Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/14a273-8b75-476c-b9e3-8bbd93940eef/1/Dimkgt4NVnRsMEUmn5kgUgT5VIQ.mft
File: Dimkgt4NVnRsMEUmn5kgUgT5VIQ.mft (raw, json)
Hash identifier: qox+jlxM83Ou+vaY8JOUK/JpuL2e1pPbC3nDPY6osG4=
Subject key identifier: FF:5A:8D:08:D2:59:C4:69:47:8A:DC:A3:8E:3A:45:FB:1B:F5:80:F1
Authority key identifier: 0E:29:A4:82:DE:0D:56:74:6C:30:45:26:9F:99:20:52:04:F9:54:84
Certificate issuer: /CN=0e29a482de0d56746c3045269f99205204f95484
Certificate serial: 0199FBEC3B6169FFD2DA909F18237C0D3D9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dimkgt4NVnRsMEUmn5kgUgT5VIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/14a273-8b75-476c-b9e3-8bbd93940eef/1/Dimkgt4NVnRsMEUmn5kgUgT5VIQ.mft
Manifest number: 1288
Signing time: Sun 19 Oct 2025 10:03:06 +0000
Manifest this update: Sun 19 Oct 2025 10:03:06 +0000
Manifest next update: Mon 20 Oct 2025 10:03:06 +0000
Files and hashes: 1: Dimkgt4NVnRsMEUmn5kgUgT5VIQ.crl (hash: SkudpGzWqOY4lvt8d1elSyVfORRAdOA3BGY23c++2Zk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/14a273-8b75-476c-b9e3-8bbd93940eef/1/Dimkgt4NVnRsMEUmn5kgUgT5VIQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/14a273-8b75-476c-b9e3-8bbd93940eef/1/Dimkgt4NVnRsMEUmn5kgUgT5VIQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dimkgt4NVnRsMEUmn5kgUgT5VIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:03:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ec:3b:61:69:ff:d2:da:90:9f:18:23:7c:0d:3d:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e29a482de0d56746c3045269f99205204f95484
Validity
Not Before: Oct 19 10:03:06 2025 GMT
Not After : Oct 20 10:03:06 2025 GMT
Subject: CN=ff5a8d08d259c469478adca38e3a45fb1bf580f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:11:c0:8b:4f:92:42:43:42:eb:0e:2c:66:eb:
96:1b:f8:7f:3b:70:c5:1d:4a:38:4e:09:e0:e4:2f:
68:7a:66:7e:7a:d6:21:b7:4b:7d:53:39:7d:85:21:
b4:eb:e7:f8:a9:78:8d:43:be:0f:14:c2:4c:90:7b:
da:c7:20:a3:c2:f5:d1:6b:a1:2e:a2:5f:69:f0:37:
b8:10:b0:5e:55:26:6b:5b:b0:a5:cd:c6:49:49:09:
e2:4a:23:8c:73:27:32:0e:c8:f4:2b:77:61:39:1c:
46:88:cf:d2:ab:eb:43:b2:ad:10:93:86:11:b9:31:
ed:2a:ac:60:3b:b6:9d:f2:cf:ec:70:27:6f:ca:9a:
26:4b:3d:85:51:b6:22:da:6a:12:bf:4d:e7:db:40:
50:b3:33:66:8d:af:f3:f1:2f:f9:43:47:28:e6:9e:
51:1e:d1:1c:34:a8:77:ad:72:ea:e0:3f:6a:c5:80:
a1:da:97:39:f2:0e:a7:0d:f3:4c:ef:05:9a:6b:2b:
4d:25:18:c2:39:e8:55:61:84:be:01:fc:30:d9:40:
91:f2:c5:75:0c:3c:e5:22:bd:bc:59:79:85:56:4c:
bf:b9:32:68:3f:bd:6e:b5:ae:80:33:80:23:0a:b7:
5c:de:d7:22:ad:5f:31:5d:85:87:f7:80:0e:4b:b8:
e0:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:5A:8D:08:D2:59:C4:69:47:8A:DC:A3:8E:3A:45:FB:1B:F5:80:F1
X509v3 Authority Key Identifier:
keyid:0E:29:A4:82:DE:0D:56:74:6C:30:45:26:9F:99:20:52:04:F9:54:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dimkgt4NVnRsMEUmn5kgUgT5VIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/14a273-8b75-476c-b9e3-8bbd93940eef/1/Dimkgt4NVnRsMEUmn5kgUgT5VIQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/14a273-8b75-476c-b9e3-8bbd93940eef/1/Dimkgt4NVnRsMEUmn5kgUgT5VIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:22:e4:de:5a:00:e6:b4:df:7f:d5:81:c8:3a:66:a7:1b:57:
87:63:d4:e9:46:39:0d:34:7b:54:52:14:0c:ca:0d:fd:50:b9:
ac:b1:b0:8e:33:eb:b8:bd:0f:9e:f6:6d:3a:3a:6c:05:f3:0e:
64:07:4b:e4:c6:5a:09:67:ba:eb:dc:08:f3:a5:77:f9:ef:e7:
ba:60:8b:94:db:ea:5d:f9:38:09:64:4d:66:b2:f7:76:af:6c:
ff:23:87:f7:f8:aa:b5:b3:4b:c8:1b:08:6f:c7:d4:be:26:fe:
ec:2e:5d:e1:b3:78:dc:03:d0:33:09:0b:68:98:db:da:66:67:
f8:02:10:c8:3e:69:38:84:48:cf:65:bb:71:f2:43:4f:6e:f7:
3f:ad:18:5c:92:9f:88:46:5a:4b:40:ba:c3:c2:51:a7:91:5c:
4b:83:71:21:a7:f4:f7:a2:bc:0c:5c:03:c2:c1:0f:b0:31:83:
8b:ac:c9:fc:ea:2d:e9:e6:82:6e:30:47:69:23:2a:2f:5e:ed:
cc:e5:a5:ee:b3:f6:8c:04:a2:84:a1:d0:59:b3:28:46:f3:0a:
05:6a:db:61:84:fe:a9:06:ee:33:21:9d:02:22:cc:2d:28:7d:
92:96:a5:1f:3e:4a:eb:e8:34:37:90:f6:f1:85:09:9a:b8:8c:
71:c9:24:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:00:03 2025 by rpki-client