Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/dec295-d4b5-4057-8db2-a32b58806071/1/dg6-87rwwTdAhVCVOQhSzkQlzkw.mft
File: dg6-87rwwTdAhVCVOQhSzkQlzkw.mft (raw, json)
Hash identifier: K6jA7/coJUYbUda8ke6v2PcFEviv722bhmSTOki3ebg=
Subject key identifier: CF:A4:08:5D:DF:FF:A5:6D:42:3F:76:F9:FD:2F:50:BA:55:F0:50:C5
Authority key identifier: 76:0E:BE:F3:BA:F0:C1:37:40:85:50:95:39:08:52:CE:44:25:CE:4C
Certificate issuer: /CN=760ebef3baf0c13740855095390852ce4425ce4c
Certificate serial: 0199FC217828FFB0D3FB12000D31A80C8ED7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dg6-87rwwTdAhVCVOQhSzkQlzkw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/dec295-d4b5-4057-8db2-a32b58806071/1/dg6-87rwwTdAhVCVOQhSzkQlzkw.mft
Manifest number: 69
Signing time: Sun 19 Oct 2025 11:01:15 +0000
Manifest this update: Sun 19 Oct 2025 11:01:15 +0000
Manifest next update: Mon 20 Oct 2025 11:01:15 +0000
Files and hashes: 1: dg6-87rwwTdAhVCVOQhSzkQlzkw.crl (hash: fh0z4mX+DoHwnx4QczNxgJlFYtAVf7gkmLrU6WSYlwg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/dec295-d4b5-4057-8db2-a32b58806071/1/dg6-87rwwTdAhVCVOQhSzkQlzkw.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/dec295-d4b5-4057-8db2-a32b58806071/1/dg6-87rwwTdAhVCVOQhSzkQlzkw.mft
rsync://rpki.ripe.net/repository/DEFAULT/dg6-87rwwTdAhVCVOQhSzkQlzkw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:78:28:ff:b0:d3:fb:12:00:0d:31:a8:0c:8e:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=760ebef3baf0c13740855095390852ce4425ce4c
Validity
Not Before: Oct 19 11:01:15 2025 GMT
Not After : Oct 20 11:01:15 2025 GMT
Subject: CN=cfa4085ddfffa56d423f76f9fd2f50ba55f050c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:25:c0:b9:0f:9a:6f:ac:30:b5:f3:b6:20:4b:
a1:39:5d:d5:e5:e3:ad:a7:56:b8:56:6e:d1:d2:a2:
bf:22:e2:f5:08:72:07:82:6f:36:ed:7b:12:0b:6d:
34:bc:51:06:d7:19:7d:9d:4c:f5:68:6d:7f:b7:eb:
79:13:9a:b1:64:e5:38:90:a8:e3:d9:7a:20:d3:64:
3e:22:2f:24:3e:e5:67:d4:6d:a6:67:81:ac:66:24:
f9:b4:cf:86:2b:99:e8:d4:6b:a7:bf:a4:8d:eb:64:
22:18:9d:e0:04:ff:25:84:47:1b:23:f6:78:20:87:
07:dd:26:b3:bd:53:07:c8:8b:6e:3a:4a:e2:fb:0f:
ec:32:34:9d:45:04:22:a7:ef:2b:ae:d2:bc:91:c0:
48:79:59:5d:f6:d0:8e:82:ac:9b:bd:fc:87:2a:d4:
41:4b:8e:e9:fc:4b:97:a9:67:1d:e9:95:30:0b:41:
a4:55:b4:5f:fa:7a:b6:ed:a6:d9:d6:16:4d:02:e9:
93:06:d3:42:16:e8:cf:c1:8a:1b:50:c9:f0:3d:20:
4e:71:8a:86:12:71:51:bd:3b:8a:ad:e6:c5:c9:ff:
80:7e:6c:ba:73:e2:91:1b:e3:06:2c:c0:cf:9e:5f:
8c:d5:fd:52:75:92:82:b4:fd:18:5d:ae:d2:ee:8b:
f7:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:A4:08:5D:DF:FF:A5:6D:42:3F:76:F9:FD:2F:50:BA:55:F0:50:C5
X509v3 Authority Key Identifier:
keyid:76:0E:BE:F3:BA:F0:C1:37:40:85:50:95:39:08:52:CE:44:25:CE:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dg6-87rwwTdAhVCVOQhSzkQlzkw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/dec295-d4b5-4057-8db2-a32b58806071/1/dg6-87rwwTdAhVCVOQhSzkQlzkw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/dec295-d4b5-4057-8db2-a32b58806071/1/dg6-87rwwTdAhVCVOQhSzkQlzkw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:a9:b2:04:86:d6:05:97:f8:f1:5a:f3:4c:67:c7:f9:c8:bd:
56:ec:8b:35:a7:e3:8f:0a:d3:23:68:c4:74:6c:d3:00:33:cd:
37:a0:a4:13:e2:31:37:8a:b4:e9:6b:ef:17:0e:a2:67:fa:54:
54:9b:7d:f8:6b:36:6e:72:82:3d:06:b6:43:40:31:22:6d:de:
a2:e9:a2:e7:f5:11:ba:9a:45:3f:f5:e2:7d:02:44:a6:7d:0d:
0a:1a:d8:c3:e2:c3:7a:58:18:1f:54:75:e2:86:64:cd:1a:7e:
64:5b:f2:2c:c2:de:5e:7a:dc:a0:5e:2c:41:0c:65:3c:dc:0a:
a4:5b:2e:b8:64:11:86:a5:44:6f:af:80:55:08:5c:0e:5b:46:
dd:f5:30:c3:9d:7d:5c:ce:8c:be:bc:3e:e9:18:83:d3:60:ae:
42:8c:76:4f:8c:38:64:b6:fb:c3:c2:7e:b3:6f:f8:02:5c:e9:
04:1b:20:19:f9:54:b7:41:02:54:2d:16:7c:0e:74:d9:00:ad:
c4:5b:db:d5:53:32:25:b8:b8:b8:ff:dc:90:49:54:72:34:08:
bf:65:fb:54:c5:98:b9:0b:1a:e7:8b:0d:eb:d2:43:9e:f9:8f:
f8:16:01:c7:c4:26:a8:34:c1:b2:30:f9:ea:bf:91:a6:1d:eb:
0f:a5:45:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:04:21 2025 by rpki-client