Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/37cd50-5769-4cdd-95ea-cf89be5a5fea/1/D1pCPdyX3TDeyLhnPCSWjic3JnY.mft
File: D1pCPdyX3TDeyLhnPCSWjic3JnY.mft (raw, json)
Hash identifier: /g+305cE/pb7wH6E7A130oA+3/qKcnEYvB7If7IrTKc=
Subject key identifier: B2:40:FD:DE:3C:7D:F2:FE:8B:62:37:F1:40:2A:9C:20:E9:E1:BD:30
Authority key identifier: 0F:5A:42:3D:DC:97:DD:30:DE:C8:B8:67:3C:24:96:8E:27:37:26:76
Certificate issuer: /CN=0f5a423ddc97dd30dec8b8673c24968e27372676
Certificate serial: 0199FCC60DFD4986BA9D32F5664501E3AC70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D1pCPdyX3TDeyLhnPCSWjic3JnY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/37cd50-5769-4cdd-95ea-cf89be5a5fea/1/D1pCPdyX3TDeyLhnPCSWjic3JnY.mft
Manifest number: 01A6
Signing time: Sun 19 Oct 2025 14:01:02 +0000
Manifest this update: Sun 19 Oct 2025 14:01:02 +0000
Manifest next update: Mon 20 Oct 2025 14:01:02 +0000
Files and hashes: 1: D1pCPdyX3TDeyLhnPCSWjic3JnY.crl (hash: KJMiCqdWd8wIGbEA2hrZTil7sJEUdTlj5XMHMJyN9fs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/37cd50-5769-4cdd-95ea-cf89be5a5fea/1/D1pCPdyX3TDeyLhnPCSWjic3JnY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/37cd50-5769-4cdd-95ea-cf89be5a5fea/1/D1pCPdyX3TDeyLhnPCSWjic3JnY.mft
rsync://rpki.ripe.net/repository/DEFAULT/D1pCPdyX3TDeyLhnPCSWjic3JnY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:0d:fd:49:86:ba:9d:32:f5:66:45:01:e3:ac:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f5a423ddc97dd30dec8b8673c24968e27372676
Validity
Not Before: Oct 19 14:01:02 2025 GMT
Not After : Oct 20 14:01:02 2025 GMT
Subject: CN=b240fdde3c7df2fe8b6237f1402a9c20e9e1bd30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:37:8d:2d:3a:0c:72:b7:cc:29:9d:c8:f5:a4:
bc:66:2d:0a:f0:5c:74:75:03:63:51:fb:30:d2:c6:
60:63:30:02:91:1f:fa:4c:69:6d:aa:aa:02:40:b4:
0d:05:db:d8:3f:39:f5:6a:3c:7e:07:90:b7:17:94:
1b:ed:23:76:1b:57:42:ee:fe:d7:d9:d6:b3:c9:d3:
2e:70:c9:41:61:16:88:8d:7a:b0:da:f8:52:ac:e5:
46:38:98:8a:7f:29:e7:a5:b6:58:1a:f2:96:4d:e1:
4f:af:1a:e6:c6:ae:f8:db:89:f6:69:0f:c7:86:d4:
90:cf:26:7b:54:ac:68:24:4e:b9:8f:5b:56:29:b2:
4e:f7:ec:dd:df:53:dc:86:f8:86:b3:88:43:ca:cb:
d7:c7:86:c2:8c:dc:4f:78:d4:94:14:98:59:c0:d5:
f8:ed:c0:ff:3e:4e:34:24:f1:98:6d:c4:36:82:d8:
31:91:01:09:fb:14:3b:06:bb:ac:2a:f4:17:cd:f3:
58:73:86:9b:90:c1:bb:7d:42:50:12:68:1f:5d:eb:
3a:e5:86:1d:9d:88:84:5a:cc:0a:df:5c:ff:fa:02:
59:b7:b1:68:b1:cf:1d:ba:dc:27:99:ae:4f:4b:09:
b3:ca:cd:63:96:21:54:02:f1:2c:7a:ea:87:6d:a8:
1e:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:40:FD:DE:3C:7D:F2:FE:8B:62:37:F1:40:2A:9C:20:E9:E1:BD:30
X509v3 Authority Key Identifier:
keyid:0F:5A:42:3D:DC:97:DD:30:DE:C8:B8:67:3C:24:96:8E:27:37:26:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D1pCPdyX3TDeyLhnPCSWjic3JnY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/37cd50-5769-4cdd-95ea-cf89be5a5fea/1/D1pCPdyX3TDeyLhnPCSWjic3JnY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/37cd50-5769-4cdd-95ea-cf89be5a5fea/1/D1pCPdyX3TDeyLhnPCSWjic3JnY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:e2:d5:1f:26:21:f8:7c:75:8e:e0:3f:24:d6:4b:5c:71:c7:
de:fd:39:07:ab:ae:5b:8e:21:15:0d:10:dd:68:1f:35:58:b9:
f7:cc:49:6b:75:0b:96:fb:8c:a3:05:45:df:d1:e1:f6:1c:f4:
80:c2:d6:9f:02:78:8b:b1:60:48:33:39:b3:ca:39:3c:ba:4c:
36:77:8e:80:17:15:d6:e3:43:82:b0:82:e6:5d:98:91:bf:fd:
d6:63:60:c2:65:f2:cb:59:f3:4f:d7:d1:c1:9f:ca:10:2a:5d:
ed:0f:7d:95:1f:3a:c0:29:c3:b7:f5:20:7a:53:92:a0:a5:ea:
17:1b:8c:a4:01:6e:7b:67:70:ca:32:cb:b2:30:f5:97:04:41:
4c:3a:a5:df:59:3e:13:17:1e:5e:7c:00:f5:b8:06:59:20:28:
35:23:a2:68:23:50:cf:8a:74:b9:71:99:18:ab:de:8e:aa:54:
99:c4:81:c9:09:32:13:ee:14:22:70:4b:ca:9a:e3:c3:06:d8:
2c:a4:a0:1e:de:0b:8a:a9:7e:ad:08:d9:81:46:7b:d6:1d:a7:
db:de:8a:a4:6e:aa:89:47:e1:06:ac:f9:91:c1:92:d8:23:b3:
96:8d:98:90:5f:34:20:34:fc:c5:93:52:9a:07:39:c8:ef:5d:
03:28:46:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:37:04 2025 by rpki-client