
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/d3d105-f972-4c7c-bfea-3f25392de7f9/1/DXAsU8uAOxRkTmdYfl1v1hK2S8w.mft
File: DXAsU8uAOxRkTmdYfl1v1hK2S8w.mft (raw, json)
Hash identifier: OaCZCPHgXtQHttyZbe8znjTR4HQLOZidAaEuR0HtRWg=
Subject key identifier: 89:E2:5A:47:F3:FB:05:7C:4F:9D:33:D8:53:2B:60:CA:B3:DC:05:98
Authority key identifier: 0D:70:2C:53:CB:80:3B:14:64:4E:67:58:7E:5D:6F:D6:12:B6:4B:CC
Certificate issuer: /CN=0d702c53cb803b14644e67587e5d6fd612b64bcc
Certificate serial: 0199FB7C9A0A9B3FA64392A8E8D8242F6649
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXAsU8uAOxRkTmdYfl1v1hK2S8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/d3d105-f972-4c7c-bfea-3f25392de7f9/1/DXAsU8uAOxRkTmdYfl1v1hK2S8w.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 08:01:11 +0000
Manifest this update: Sun 19 Oct 2025 08:01:11 +0000
Manifest next update: Mon 20 Oct 2025 08:01:11 +0000
Files and hashes: 1: DXAsU8uAOxRkTmdYfl1v1hK2S8w.crl (hash: oKaxqhJH8xPWsO6h8akQd9uBk90OhVNxBoIg44QoFYs=)
2: Z6E4tQnRvUpfPcdYuFNVxcJ0ync.roa (hash: xKAWINx5skT5zUOU5FUOicB7VLSOKSuOkc+JGT8/lwg=)
3: icdzN3903U-G6DI4zKp6RZE4flA.roa (hash: kshaHbPYaGNmmaMCwtIlRpH9RaK824cfmas4wivc8R4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/d3d105-f972-4c7c-bfea-3f25392de7f9/1/DXAsU8uAOxRkTmdYfl1v1hK2S8w.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/d3d105-f972-4c7c-bfea-3f25392de7f9/1/DXAsU8uAOxRkTmdYfl1v1hK2S8w.mft
rsync://rpki.ripe.net/repository/DEFAULT/DXAsU8uAOxRkTmdYfl1v1hK2S8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:9a:0a:9b:3f:a6:43:92:a8:e8:d8:24:2f:66:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d702c53cb803b14644e67587e5d6fd612b64bcc
Validity
Not Before: Oct 19 08:01:11 2025 GMT
Not After : Oct 20 08:01:11 2025 GMT
Subject: CN=89e25a47f3fb057c4f9d33d8532b60cab3dc0598
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e6:52:d9:8f:0f:b7:7a:d4:ce:7e:f5:3f:2b:
94:4d:a9:f9:0a:85:3b:6f:68:56:2e:2d:ba:c2:77:
48:2c:e2:aa:ae:ae:c2:39:00:b0:bf:27:df:24:32:
90:bc:59:1f:d4:6f:68:5d:0f:63:22:5a:8b:c7:df:
4c:b1:33:47:be:58:4a:a5:1d:21:db:26:ff:25:e4:
1a:74:22:a8:56:a2:e7:82:c3:59:a3:03:de:1a:60:
ae:72:86:c5:1e:99:95:05:4d:d7:8f:45:cd:73:d4:
9c:d3:09:73:fd:71:ae:83:98:f6:69:8c:f8:6b:d8:
10:91:0f:8d:d1:bb:6b:80:62:4f:c7:fc:7a:38:ea:
af:93:d8:ee:ee:e3:0e:4a:aa:de:4a:b9:77:6f:58:
13:1a:36:80:10:bb:dc:4c:74:a8:99:3f:93:c8:da:
1a:86:b6:f7:be:52:95:50:15:24:7b:17:e4:be:e9:
12:e7:43:f0:ab:01:49:61:bb:ba:46:7b:5e:c7:b5:
e3:82:d1:84:92:34:d8:11:3c:f8:5c:9c:47:89:37:
08:82:8f:ac:2c:1f:ec:45:a9:68:40:29:39:42:74:
9b:02:89:62:b7:cf:3a:28:5a:b1:ec:73:8f:cc:3f:
97:19:50:54:0b:cb:1e:a1:16:64:67:d8:13:1c:cf:
69:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:E2:5A:47:F3:FB:05:7C:4F:9D:33:D8:53:2B:60:CA:B3:DC:05:98
X509v3 Authority Key Identifier:
keyid:0D:70:2C:53:CB:80:3B:14:64:4E:67:58:7E:5D:6F:D6:12:B6:4B:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXAsU8uAOxRkTmdYfl1v1hK2S8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/d3d105-f972-4c7c-bfea-3f25392de7f9/1/DXAsU8uAOxRkTmdYfl1v1hK2S8w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/d3d105-f972-4c7c-bfea-3f25392de7f9/1/DXAsU8uAOxRkTmdYfl1v1hK2S8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:5f:91:f3:2d:fa:91:42:fd:20:a8:66:77:05:cc:05:3a:39:
1d:a2:ae:b2:42:22:06:63:11:b5:83:b3:f7:ae:2d:c9:3a:dc:
65:eb:39:00:68:2e:6e:4b:17:60:34:37:d2:63:4e:dc:72:23:
58:6f:67:65:48:fe:a2:3a:7a:f8:9b:24:f2:14:22:87:ac:df:
20:36:30:f8:e8:fe:b6:c0:1e:4a:75:cd:21:c3:59:43:48:bb:
ea:36:78:61:6c:60:58:96:29:a8:f8:c2:bd:eb:8e:69:80:4e:
9b:62:5e:03:2a:c3:eb:29:87:63:18:4b:8d:84:fe:f5:c8:90:
3f:7f:4d:ce:2d:82:af:21:00:d2:d7:53:ce:77:25:b5:0a:12:
bc:02:a1:09:f8:64:20:1c:03:ec:ce:8c:47:12:25:3f:db:bc:
f1:34:39:d1:34:49:72:3f:af:d7:53:3a:dc:05:6c:f0:9a:b0:
f0:15:14:11:48:ee:a0:21:1e:7d:14:78:10:fd:33:ab:30:67:
1f:e6:31:23:67:ec:8c:fc:54:cc:ad:63:fe:e6:b1:61:a7:78:
50:38:6d:51:ba:3f:f2:be:8f:ab:21:ad:b2:6f:fc:cc:87:be:
b7:54:28:f4:dc:93:b7:b7:bc:9e:2c:e0:57:32:3e:cf:47:19:
88:c8:fe:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:14:04 2025 by rpki-client