Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/e3bbdf-9585-46e5-b5cc-f68a59d2fe0d/1/dUxXhm6Xqtqtdd7MadDfBy1Qbuc.mft
File: dUxXhm6Xqtqtdd7MadDfBy1Qbuc.mft (raw, json)
Hash identifier: iZTObEGX86h3qzGwC3lyDYTEJ/58twIk9lHCQ1v7nsg=
Subject key identifier: 87:DD:F9:AE:C4:DA:A2:E3:A5:EC:EE:A6:0A:F2:5D:72:18:11:AC:92
Authority key identifier: 75:4C:57:86:6E:97:AA:DA:AD:75:DE:CC:69:D0:DF:07:2D:50:6E:E7
Certificate issuer: /CN=754c57866e97aadaad75decc69d0df072d506ee7
Certificate serial: 019A0110AEDB28AA4E6F99FE03D12BC4B6BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dUxXhm6Xqtqtdd7MadDfBy1Qbuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/e3bbdf-9585-46e5-b5cc-f68a59d2fe0d/1/dUxXhm6Xqtqtdd7MadDfBy1Qbuc.mft
Manifest number: 01C1
Signing time: Mon 20 Oct 2025 10:01:01 +0000
Manifest this update: Mon 20 Oct 2025 10:01:01 +0000
Manifest next update: Tue 21 Oct 2025 10:01:01 +0000
Files and hashes: 1: dUxXhm6Xqtqtdd7MadDfBy1Qbuc.crl (hash: rbhztjK/SuCq4tZCkFg2Fy7/iojROhDgN6xJolVqYbE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/e3bbdf-9585-46e5-b5cc-f68a59d2fe0d/1/dUxXhm6Xqtqtdd7MadDfBy1Qbuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/e3bbdf-9585-46e5-b5cc-f68a59d2fe0d/1/dUxXhm6Xqtqtdd7MadDfBy1Qbuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/dUxXhm6Xqtqtdd7MadDfBy1Qbuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:10:ae:db:28:aa:4e:6f:99:fe:03:d1:2b:c4:b6:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=754c57866e97aadaad75decc69d0df072d506ee7
Validity
Not Before: Oct 20 10:01:01 2025 GMT
Not After : Oct 21 10:01:01 2025 GMT
Subject: CN=87ddf9aec4daa2e3a5eceea60af25d721811ac92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ea:7d:b9:76:7d:c4:28:a0:f8:da:02:bc:89:
6c:df:5e:79:f1:35:4e:fc:83:24:f4:04:65:b1:51:
5c:ea:52:f8:68:47:a2:55:b3:6c:f0:32:a7:e1:1f:
e6:07:95:da:d0:d9:f4:28:cd:44:b8:a4:dd:b3:10:
86:8c:dc:3f:e3:1d:69:c0:ac:5b:6a:4e:e7:0e:79:
3d:30:6f:0a:a1:e1:fd:9a:38:94:ba:31:58:11:c8:
10:37:5c:07:56:ca:b6:21:82:fc:bc:3e:90:25:21:
b1:25:b2:e3:58:b8:2b:31:8f:40:a8:7c:e0:b9:0d:
67:e3:cc:3b:9f:1e:32:34:ec:2b:a5:2b:cd:56:d0:
4b:b6:3c:b6:d8:b7:f5:b5:00:60:0d:7c:c2:6e:12:
25:8f:a7:0e:05:46:28:21:03:43:2a:9f:12:31:d1:
8b:58:84:96:9c:5a:5c:f9:c1:a1:68:62:56:53:c6:
a8:6a:f4:48:03:e3:e5:3c:04:b9:37:85:fc:3e:e3:
18:b7:45:05:6d:e7:07:7e:ec:ce:ab:ed:b9:95:95:
77:4a:ea:a5:22:b8:96:78:d1:b7:1a:47:98:7f:91:
20:70:f7:9c:0d:c9:cc:22:30:61:27:9a:db:71:a4:
6c:4b:d2:00:5d:46:ee:bf:05:24:66:9f:98:d8:2f:
61:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:DD:F9:AE:C4:DA:A2:E3:A5:EC:EE:A6:0A:F2:5D:72:18:11:AC:92
X509v3 Authority Key Identifier:
keyid:75:4C:57:86:6E:97:AA:DA:AD:75:DE:CC:69:D0:DF:07:2D:50:6E:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dUxXhm6Xqtqtdd7MadDfBy1Qbuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/e3bbdf-9585-46e5-b5cc-f68a59d2fe0d/1/dUxXhm6Xqtqtdd7MadDfBy1Qbuc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/e3bbdf-9585-46e5-b5cc-f68a59d2fe0d/1/dUxXhm6Xqtqtdd7MadDfBy1Qbuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:c5:0e:a7:43:ba:1d:b1:f9:5b:a3:ff:00:ab:7e:e9:59:d5:
66:e6:4d:3c:31:52:93:9c:6e:da:22:c6:60:4c:c6:73:93:16:
d8:e7:b4:c9:2b:5a:ca:4a:17:79:7c:7b:ac:7b:f8:07:a4:91:
a1:75:0f:de:f7:e3:f6:da:cf:5e:95:5a:b3:4d:0e:8b:94:ae:
07:38:82:54:01:45:19:43:d9:74:49:2a:c0:66:4e:4c:4b:83:
c0:65:d1:a9:c6:ec:de:82:a0:3b:86:ed:63:4f:fb:f3:c9:8e:
46:99:a4:ef:27:d9:d8:96:71:f7:6a:0b:3e:53:8f:55:c9:55:
4e:61:ff:1b:35:71:07:40:20:5c:1c:f7:77:2f:53:6b:3b:93:
87:f1:9f:d0:83:49:21:3b:fa:b4:63:24:60:3b:f5:c3:09:29:
5a:c9:27:59:36:6a:61:c4:36:37:01:63:d3:e8:43:95:b0:0f:
4e:16:82:4a:77:f1:c8:e8:7f:d6:89:87:e9:2f:47:0c:92:39:
4f:70:10:f0:52:54:48:b4:f3:21:29:e0:ba:72:f9:e7:f3:41:
92:87:60:67:71:30:15:62:df:a1:38:e8:88:20:31:0d:c9:7c:
b1:69:11:43:a4:c6:6c:6b:76:14:eb:d6:e4:e8:fb:55:86:7f:
a9:8f:1d:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:38:45 2025 by rpki-client