Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/f2afdf-e3cc-4939-ae4e-73d10d5b9fec/1/dZqqNhUO4VXDtRrZxwf2xDvyvmM.mft
File: dZqqNhUO4VXDtRrZxwf2xDvyvmM.mft (raw, json)
Hash identifier: Zs9Y9BatMJCQl6p78U6IYEItPEqyIGQJEbCXEmWeAlI=
Subject key identifier: D9:2D:11:61:6A:3F:4B:3A:63:D9:DB:1D:D3:31:A7:E1:57:F4:ED:7E
Authority key identifier: 75:9A:AA:36:15:0E:E1:55:C3:B5:1A:D9:C7:07:F6:C4:3B:F2:BE:63
Certificate issuer: /CN=759aaa36150ee155c3b51ad9c707f6c43bf2be63
Certificate serial: 0199FDDA2F6569ADDEA8CFAEF07EB7D2187D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dZqqNhUO4VXDtRrZxwf2xDvyvmM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/f2afdf-e3cc-4939-ae4e-73d10d5b9fec/1/dZqqNhUO4VXDtRrZxwf2xDvyvmM.mft
Manifest number: 0B09
Signing time: Sun 19 Oct 2025 19:02:38 +0000
Manifest this update: Sun 19 Oct 2025 19:02:38 +0000
Manifest next update: Mon 20 Oct 2025 19:02:38 +0000
Files and hashes: 1: dZqqNhUO4VXDtRrZxwf2xDvyvmM.crl (hash: 7upsn6303sIvyjWwtoTmrw/+ohWmpKe18iDpOCQ0VcI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/f2afdf-e3cc-4939-ae4e-73d10d5b9fec/1/dZqqNhUO4VXDtRrZxwf2xDvyvmM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/f2afdf-e3cc-4939-ae4e-73d10d5b9fec/1/dZqqNhUO4VXDtRrZxwf2xDvyvmM.mft
rsync://rpki.ripe.net/repository/DEFAULT/dZqqNhUO4VXDtRrZxwf2xDvyvmM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:da:2f:65:69:ad:de:a8:cf:ae:f0:7e:b7:d2:18:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=759aaa36150ee155c3b51ad9c707f6c43bf2be63
Validity
Not Before: Oct 19 19:02:38 2025 GMT
Not After : Oct 20 19:02:38 2025 GMT
Subject: CN=d92d11616a3f4b3a63d9db1dd331a7e157f4ed7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a4:50:30:ff:87:bc:09:6f:fb:71:e9:cd:5a:
b1:ef:97:51:f6:2d:40:7a:62:17:f1:28:4d:2a:ef:
53:c3:82:92:32:1f:a5:61:05:ad:4e:78:89:84:ed:
02:82:57:36:14:52:cf:29:92:b9:b1:f8:0d:00:2d:
52:92:0e:79:c5:e8:54:89:8a:c6:ce:51:01:bb:07:
87:d6:1e:6c:5b:99:37:84:fc:a9:8f:5c:d7:c2:74:
f4:02:25:16:f0:f2:73:6c:df:ba:56:5c:b1:70:0a:
32:46:53:68:bb:25:83:3d:5c:29:65:fe:dc:02:18:
81:fe:4f:26:4e:38:a5:b3:39:bf:6e:32:7a:38:02:
7f:20:c4:cd:9e:34:35:c3:ef:5c:f5:cc:92:09:ad:
73:c1:57:49:ac:72:c6:b1:c6:eb:b4:c6:86:ef:b2:
73:d4:e2:98:c5:59:93:0a:9e:d0:0b:f1:fd:2e:fb:
4a:3a:ec:1d:09:fc:d1:74:0e:fd:58:73:a3:98:93:
56:28:58:1e:34:88:a4:fe:a1:b1:25:fa:b3:38:44:
72:fd:a5:47:50:9c:d0:14:ef:23:78:f1:1a:1d:79:
8f:ce:ba:18:c9:5d:bd:89:91:a5:a2:91:0d:c6:33:
19:73:be:be:62:41:01:e9:ee:a1:96:f5:13:06:0e:
56:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:2D:11:61:6A:3F:4B:3A:63:D9:DB:1D:D3:31:A7:E1:57:F4:ED:7E
X509v3 Authority Key Identifier:
keyid:75:9A:AA:36:15:0E:E1:55:C3:B5:1A:D9:C7:07:F6:C4:3B:F2:BE:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dZqqNhUO4VXDtRrZxwf2xDvyvmM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f2afdf-e3cc-4939-ae4e-73d10d5b9fec/1/dZqqNhUO4VXDtRrZxwf2xDvyvmM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f2afdf-e3cc-4939-ae4e-73d10d5b9fec/1/dZqqNhUO4VXDtRrZxwf2xDvyvmM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:c1:85:6a:d6:ec:8c:22:c2:b9:96:ec:0e:15:08:1a:81:b2:
bc:eb:9c:ff:a4:ea:5d:71:b7:32:12:ba:03:54:cc:de:20:09:
91:9e:3d:53:b3:d9:3c:cb:36:27:ea:6f:3e:b9:78:97:22:70:
4d:6b:5d:9a:1d:e9:d3:95:0e:19:f3:01:8e:60:ff:02:88:49:
de:ff:94:f2:60:9a:ea:92:85:4a:c7:8f:6f:19:47:11:4d:2d:
b5:dc:ac:2d:3a:d4:14:60:f5:5b:00:90:fb:19:6d:cc:dc:d1:
41:b8:64:3a:a5:57:f5:0a:e6:6e:e7:c5:bd:88:34:2e:6f:fd:
95:05:0c:69:89:ba:d2:a4:2c:0c:e5:d8:9a:72:24:b7:05:11:
be:8d:62:2e:ca:86:6b:d8:b6:ba:0a:d4:cd:e4:95:da:a3:9a:
dd:dd:d1:15:b7:65:f2:fe:de:12:8b:90:1d:6d:99:53:cf:4f:
2d:10:bd:8d:05:dc:ef:b7:1d:e4:f3:50:c4:77:a8:89:7b:e6:
40:75:d4:18:de:c5:ea:ce:0d:f3:72:e9:54:9c:69:d7:4f:88:
69:7f:b5:03:10:6c:4d:74:5f:45:06:06:e0:83:3c:32:b2:ce:
f9:48:25:7a:1a:62:a7:74:5e:5f:2d:bb:bf:83:f8:6d:f7:02:
e4:50:9d:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:50:03 2025 by rpki-client