Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/72e91a-014f-483a-a544-4e33427f734e/1/DrG9MNMZGofH0KRi5nkyQxYz3R4.mft
File: DrG9MNMZGofH0KRi5nkyQxYz3R4.mft (raw, json)
Hash identifier: yZWCv6y9EGNHQwtXMPaVSov0juyQfbtHC/M7ldFh8ls=
Subject key identifier: A1:3D:D0:4F:DE:9A:C5:E4:8A:A6:B2:8B:5E:61:32:41:9C:FD:FE:52
Authority key identifier: 0E:B1:BD:30:D3:19:1A:87:C7:D0:A4:62:E6:79:32:43:16:33:DD:1E
Certificate issuer: /CN=0eb1bd30d3191a87c7d0a462e67932431633dd1e
Certificate serial: 0199FFFE3E71E2ED68B81A7656A09CD749C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DrG9MNMZGofH0KRi5nkyQxYz3R4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/72e91a-014f-483a-a544-4e33427f734e/1/DrG9MNMZGofH0KRi5nkyQxYz3R4.mft
Manifest number: 03FD
Signing time: Mon 20 Oct 2025 05:01:16 +0000
Manifest this update: Mon 20 Oct 2025 05:01:16 +0000
Manifest next update: Tue 21 Oct 2025 05:01:16 +0000
Files and hashes: 1: DrG9MNMZGofH0KRi5nkyQxYz3R4.crl (hash: u1TWjWbgvyQ3cvNqv1CzYPlqyT90sjrzwWNnDTKLkBA=)
2: ogxxjz_eGLDn7LYpHHuvCo9x5ng.roa (hash: B2U5jkd3tbLDGtZHWekj2Yva7wWVjyZDFNXj9MRShj4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/72e91a-014f-483a-a544-4e33427f734e/1/DrG9MNMZGofH0KRi5nkyQxYz3R4.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/72e91a-014f-483a-a544-4e33427f734e/1/DrG9MNMZGofH0KRi5nkyQxYz3R4.mft
rsync://rpki.ripe.net/repository/DEFAULT/DrG9MNMZGofH0KRi5nkyQxYz3R4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 05:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:fe:3e:71:e2:ed:68:b8:1a:76:56:a0:9c:d7:49:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0eb1bd30d3191a87c7d0a462e67932431633dd1e
Validity
Not Before: Oct 20 05:01:16 2025 GMT
Not After : Oct 21 05:01:16 2025 GMT
Subject: CN=a13dd04fde9ac5e48aa6b28b5e6132419cfdfe52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:84:ed:c8:7f:23:88:f1:c7:0f:16:62:99:14:
5b:1b:34:67:f8:76:b2:b2:02:f8:0d:11:0f:5f:1e:
66:5f:9e:ba:cd:e5:82:52:82:d1:84:d9:bb:3b:2f:
2b:6a:39:f5:b8:15:c9:48:42:0c:70:9b:d6:05:99:
99:55:04:c5:8a:0b:fc:dd:85:82:c7:40:70:b9:0c:
2e:9c:79:53:f6:00:83:19:2e:e3:69:81:73:d9:dd:
bf:54:fd:97:f7:16:c1:6b:22:01:03:6f:99:93:76:
f9:1d:c6:a1:93:a8:2e:d3:12:c6:21:39:90:bc:98:
7e:00:29:b2:18:b4:d9:e3:e9:91:c8:5a:bc:b8:1e:
9b:e5:b8:92:01:a2:72:c7:e3:a9:4f:e8:40:07:91:
52:2f:50:c3:99:16:16:fe:8d:51:48:e5:c4:60:f0:
5d:69:75:43:4a:a1:1a:f4:79:ba:44:33:a7:5b:e7:
2c:29:e7:3d:87:ed:ff:0d:62:df:1d:af:54:5f:ac:
39:64:c5:3a:87:0a:03:89:cf:bb:0e:30:06:8c:dd:
b9:5c:71:f2:7d:dc:b8:37:30:07:18:02:c7:e1:95:
ce:77:b9:90:f1:72:1b:b3:70:c7:7d:1c:ca:7b:11:
df:c9:21:06:fb:6f:3e:50:c0:cb:0d:7d:fe:ff:25:
4f:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:3D:D0:4F:DE:9A:C5:E4:8A:A6:B2:8B:5E:61:32:41:9C:FD:FE:52
X509v3 Authority Key Identifier:
keyid:0E:B1:BD:30:D3:19:1A:87:C7:D0:A4:62:E6:79:32:43:16:33:DD:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DrG9MNMZGofH0KRi5nkyQxYz3R4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/72e91a-014f-483a-a544-4e33427f734e/1/DrG9MNMZGofH0KRi5nkyQxYz3R4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/72e91a-014f-483a-a544-4e33427f734e/1/DrG9MNMZGofH0KRi5nkyQxYz3R4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:48:6e:7c:67:73:d9:82:30:74:07:53:d6:cb:2b:1f:54:0b:
65:72:a0:cd:bc:59:22:6e:0a:a9:4a:16:12:d5:58:d6:52:4e:
09:18:bc:8f:46:06:6e:b2:73:6b:f7:bb:fe:9a:82:e7:8c:29:
a6:20:9a:a0:7b:24:32:45:0c:ca:d0:8d:46:ce:1e:43:95:ce:
8d:8e:18:ad:b6:55:50:31:9b:2b:3e:75:4b:9d:5a:3a:73:2e:
5d:d2:88:bf:1b:33:7d:dd:e9:e0:36:37:07:bc:78:15:b0:7c:
52:5e:29:2b:6d:46:6a:df:4b:09:44:19:d6:6a:a2:16:59:77:
b9:5a:35:bd:50:e5:0c:a4:21:32:cd:b1:af:86:dd:15:ef:f3:
fe:ec:c3:83:8f:41:c6:93:cf:56:f1:66:d8:41:18:3b:f1:ec:
dc:25:1b:2e:88:e1:7f:d0:37:fc:91:be:13:7f:ad:58:c0:9e:
0b:52:7a:19:9c:96:6e:60:09:16:03:a4:86:4d:7e:0b:e6:4c:
03:d4:67:2b:a5:1d:fd:67:b8:2f:33:2d:9b:4c:5e:c8:b0:bc:
e2:06:3e:29:4d:2e:9f:53:ae:cd:87:a2:11:06:cb:1a:06:28:
aa:72:eb:de:17:f8:d0:18:40:41:94:57:39:1b:ab:a0:89:c7:
da:09:8f:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:53:38 2025 by rpki-client