Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/6e781a-bcfb-4a2b-b617-b511fba1329a/1/rDWoN7KvW2-xjKNdFguamhgiBO8.mft
File: rDWoN7KvW2-xjKNdFguamhgiBO8.mft (raw, json)
Hash identifier: cb96gs2WRF1TggZeqST2ano1AbOTzBoxyWcd8iPyR78=
Subject key identifier: A5:AD:00:47:7D:5A:8D:34:30:1F:D4:13:7C:D2:9D:69:4B:84:48:DA
Authority key identifier: AC:35:A8:37:B2:AF:5B:6F:B1:8C:A3:5D:16:0B:9A:9A:18:22:04:EF
Certificate issuer: /CN=ac35a837b2af5b6fb18ca35d160b9a9a182204ef
Certificate serial: 0199FDD9588ECCAE1EE3D3C1266AB03A191F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rDWoN7KvW2-xjKNdFguamhgiBO8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/6e781a-bcfb-4a2b-b617-b511fba1329a/1/rDWoN7KvW2-xjKNdFguamhgiBO8.mft
Manifest number: 11CC
Signing time: Sun 19 Oct 2025 19:01:43 +0000
Manifest this update: Sun 19 Oct 2025 19:01:43 +0000
Manifest next update: Mon 20 Oct 2025 19:01:43 +0000
Files and hashes: 1: rDWoN7KvW2-xjKNdFguamhgiBO8.crl (hash: 9Qt6XUN383Y7jCi76C0RvohwPb05kSnBe8w55ZSE4hU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/6e781a-bcfb-4a2b-b617-b511fba1329a/1/rDWoN7KvW2-xjKNdFguamhgiBO8.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/6e781a-bcfb-4a2b-b617-b511fba1329a/1/rDWoN7KvW2-xjKNdFguamhgiBO8.mft
rsync://rpki.ripe.net/repository/DEFAULT/rDWoN7KvW2-xjKNdFguamhgiBO8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:58:8e:cc:ae:1e:e3:d3:c1:26:6a:b0:3a:19:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac35a837b2af5b6fb18ca35d160b9a9a182204ef
Validity
Not Before: Oct 19 19:01:43 2025 GMT
Not After : Oct 20 19:01:43 2025 GMT
Subject: CN=a5ad00477d5a8d34301fd4137cd29d694b8448da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:c2:16:09:3b:23:20:92:a3:ff:1c:ee:69:d8:
82:a5:da:77:d1:27:48:98:bb:ab:76:33:38:ea:cb:
bd:a2:4f:b5:90:84:ea:ea:27:a8:96:d2:fe:83:b8:
fc:a4:d5:0f:3b:e6:65:81:9e:ba:58:a3:19:a4:55:
e2:a9:27:da:aa:c9:ff:a3:83:1d:31:1d:5b:1b:73:
40:17:b1:cb:82:cf:2a:b9:b6:2b:79:70:1c:75:2b:
3c:80:21:56:80:4f:7d:6a:a2:6c:01:5b:08:42:56:
15:3b:9a:f9:02:60:43:f0:ac:4b:e2:b3:5b:a4:4f:
04:2d:cc:47:8a:cc:9c:3d:49:13:42:76:07:3f:75:
36:2c:2f:eb:98:6a:cd:fc:7c:12:63:e3:29:d5:30:
58:b6:b3:3b:6c:66:fc:d7:e8:cf:83:75:2e:2c:b3:
ad:91:c7:30:60:68:05:cf:b6:f6:5d:50:f0:09:fe:
dd:d9:9e:a7:09:2f:78:a4:a2:1c:df:75:97:ee:c4:
76:89:24:67:38:ae:a0:f2:c5:7e:ef:7a:e1:d1:41:
ea:89:7e:bf:86:65:07:96:9f:23:c0:a1:6b:cb:23:
d9:5a:28:bd:25:b7:a5:7f:54:7f:ea:29:46:af:5a:
e9:17:8d:45:b9:05:e4:ed:00:4b:ea:b4:63:66:6d:
95:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:AD:00:47:7D:5A:8D:34:30:1F:D4:13:7C:D2:9D:69:4B:84:48:DA
X509v3 Authority Key Identifier:
keyid:AC:35:A8:37:B2:AF:5B:6F:B1:8C:A3:5D:16:0B:9A:9A:18:22:04:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rDWoN7KvW2-xjKNdFguamhgiBO8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/6e781a-bcfb-4a2b-b617-b511fba1329a/1/rDWoN7KvW2-xjKNdFguamhgiBO8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/6e781a-bcfb-4a2b-b617-b511fba1329a/1/rDWoN7KvW2-xjKNdFguamhgiBO8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:f4:e1:06:db:4e:26:72:ed:a7:e0:fc:77:45:f4:61:ee:39:
41:58:0d:7e:fe:20:1f:f1:70:59:5f:30:8e:28:c5:19:4d:2e:
97:92:4c:2c:07:74:66:f0:34:8a:7d:b8:cf:b0:dd:91:21:e3:
f4:0b:54:f5:43:f3:68:e9:b4:d0:51:fe:df:33:80:ec:ba:5f:
36:16:48:7a:86:30:62:87:8c:7d:81:88:fb:b0:0c:e0:3d:50:
2b:66:eb:eb:19:c3:4e:69:77:3e:a0:e4:cf:e0:8c:ac:f3:31:
65:d4:90:27:85:8f:9c:ce:ae:a1:73:7a:3b:fd:75:57:23:d4:
1d:ac:e5:1e:cd:2c:b3:f4:6c:68:1a:1c:8d:cd:e5:f3:64:f5:
f9:fa:9a:e7:1a:f5:86:b2:c9:1f:13:8c:31:c3:b8:08:5f:29:
74:48:70:a9:39:21:25:54:da:d6:9c:b0:f1:98:06:44:d3:71:
81:01:dd:79:cb:a7:d3:57:d8:95:47:11:4d:c2:33:60:68:65:
ab:54:cb:5e:13:fb:db:4e:5e:5f:e5:61:29:8a:44:e8:9c:c3:
4a:3f:de:80:27:fa:2e:9a:71:ce:f7:d2:1f:49:93:70:44:ed:
8e:b6:c6:fb:1a:b6:69:52:06:4d:8b:e3:5b:d3:0a:63:0a:16:
9f:01:0e:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:03:00 2025 by rpki-client