Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/bd1b8f-d065-4cc7-9a1f-45ab3f520f00/1/DZxWoYyYei0aLnBEt-MbMhv3rBY.mft
File: DZxWoYyYei0aLnBEt-MbMhv3rBY.mft (raw, json)
Hash identifier: x8P8UFc8n8r2bseJvykqErp8GmVhEZm3DYc7C3jyQOE=
Subject key identifier: 8D:53:57:8C:D1:5C:51:EC:92:EF:24:AE:1D:E7:86:E3:D3:80:B6:40
Authority key identifier: 0D:9C:56:A1:8C:98:7A:2D:1A:2E:70:44:B7:E3:1B:32:1B:F7:AC:16
Certificate issuer: /CN=0d9c56a18c987a2d1a2e7044b7e31b321bf7ac16
Certificate serial: 0199FBEAB149FEB2EFF90ABDA9C2197CCA7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DZxWoYyYei0aLnBEt-MbMhv3rBY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/bd1b8f-d065-4cc7-9a1f-45ab3f520f00/1/DZxWoYyYei0aLnBEt-MbMhv3rBY.mft
Manifest number: 0873
Signing time: Sun 19 Oct 2025 10:01:26 +0000
Manifest this update: Sun 19 Oct 2025 10:01:26 +0000
Manifest next update: Mon 20 Oct 2025 10:01:26 +0000
Files and hashes: 1: DZxWoYyYei0aLnBEt-MbMhv3rBY.crl (hash: m0eYRKveUcbXOfUGlPNeG9lcHxsMiSqhQTuCw2A6oEI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/bd1b8f-d065-4cc7-9a1f-45ab3f520f00/1/DZxWoYyYei0aLnBEt-MbMhv3rBY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/bd1b8f-d065-4cc7-9a1f-45ab3f520f00/1/DZxWoYyYei0aLnBEt-MbMhv3rBY.mft
rsync://rpki.ripe.net/repository/DEFAULT/DZxWoYyYei0aLnBEt-MbMhv3rBY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:b1:49:fe:b2:ef:f9:0a:bd:a9:c2:19:7c:ca:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d9c56a18c987a2d1a2e7044b7e31b321bf7ac16
Validity
Not Before: Oct 19 10:01:26 2025 GMT
Not After : Oct 20 10:01:26 2025 GMT
Subject: CN=8d53578cd15c51ec92ef24ae1de786e3d380b640
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:7c:3a:4f:1f:47:54:2e:54:41:c2:27:3e:87:
38:ba:1b:23:62:b2:87:b9:d1:3c:bc:d1:fa:ef:c1:
58:4b:49:05:45:a3:c2:02:95:de:ba:b4:c3:47:07:
bb:8f:77:b0:9a:50:f1:be:fc:44:be:5c:e6:06:0c:
00:a4:b2:af:05:1e:e5:e2:05:91:74:9b:01:ac:b5:
b9:3c:ac:86:35:62:c0:94:9a:5d:eb:3f:9a:cc:4d:
9b:d8:93:de:78:b3:b6:10:21:74:ad:01:29:f7:c1:
6a:19:91:68:04:39:6f:45:14:b7:18:d9:27:2c:f6:
b9:bd:93:44:1b:39:27:67:9d:7b:33:8b:17:1d:7f:
8d:da:43:12:a9:9a:66:fd:14:2d:34:fa:98:2c:38:
98:18:7a:db:a4:e3:c1:79:1c:cd:15:fc:fa:00:3a:
fc:09:5d:d0:93:3a:2e:18:0a:8f:02:99:b5:36:e6:
ce:97:b2:4d:90:47:6e:0f:a1:76:4e:d3:33:56:7b:
5f:9b:9d:49:b8:af:c5:c8:d9:a8:b2:c2:30:11:61:
23:32:01:cd:4b:63:da:a1:a4:b1:c9:1f:37:33:58:
51:0c:45:83:61:af:c7:19:e9:86:60:9c:06:63:33:
6a:17:55:1f:f6:68:b1:f3:41:67:5c:73:38:0c:4b:
25:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:53:57:8C:D1:5C:51:EC:92:EF:24:AE:1D:E7:86:E3:D3:80:B6:40
X509v3 Authority Key Identifier:
keyid:0D:9C:56:A1:8C:98:7A:2D:1A:2E:70:44:B7:E3:1B:32:1B:F7:AC:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DZxWoYyYei0aLnBEt-MbMhv3rBY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/bd1b8f-d065-4cc7-9a1f-45ab3f520f00/1/DZxWoYyYei0aLnBEt-MbMhv3rBY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/bd1b8f-d065-4cc7-9a1f-45ab3f520f00/1/DZxWoYyYei0aLnBEt-MbMhv3rBY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:15:25:ac:dd:4c:10:4a:ee:b6:37:99:d9:6b:38:fa:80:a4:
e4:62:e2:97:72:1f:bd:7d:46:f8:8a:96:cb:03:43:21:7e:37:
1a:25:2a:25:f3:11:5c:0e:66:1f:18:5b:7f:b4:2a:42:f9:fa:
72:7b:e0:45:4a:a2:f2:31:31:ad:9d:37:f9:ae:b8:aa:d6:2b:
ac:cf:b6:e3:f9:59:e4:e9:bf:df:46:64:7b:3f:70:6d:85:1f:
67:31:53:eb:0e:13:f5:f1:c2:e0:1d:e7:d0:7b:f9:fc:0d:25:
a5:a7:1c:2c:80:fd:06:9b:eb:11:9e:49:bd:d3:d5:4f:70:db:
dc:e7:39:be:05:a3:38:3f:a3:dd:c5:15:ea:3e:34:3c:ab:a1:
2d:53:f9:fd:90:c1:37:fe:28:62:e3:13:10:55:e0:78:a0:9b:
81:86:8c:f6:f1:ab:04:01:db:63:f2:db:3d:b2:d4:93:11:64:
f6:aa:ee:08:1d:83:03:f0:6a:fe:e0:d0:d7:16:2e:76:90:84:
1a:59:96:a5:8c:4a:29:e4:29:e2:b1:4b:cc:15:ff:fd:9f:bf:
5f:8a:19:2f:0c:0d:d1:b0:37:95:62:d4:f6:0c:5a:09:a5:24:
b2:0b:6c:2e:c4:6f:77:05:f9:ef:e3:82:2e:24:77:45:8f:33:
1c:01:48:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:11:27 2025 by rpki-client