Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/26c68c-0482-4b62-b2af-4855366edfef/1/dZI-xUbfNx0J5oxrBgJeoxJhI0o.mft
File: dZI-xUbfNx0J5oxrBgJeoxJhI0o.mft (raw, json)
Hash identifier: BwSAyp32L9JGfOFKRLrADwfFVp/HRHQ+OEO0vC0/bBo=
Subject key identifier: A0:E5:EE:B8:47:26:F5:ED:BF:41:C3:23:61:84:89:FC:B1:4B:86:0A
Authority key identifier: 75:92:3E:C5:46:DF:37:1D:09:E6:8C:6B:06:02:5E:A3:12:61:23:4A
Certificate issuer: /CN=75923ec546df371d09e68c6b06025ea31261234a
Certificate serial: 0199FBEBB1F282089A26D53400F9A4607B71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dZI-xUbfNx0J5oxrBgJeoxJhI0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/26c68c-0482-4b62-b2af-4855366edfef/1/dZI-xUbfNx0J5oxrBgJeoxJhI0o.mft
Manifest number: 16DF
Signing time: Sun 19 Oct 2025 10:02:31 +0000
Manifest this update: Sun 19 Oct 2025 10:02:31 +0000
Manifest next update: Mon 20 Oct 2025 10:02:31 +0000
Files and hashes: 1: dZI-xUbfNx0J5oxrBgJeoxJhI0o.crl (hash: dtCAoc3fRuyRCd1ZHsHlwZm1Bui+QaLXz+yUhKXQVsM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/26c68c-0482-4b62-b2af-4855366edfef/1/dZI-xUbfNx0J5oxrBgJeoxJhI0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/26c68c-0482-4b62-b2af-4855366edfef/1/dZI-xUbfNx0J5oxrBgJeoxJhI0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/dZI-xUbfNx0J5oxrBgJeoxJhI0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:b1:f2:82:08:9a:26:d5:34:00:f9:a4:60:7b:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75923ec546df371d09e68c6b06025ea31261234a
Validity
Not Before: Oct 19 10:02:31 2025 GMT
Not After : Oct 20 10:02:31 2025 GMT
Subject: CN=a0e5eeb84726f5edbf41c323618489fcb14b860a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c8:c1:1a:b0:2e:18:21:a7:cd:e8:26:09:a1:
ba:27:86:db:64:2a:1c:df:3d:8f:77:4e:af:9f:af:
18:09:37:af:13:7d:05:5e:05:ac:82:ac:c4:96:49:
4b:d4:fb:df:77:5c:cd:05:6c:cd:73:6e:5d:ea:b2:
57:1c:29:f3:df:2e:2e:b7:33:b1:f7:15:71:55:6a:
85:21:48:52:29:f0:ad:0f:af:cc:6c:3e:f2:3d:67:
21:6c:23:8e:71:6a:1f:d3:45:17:5a:33:1a:6a:c2:
9a:7f:fd:fb:8c:52:83:59:59:a1:9c:ee:44:bf:a7:
27:59:2c:29:0e:48:10:38:1d:bf:cf:39:f8:4a:80:
02:fa:be:6e:03:e5:fa:ac:55:c7:6d:d2:cd:99:d0:
d4:89:ff:cb:6e:e5:a3:1c:a0:e7:44:89:34:40:26:
75:c1:be:5b:11:bd:b3:af:8c:94:d2:0e:ac:7f:72:
f4:50:24:fb:98:87:40:bd:90:fe:6d:71:58:01:79:
01:70:0c:d6:f5:40:c3:9f:7b:4d:49:cb:a3:df:cd:
f5:be:69:82:6d:0b:e5:a0:03:59:62:4b:d1:b1:3d:
70:55:06:68:10:2a:e7:52:a8:b2:89:8d:53:15:42:
7b:59:00:30:f3:23:09:cc:88:73:0f:ca:61:4c:be:
01:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:E5:EE:B8:47:26:F5:ED:BF:41:C3:23:61:84:89:FC:B1:4B:86:0A
X509v3 Authority Key Identifier:
keyid:75:92:3E:C5:46:DF:37:1D:09:E6:8C:6B:06:02:5E:A3:12:61:23:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dZI-xUbfNx0J5oxrBgJeoxJhI0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/26c68c-0482-4b62-b2af-4855366edfef/1/dZI-xUbfNx0J5oxrBgJeoxJhI0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/26c68c-0482-4b62-b2af-4855366edfef/1/dZI-xUbfNx0J5oxrBgJeoxJhI0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:e1:18:af:89:b3:66:c2:80:a0:f2:f1:89:18:1c:f8:13:ba:
02:9d:10:a6:89:7e:12:70:ee:d8:40:3a:16:ac:7e:77:da:b2:
07:c1:56:f9:7b:03:c0:1b:82:4d:da:fc:c6:de:2f:1a:69:19:
63:4b:ec:1b:48:75:22:61:a3:3f:02:1a:d9:2c:7b:3e:75:ab:
72:d7:9d:f0:6e:09:54:9e:ad:db:1b:24:45:f5:65:bc:f3:f2:
fc:6c:7f:07:af:2a:3b:ab:46:ab:5f:2f:1f:ad:55:43:d3:8a:
77:ff:74:1f:e4:b6:aa:1d:6c:e6:20:83:1b:45:71:1e:2d:3a:
5d:2f:3f:08:b1:cf:76:4b:aa:21:2c:3d:f4:f1:0f:d1:ea:6a:
0a:fb:be:af:40:30:12:73:15:16:4b:73:73:f7:8e:e8:80:01:
42:1b:2d:21:5e:59:d3:7c:37:2b:ac:43:88:ad:d2:9b:e3:34:
da:57:97:e5:4a:37:1f:6b:5f:23:24:84:e4:0d:e3:1d:32:f7:
76:b5:25:8e:37:54:cf:26:6b:be:ba:d7:4d:44:ad:63:64:35:
99:8c:89:a6:12:d0:3b:0f:77:0a:bd:f8:a1:1c:a4:c0:14:56:
36:ba:94:10:1c:c2:7e:dc:3c:39:04:da:78:aa:a4:23:7a:65:
2d:b9:0c:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:06:20 2025 by rpki-client