1c:cd:7c:b2:a0:be:
ce:11:c4:20:33:2a:0c:74:e2:d0:d5:95:8b:ff:ea:df:75:0b:
00:11:42:b3:f9:fa:ab:b2:c4:38:e5:6a:56:80:ff:2a:fc:4e:
45:f7:61:1b:a9:65:60:88:f8:33:1c:13:02:a1:e6:1b:1a:c3:
85:72:d2:cb:22:2d:e2:29:be:db:5b:28:b6:f9:7a:e8:dd:a7:
b9:c9:5c:e7:b7:7e:05:60:47:5d:b7:64:37:ec:a8:4d:28:44:
7c:d3:9e:2a:df:b9:f6:11:00:d8:70:af:26:4e:75:72:38:02:
e0:e7:50:c5:de:4d:f6:e0:fc:f8:e0:32:a4:88:1f:a1:54:d4:
34:87:f6:34:35:84:30:83:9d:23:71:9e:37:2e:da:f9:29:bf:
11:b9:0f:a8:aa:25:1f:6a:38:af:cf:af:60:ff:d8:ed:c8:cc:
c7:b5:83:a5:d4:9c:6a:5f:60:f2:a0:df:f4:59:82:ea:7b:55:
c4:07:a1:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:44:34 2025 by rpki-client