Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/2c8dbc-40ae-49c6-8dd3-c25debcb1197/1/DudNGMQEmi2bgSwqWFXP63Wvpmc.mft
File: DudNGMQEmi2bgSwqWFXP63Wvpmc.mft (raw, json)
Hash identifier: R4kjKPAl3nJOvVnIN8ncgwkZ3Nw9eep5TLJQ6bsjIJE=
Subject key identifier: 30:42:16:A0:A8:EC:7D:F9:C1:17:62:82:45:CB:D6:34:41:69:4F:D8
Authority key identifier: 0E:E7:4D:18:C4:04:9A:2D:9B:81:2C:2A:58:55:CF:EB:75:AF:A6:67
Certificate issuer: /CN=0ee74d18c4049a2d9b812c2a5855cfeb75afa667
Certificate serial: 0199FC58372F81EED91E757C4F17F896C493
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DudNGMQEmi2bgSwqWFXP63Wvpmc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/2c8dbc-40ae-49c6-8dd3-c25debcb1197/1/DudNGMQEmi2bgSwqWFXP63Wvpmc.mft
Manifest number: 16DE
Signing time: Sun 19 Oct 2025 12:01:03 +0000
Manifest this update: Sun 19 Oct 2025 12:01:03 +0000
Manifest next update: Mon 20 Oct 2025 12:01:03 +0000
Files and hashes: 1: DudNGMQEmi2bgSwqWFXP63Wvpmc.crl (hash: qLl7l+JkP/oafldMXwB3pV+7+whtVvSq7xtcfMb+qM4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/2c8dbc-40ae-49c6-8dd3-c25debcb1197/1/DudNGMQEmi2bgSwqWFXP63Wvpmc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/2c8dbc-40ae-49c6-8dd3-c25debcb1197/1/DudNGMQEmi2bgSwqWFXP63Wvpmc.mft
rsync://rpki.ripe.net/repository/DEFAULT/DudNGMQEmi2bgSwqWFXP63Wvpmc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:37:2f:81:ee:d9:1e:75:7c:4f:17:f8:96:c4:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ee74d18c4049a2d9b812c2a5855cfeb75afa667
Validity
Not Before: Oct 19 12:01:03 2025 GMT
Not After : Oct 20 12:01:03 2025 GMT
Subject: CN=304216a0a8ec7df9c117628245cbd63441694fd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ff:70:73:2c:a9:a1:65:5e:da:4e:a3:ab:15:
8c:83:00:d1:42:93:50:dc:e7:2a:bc:1c:be:50:bd:
7c:ce:5a:39:b5:b9:09:1e:ef:88:c4:7a:a0:8f:23:
44:fe:83:de:cc:89:48:34:12:98:a1:8e:af:a3:5a:
db:5d:49:bc:91:9f:92:a9:32:fb:a8:c0:a1:87:df:
06:34:76:4a:ab:5d:5e:a1:b7:e9:d2:14:79:eb:e8:
36:b1:5c:79:f4:04:d8:3c:54:22:4a:04:73:d2:0c:
ad:50:00:f7:a3:ca:cf:55:df:77:8f:41:27:9e:25:
49:ba:40:c8:20:82:40:66:38:0b:81:7e:6d:9f:dd:
bd:03:2c:e1:20:d2:19:76:f9:7c:35:10:78:43:8b:
66:e9:2b:a1:07:27:7f:eb:e4:b8:b9:1b:70:1c:7f:
67:69:b5:e9:0e:63:50:81:10:b4:d7:53:05:78:5a:
c0:7b:db:e4:4c:7e:48:8f:fd:13:3e:11:be:4e:fd:
f2:db:a2:b3:86:01:0e:8a:02:63:0f:8f:6b:1c:fd:
f3:fe:30:30:e0:05:4c:b1:a1:ff:01:c0:3f:74:64:
c5:a1:d8:92:8b:46:2b:28:13:6c:24:58:3a:96:1f:
bf:dc:ef:ce:fd:98:bd:7e:70:ad:bf:8e:4f:df:0c:
23:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:42:16:A0:A8:EC:7D:F9:C1:17:62:82:45:CB:D6:34:41:69:4F:D8
X509v3 Authority Key Identifier:
keyid:0E:E7:4D:18:C4:04:9A:2D:9B:81:2C:2A:58:55:CF:EB:75:AF:A6:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DudNGMQEmi2bgSwqWFXP63Wvpmc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/2c8dbc-40ae-49c6-8dd3-c25debcb1197/1/DudNGMQEmi2bgSwqWFXP63Wvpmc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/2c8dbc-40ae-49c6-8dd3-c25debcb1197/1/DudNGMQEmi2bgSwqWFXP63Wvpmc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:59:56:34:57:4b:26:15:66:39:58:c7:70:b1:b9:a5:4c:9e:
71:8b:2f:8f:8b:fc:56:01:b2:15:cc:2b:12:46:46:ff:35:1d:
54:11:da:f4:32:a1:9c:e1:a6:53:72:80:b7:46:c7:18:32:d5:
ed:e7:14:a3:31:55:85:de:0c:c0:a1:33:32:05:ad:d0:ca:fd:
1f:fb:b1:0c:fc:c1:b5:be:f4:94:55:25:3f:29:b7:59:b4:2d:
72:70:5c:3c:53:bd:ac:f3:59:8b:4f:73:de:ed:10:cf:34:2c:
3f:4f:b5:75:1e:8e:73:1b:7e:58:4e:10:65:92:c3:67:37:ac:
88:13:64:1a:fb:b3:ef:cb:65:2b:50:26:81:5a:cf:0c:27:3d:
2a:f6:10:da:0e:20:75:0e:a1:04:90:f4:0b:11:33:63:3a:c6:
cb:12:03:35:d2:d0:a8:af:c8:be:cf:77:00:8b:03:d1:70:9a:
f5:27:e5:46:c4:aa:d6:7e:ba:ab:09:19:8d:dd:a5:51:40:22:
26:11:ed:6e:ee:a7:98:c8:2c:de:bd:15:c6:e0:7d:84:08:7b:
22:d9:44:67:4d:4e:d0:89:5c:fb:78:4c:7d:db:09:77:be:57:
f2:a1:ff:da:ed:5c:0a:22:40:c4:fb:7f:75:e3:e8:a8:55:20:
3c:12:6a:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:48:17 2025 by rpki-client