Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/f87140-bc2c-4f3f-83fd-a3d455d34809/1/msDRGjfaNdvi9_a5YZ5VcmNOH2I.mft
File: msDRGjfaNdvi9_a5YZ5VcmNOH2I.mft (raw, json)
Hash identifier: lk4tXjDvNr6QhwP94wRSMjM4ufYvOLWi/VkpqdXP+OQ=
Subject key identifier: F9:EC:0F:38:A9:41:FB:62:F5:B0:A1:5B:07:33:D0:26:C3:C9:A1:F4
Authority key identifier: 9A:C0:D1:1A:37:DA:35:DB:E2:F7:F6:B9:61:9E:55:72:63:4E:1F:62
Certificate issuer: /CN=9ac0d11a37da35dbe2f7f6b9619e5572634e1f62
Certificate serial: 0199FC8F312AF64DE243462B819C289266EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/msDRGjfaNdvi9_a5YZ5VcmNOH2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/f87140-bc2c-4f3f-83fd-a3d455d34809/1/msDRGjfaNdvi9_a5YZ5VcmNOH2I.mft
Manifest number: 1357
Signing time: Sun 19 Oct 2025 13:01:06 +0000
Manifest this update: Sun 19 Oct 2025 13:01:06 +0000
Manifest next update: Mon 20 Oct 2025 13:01:06 +0000
Files and hashes: 1: msDRGjfaNdvi9_a5YZ5VcmNOH2I.crl (hash: QNgvVbyQ4o2N6DW8NgNyfSttxkvyn0h9iAq/RQ22t/U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/f87140-bc2c-4f3f-83fd-a3d455d34809/1/msDRGjfaNdvi9_a5YZ5VcmNOH2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/f87140-bc2c-4f3f-83fd-a3d455d34809/1/msDRGjfaNdvi9_a5YZ5VcmNOH2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/msDRGjfaNdvi9_a5YZ5VcmNOH2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:31:2a:f6:4d:e2:43:46:2b:81:9c:28:92:66:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ac0d11a37da35dbe2f7f6b9619e5572634e1f62
Validity
Not Before: Oct 19 13:01:06 2025 GMT
Not After : Oct 20 13:01:06 2025 GMT
Subject: CN=f9ec0f38a941fb62f5b0a15b0733d026c3c9a1f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:13:32:57:e3:40:e4:a1:4b:c2:1b:42:03:9a:
46:00:9a:a5:de:69:bc:0b:6c:5a:f4:9a:99:a7:f6:
9b:2c:3d:78:a9:93:19:3f:17:4f:da:07:0d:68:8f:
62:92:a1:1b:f0:25:47:83:f4:8f:a4:8c:f0:19:ca:
3b:7e:84:c1:be:b3:c9:13:79:4f:57:38:06:71:c4:
e0:4e:8c:dc:19:49:35:2f:17:fc:ae:e2:5b:c4:bd:
83:7d:ec:df:2c:1d:7c:37:8b:45:9a:95:e9:09:db:
48:d2:2d:91:e8:e9:2e:b4:12:d1:0b:ba:11:56:7e:
4b:f0:9c:f7:47:fa:8b:70:80:b1:df:db:d6:0b:7a:
7c:98:19:4f:5b:51:72:da:42:88:d7:38:ed:fb:7e:
bc:d7:a9:b8:2f:ef:e6:41:79:8c:12:a2:db:09:76:
a9:40:c6:f3:f7:3a:a7:89:3a:b2:60:7a:0a:d4:3b:
48:c6:0e:38:8e:19:86:9c:c0:c3:96:8f:88:82:8f:
89:d8:5d:b0:7d:1c:62:2e:4c:9c:83:0a:83:00:66:
8e:9d:5f:28:63:15:0a:aa:94:0d:de:a9:8e:22:21:
0a:73:cb:8b:04:17:f8:09:86:9c:8a:9d:ff:9e:a0:
a3:bb:16:28:e2:05:82:d7:fc:d3:2f:c1:71:21:bb:
ec:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:EC:0F:38:A9:41:FB:62:F5:B0:A1:5B:07:33:D0:26:C3:C9:A1:F4
X509v3 Authority Key Identifier:
keyid:9A:C0:D1:1A:37:DA:35:DB:E2:F7:F6:B9:61:9E:55:72:63:4E:1F:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/msDRGjfaNdvi9_a5YZ5VcmNOH2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/f87140-bc2c-4f3f-83fd-a3d455d34809/1/msDRGjfaNdvi9_a5YZ5VcmNOH2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/f87140-bc2c-4f3f-83fd-a3d455d34809/1/msDRGjfaNdvi9_a5YZ5VcmNOH2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:1d:61:62:8d:48:bc:c1:db:87:26:86:18:ba:27:35:98:ea:
5c:c0:ac:43:68:51:fe:54:44:a0:3c:d9:dd:83:f5:fc:0f:86:
db:2d:98:f4:81:be:6e:08:69:83:e7:57:58:48:71:e6:41:21:
be:2e:8f:66:ef:81:4a:92:ba:6c:cd:77:fd:ec:60:10:60:a1:
fa:3e:e2:61:35:99:39:26:d3:26:70:ff:98:c5:e5:af:68:84:
48:9e:67:77:5c:2d:5d:c8:af:e6:47:c2:b6:eb:5b:60:df:48:
3a:9f:0c:6e:ac:a7:40:cb:e5:e6:1d:05:0f:8c:b6:98:f0:54:
50:85:e0:67:ef:22:b2:52:c8:9d:97:91:2e:d7:b2:6e:36:99:
a4:05:66:47:5b:a7:86:07:4c:f5:7c:3a:63:92:e9:44:d2:63:
d2:4a:6b:96:1b:b4:6a:6b:97:03:e5:0b:e7:34:d9:c5:01:92:
23:bc:14:9c:95:47:56:f7:34:e6:75:78:54:14:85:a0:13:1d:
3f:87:f9:2b:9f:42:9d:1a:76:04:a2:00:f0:99:80:12:54:53:
5b:75:1a:4b:ff:99:1f:2b:92:64:de:35:b4:7d:d0:46:64:ff:
c7:7a:6e:3c:74:5a:67:ed:86:e6:da:9c:7d:ee:c9:ab:c2:e6:
a0:1f:3a:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:26:12 2025 by rpki-client