Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/53741e-9392-4d19-99d2-ced29650a280/1/DaPL8eDoVupMU7WrroZZTsmTOYI.mft
File: DaPL8eDoVupMU7WrroZZTsmTOYI.mft (raw, json)
Hash identifier: x5KjceFT+7vkF5McRl0jpGA0zx/PIGtBmHb5StaSEXw=
Subject key identifier: C0:74:73:46:E1:BC:F8:1C:D0:F1:23:A2:AF:42:91:2F:3F:48:2C:AE
Authority key identifier: 0D:A3:CB:F1:E0:E8:56:EA:4C:53:B5:AB:AE:86:59:4E:C9:93:39:82
Certificate issuer: /CN=0da3cbf1e0e856ea4c53b5abae86594ec9933982
Certificate serial: 0199FBEB9A66B130CC7DE362F0E0EECF2519
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DaPL8eDoVupMU7WrroZZTsmTOYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/53741e-9392-4d19-99d2-ced29650a280/1/DaPL8eDoVupMU7WrroZZTsmTOYI.mft
Manifest number: 0E13
Signing time: Sun 19 Oct 2025 10:02:25 +0000
Manifest this update: Sun 19 Oct 2025 10:02:25 +0000
Manifest next update: Mon 20 Oct 2025 10:02:25 +0000
Files and hashes: 1: DaPL8eDoVupMU7WrroZZTsmTOYI.crl (hash: 3KASFjJaqzpa2PIkSoiusAkb5Qn2jkotRT56+nMW3Bg=)
2: MNtx-M1QVv5z_3qcN6vxhaOotfc.roa (hash: px53xNqq/MugnV+199J7ZDHhE5FdBcLFsMKgKSEziic=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/53741e-9392-4d19-99d2-ced29650a280/1/DaPL8eDoVupMU7WrroZZTsmTOYI.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/53741e-9392-4d19-99d2-ced29650a280/1/DaPL8eDoVupMU7WrroZZTsmTOYI.mft
rsync://rpki.ripe.net/repository/DEFAULT/DaPL8eDoVupMU7WrroZZTsmTOYI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:9a:66:b1:30:cc:7d:e3:62:f0:e0:ee:cf:25:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0da3cbf1e0e856ea4c53b5abae86594ec9933982
Validity
Not Before: Oct 19 10:02:25 2025 GMT
Not After : Oct 20 10:02:25 2025 GMT
Subject: CN=c0747346e1bcf81cd0f123a2af42912f3f482cae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:be:e7:af:6a:ef:7c:fa:2a:a0:2d:05:3a:49:
a1:41:bd:51:5e:35:86:34:55:b9:19:0e:10:a1:78:
50:85:0a:bf:99:0d:65:37:b7:d6:15:d8:b4:34:10:
92:3e:70:7f:47:f5:97:3d:1a:6f:c3:80:32:7b:2f:
f6:91:9e:a5:8f:81:81:50:81:b1:4a:24:ff:dd:11:
a4:4d:26:ae:83:f0:7d:60:d2:55:c7:24:ad:24:f0:
3f:74:1a:83:0d:e3:18:f8:1a:7e:fb:d7:67:3a:f7:
9b:6c:db:1c:04:8c:1c:6b:bc:f7:5e:ed:fa:a1:2b:
30:8f:f4:6b:66:cd:34:64:b2:33:bc:44:8e:a6:07:
41:5c:86:9b:2d:9d:cc:4d:b0:b4:9f:87:ff:fc:94:
cb:1c:cc:f7:10:3e:c0:bc:79:91:78:0c:7a:d1:c3:
b2:6b:7e:84:58:99:ef:12:5a:02:45:2b:b2:1f:00:
0b:a1:9c:8b:2b:d8:aa:b7:4a:c1:aa:b9:bb:8c:88:
e6:62:23:a7:1a:51:2b:41:8f:f3:96:97:a0:9b:4f:
f1:50:03:d8:48:c0:c7:8e:68:a3:8b:1a:f5:03:97:
57:2c:b0:62:84:57:1c:cb:48:e8:a0:d6:32:95:a8:
29:e3:8f:dd:b0:44:a6:5c:2f:e4:a2:d5:3c:b8:2b:
09:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:74:73:46:E1:BC:F8:1C:D0:F1:23:A2:AF:42:91:2F:3F:48:2C:AE
X509v3 Authority Key Identifier:
keyid:0D:A3:CB:F1:E0:E8:56:EA:4C:53:B5:AB:AE:86:59:4E:C9:93:39:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DaPL8eDoVupMU7WrroZZTsmTOYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/53741e-9392-4d19-99d2-ced29650a280/1/DaPL8eDoVupMU7WrroZZTsmTOYI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/53741e-9392-4d19-99d2-ced29650a280/1/DaPL8eDoVupMU7WrroZZTsmTOYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:0b:a8:39:e1:6f:4c:80:85:3b:1f:9f:b1:5f:73:ca:0b:0d:
3a:9f:1b:d0:8c:43:0b:0c:3c:76:41:28:4e:30:bd:9b:b7:11:
37:fd:d7:f1:10:f3:8f:17:48:63:f2:82:63:fb:bf:d3:b9:d7:
af:0d:5e:da:e9:f2:5f:08:46:f1:51:5e:45:a4:f4:72:96:b5:
4d:66:bf:5f:08:6f:a0:fd:a0:5b:c1:d6:80:c9:fb:19:bd:4e:
b3:b6:d5:a8:07:98:74:02:37:5c:b2:81:ed:dd:6b:8d:c2:07:
5a:f7:f2:ab:63:8b:4d:19:f2:c1:43:bc:ae:a9:2e:4f:61:36:
87:3b:54:35:9a:6d:9e:ef:0c:3c:30:28:ea:16:3e:d9:cc:a1:
ce:16:ce:e8:c9:7f:04:57:c6:57:90:ef:15:2c:c4:4c:f3:91:
d8:3f:96:81:38:49:ae:0d:5f:4c:55:df:13:43:0a:87:2c:22:
f7:d6:e8:4a:f9:d7:57:ca:f4:fd:64:94:86:c4:87:90:15:1e:
2b:d6:44:13:ba:c0:93:42:78:35:f5:e7:5f:9f:e8:30:ce:50:
4d:32:d9:91:21:35:88:b7:70:76:c2:01:78:45:b6:6f:6a:10:
ae:f5:71:46:d0:79:2f:af:13:88:b7:fb:bb:e4:f7:7c:50:3b:
c8:f7:2e:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:20:10 2025 by rpki-client