Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/9d4bef-8ebd-4fdb-aaf0-e09bc4eae189/1/DzRHeqDwEjE4wEcvWzUo5NIZPmg.mft
File: DzRHeqDwEjE4wEcvWzUo5NIZPmg.mft (raw, json)
Hash identifier: DCnjZo1jSQjjnpxU0Hteibfdrk9rE8PESF1KloU7xRo=
Subject key identifier: 59:2F:86:AB:F5:A3:6D:97:8B:B2:46:6F:97:32:03:B8:7E:04:79:59
Authority key identifier: 0F:34:47:7A:A0:F0:12:31:38:C0:47:2F:5B:35:28:E4:D2:19:3E:68
Certificate issuer: /CN=0f34477aa0f0123138c0472f5b3528e4d2193e68
Certificate serial: 0199FF2282107DAC392958F503263B35B033
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DzRHeqDwEjE4wEcvWzUo5NIZPmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/9d4bef-8ebd-4fdb-aaf0-e09bc4eae189/1/DzRHeqDwEjE4wEcvWzUo5NIZPmg.mft
Manifest number: 16E6
Signing time: Mon 20 Oct 2025 01:01:15 +0000
Manifest this update: Mon 20 Oct 2025 01:01:15 +0000
Manifest next update: Tue 21 Oct 2025 01:01:15 +0000
Files and hashes: 1: DzRHeqDwEjE4wEcvWzUo5NIZPmg.crl (hash: wI6BO1wAHEh2eJkCOFSrloZJitxKzSKMd2R/cf2rlxA=)
2: oiZHTdtEDz6aP8WgUPcMGh6h5wQ.roa (hash: ewlicz9ndLYefeC/+lwNbWi0WIXINkEHOt0Ubc6GHQg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/9d4bef-8ebd-4fdb-aaf0-e09bc4eae189/1/DzRHeqDwEjE4wEcvWzUo5NIZPmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/9d4bef-8ebd-4fdb-aaf0-e09bc4eae189/1/DzRHeqDwEjE4wEcvWzUo5NIZPmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/DzRHeqDwEjE4wEcvWzUo5NIZPmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:22:82:10:7d:ac:39:29:58:f5:03:26:3b:35:b0:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f34477aa0f0123138c0472f5b3528e4d2193e68
Validity
Not Before: Oct 20 01:01:15 2025 GMT
Not After : Oct 21 01:01:15 2025 GMT
Subject: CN=592f86abf5a36d978bb2466f973203b87e047959
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:7f:a0:f8:11:b6:1b:c1:85:e3:cf:b3:90:80:
44:6d:78:df:1e:4b:17:e6:41:4e:9b:75:3b:6b:fe:
39:c5:7f:2f:37:f6:7a:6e:dc:21:37:d6:c5:d9:8e:
54:c6:be:55:14:5d:54:d1:27:fc:2d:95:da:32:df:
0a:14:ee:a2:87:ca:6e:4e:c1:80:34:c6:5f:a7:3c:
18:82:79:41:58:59:4e:3d:f9:f9:43:65:22:ea:cc:
64:96:7d:33:66:e8:cb:32:2d:b7:a2:47:99:0f:d3:
d0:34:03:8f:97:22:5d:09:ea:4e:4c:aa:b1:36:0a:
3e:07:85:db:95:5e:f7:09:78:58:e0:ce:4b:3d:9e:
7b:95:ee:db:93:9a:a0:77:3d:ae:06:9b:27:60:09:
f6:c0:95:26:40:03:d9:42:f9:63:db:a1:b9:a4:80:
06:f6:32:d1:33:91:05:ef:63:0b:64:16:e4:71:2d:
d4:b7:12:ef:97:1b:db:9e:40:c8:0c:df:f7:e8:95:
39:bf:59:b5:6d:c8:1e:cb:23:9c:29:1f:9b:ae:36:
90:72:46:94:e0:08:14:ef:1d:d5:fc:a6:90:1c:97:
a9:2d:8c:87:c5:b9:3e:82:80:71:90:71:23:bf:ec:
b1:ef:8a:b5:3e:c3:67:57:03:e6:24:c0:80:9c:35:
f5:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:2F:86:AB:F5:A3:6D:97:8B:B2:46:6F:97:32:03:B8:7E:04:79:59
X509v3 Authority Key Identifier:
keyid:0F:34:47:7A:A0:F0:12:31:38:C0:47:2F:5B:35:28:E4:D2:19:3E:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DzRHeqDwEjE4wEcvWzUo5NIZPmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/9d4bef-8ebd-4fdb-aaf0-e09bc4eae189/1/DzRHeqDwEjE4wEcvWzUo5NIZPmg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/9d4bef-8ebd-4fdb-aaf0-e09bc4eae189/1/DzRHeqDwEjE4wEcvWzUo5NIZPmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:8c:69:75:44:74:f9:d0:b7:53:d7:8a:e3:97:47:82:64:b0:
12:de:85:ea:ba:8c:b7:08:ca:ba:6b:de:f8:79:a9:3e:21:06:
ca:30:64:9a:63:ea:f5:09:c0:d5:88:b9:5f:fd:80:80:86:6a:
35:1c:ae:fc:fa:57:8d:0b:a8:4d:0e:60:2c:24:06:81:66:09:
ed:99:70:64:38:c3:4b:2c:9d:29:59:19:dc:4c:d2:ee:70:70:
84:5a:3b:fb:27:ae:aa:1d:bd:0e:d2:16:16:28:57:68:25:d5:
6e:76:77:c1:1f:c4:f0:43:8d:9a:7a:b3:15:72:35:7c:45:60:
b9:c5:bd:b0:ab:5c:ba:62:5f:f3:f7:2a:0c:b8:26:e6:a1:09:
1f:60:04:94:6f:e2:db:7e:a3:84:df:09:5f:53:bb:ac:58:09:
38:43:19:7b:42:06:c7:3b:12:65:32:b0:fd:ab:8c:ab:3b:34:
61:f7:e8:d8:20:08:17:bc:1e:cb:ce:7b:99:f0:df:6a:7c:d8:
fb:2c:b1:5a:b9:80:ad:df:7a:c3:f5:01:cc:3c:7f:c0:f9:04:
7e:53:28:ed:3c:7b:18:94:fd:0a:e1:df:71:41:29:06:18:6e:
20:cc:5d:6b:0a:50:b1:14:ee:87:0e:6b:1b:49:7b:28:49:35:
c5:36:3b:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:02:23 2025 by rpki-client