Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/1e6d59-27cf-419f-ad1d-6210641e52d6/1/dxToFxWNwwfu1NTG7fUaieVwPs8.mft
File: dxToFxWNwwfu1NTG7fUaieVwPs8.mft (raw, json)
Hash identifier: TKQD0nMkBXu9naHGn1aC+x+GxTxy0+9yezdg03GqAtA=
Subject key identifier: B9:17:C4:70:2F:D9:BE:05:DE:B9:FE:3D:65:2A:AF:AC:02:D0:A9:6C
Authority key identifier: 77:14:E8:17:15:8D:C3:07:EE:D4:D4:C6:ED:F5:1A:89:E5:70:3E:CF
Certificate issuer: /CN=7714e817158dc307eed4d4c6edf51a89e5703ecf
Certificate serial: 0199FC585595F5B04D5D12743843A9FD8131
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dxToFxWNwwfu1NTG7fUaieVwPs8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/1e6d59-27cf-419f-ad1d-6210641e52d6/1/dxToFxWNwwfu1NTG7fUaieVwPs8.mft
Manifest number: 0EB9
Signing time: Sun 19 Oct 2025 12:01:11 +0000
Manifest this update: Sun 19 Oct 2025 12:01:11 +0000
Manifest next update: Mon 20 Oct 2025 12:01:11 +0000
Files and hashes: 1: dxToFxWNwwfu1NTG7fUaieVwPs8.crl (hash: 1j4KkVvoi5l+zSFDqixzAlTju7vj1rqx4WUkWudihzg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/1e6d59-27cf-419f-ad1d-6210641e52d6/1/dxToFxWNwwfu1NTG7fUaieVwPs8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/1e6d59-27cf-419f-ad1d-6210641e52d6/1/dxToFxWNwwfu1NTG7fUaieVwPs8.mft
rsync://rpki.ripe.net/repository/DEFAULT/dxToFxWNwwfu1NTG7fUaieVwPs8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:55:95:f5:b0:4d:5d:12:74:38:43:a9:fd:81:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7714e817158dc307eed4d4c6edf51a89e5703ecf
Validity
Not Before: Oct 19 12:01:11 2025 GMT
Not After : Oct 20 12:01:11 2025 GMT
Subject: CN=b917c4702fd9be05deb9fe3d652aafac02d0a96c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:8c:5f:b4:54:49:84:99:0b:29:34:54:97:9d:
c8:e3:75:f6:bc:7d:e6:43:4d:0d:b7:07:d6:21:38:
a8:5b:a0:ed:4e:84:90:61:99:28:10:53:0e:c5:21:
23:73:24:7c:3a:a2:72:8a:0c:5e:11:82:80:06:e0:
30:ef:8d:69:d1:6b:8e:93:92:0c:e3:ec:53:b5:c5:
a0:48:ae:2a:a5:a5:40:8a:3d:24:a4:57:f0:2e:87:
5f:b0:49:3d:1a:a5:70:cb:be:af:bb:e8:a1:5a:f2:
4d:d8:5d:0b:4c:70:5d:3b:58:4f:93:00:ca:68:1b:
ae:77:69:a6:bb:99:5a:09:ac:4a:7e:e8:91:74:99:
45:80:d3:e2:ae:29:f3:20:ec:ec:79:60:6c:c8:25:
64:2b:dc:bf:e2:81:43:6d:f8:18:a7:c4:80:3c:0c:
c6:8b:16:5e:58:09:34:f8:c1:8c:f1:c2:26:f8:f7:
b0:20:03:8f:31:a1:03:0c:f3:be:b2:1b:29:b1:a2:
af:17:65:c4:68:5b:85:00:73:16:c6:d4:26:fc:1c:
b8:75:75:b9:62:36:91:9a:49:01:e7:74:77:64:7f:
f4:44:6c:ba:87:5c:b2:26:7a:0c:45:1e:67:7a:86:
30:e0:a2:c9:b9:8e:66:fd:4e:e2:e4:0e:71:8a:06:
fe:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:17:C4:70:2F:D9:BE:05:DE:B9:FE:3D:65:2A:AF:AC:02:D0:A9:6C
X509v3 Authority Key Identifier:
keyid:77:14:E8:17:15:8D:C3:07:EE:D4:D4:C6:ED:F5:1A:89:E5:70:3E:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dxToFxWNwwfu1NTG7fUaieVwPs8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/1e6d59-27cf-419f-ad1d-6210641e52d6/1/dxToFxWNwwfu1NTG7fUaieVwPs8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/1e6d59-27cf-419f-ad1d-6210641e52d6/1/dxToFxWNwwfu1NTG7fUaieVwPs8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:e2:80:20:d4:85:42:77:3c:c5:f7:8f:b2:56:24:9b:9c:8c:
24:e4:84:75:14:e5:23:c3:9f:c2:6a:ff:9b:c8:38:b8:31:f9:
6a:c4:85:af:11:6e:ec:e3:32:c0:69:b0:4b:ae:3e:40:ba:07:
1b:5e:1a:b3:0d:92:d2:74:05:28:6a:c2:56:35:fb:3c:be:8e:
98:63:a6:b1:58:8b:f1:52:cb:48:72:2c:1e:de:04:fd:30:ef:
c1:89:7e:97:13:b6:c6:38:74:28:6e:46:8d:e9:14:be:b2:de:
16:8b:5a:a2:6e:70:07:cc:13:7a:7d:78:30:39:9e:5c:e4:3f:
86:75:c4:4d:1a:40:8a:58:53:39:00:ec:ee:0a:9d:cc:e9:d0:
5f:75:21:78:0c:dd:63:9c:4d:40:f8:83:80:71:93:86:ac:f1:
59:86:43:fe:a1:27:b1:d5:5b:29:ae:e8:a3:05:7d:5a:09:d9:
af:c8:7f:56:45:77:e3:e9:e7:12:6b:89:ee:7e:c7:66:f4:09:
de:a8:17:36:2d:77:b2:ae:72:fc:44:c6:22:ac:96:c4:ec:63:
6b:04:ed:ab:9c:36:70:63:e8:a5:23:43:8b:a0:61:0f:a6:fc:
18:1e:d9:ec:b8:e5:c8:15:02:81:db:f4:5e:56:f0:4d:c7:85:
bb:2b:35:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:07:51 2025 by rpki-client