Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/39a3dd-2d26-4753-a180-56d611720224/1/R5jSPWIery3VeYDVoA-8zJhYgvI.mft
File: R5jSPWIery3VeYDVoA-8zJhYgvI.mft (raw, json)
Hash identifier: xvFrWyc+wGvN6PMMZOTtueBKq4aBRrCO3gqZJr/PNU0=
Subject key identifier: DA:6F:0D:6C:13:A3:E7:B1:FA:2D:E2:9D:4A:AF:87:46:A5:DF:23:91
Authority key identifier: 47:98:D2:3D:62:1E:AF:2D:D5:79:80:D5:A0:0F:BC:CC:98:58:82:F2
Certificate issuer: /CN=4798d23d621eaf2dd57980d5a00fbccc985882f2
Certificate serial: 0199FFC871616CC810AA1EE8AE9A904DC769
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R5jSPWIery3VeYDVoA-8zJhYgvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/39a3dd-2d26-4753-a180-56d611720224/1/R5jSPWIery3VeYDVoA-8zJhYgvI.mft
Manifest number: 10DF
Signing time: Mon 20 Oct 2025 04:02:30 +0000
Manifest this update: Mon 20 Oct 2025 04:02:30 +0000
Manifest next update: Tue 21 Oct 2025 04:02:30 +0000
Files and hashes: 1: R5jSPWIery3VeYDVoA-8zJhYgvI.crl (hash: WTHaFrngc98jQB4N+YogwoIDJ5p6AwrG0YuCW01Hln4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/39a3dd-2d26-4753-a180-56d611720224/1/R5jSPWIery3VeYDVoA-8zJhYgvI.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/39a3dd-2d26-4753-a180-56d611720224/1/R5jSPWIery3VeYDVoA-8zJhYgvI.mft
rsync://rpki.ripe.net/repository/DEFAULT/R5jSPWIery3VeYDVoA-8zJhYgvI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 04:02:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c8:71:61:6c:c8:10:aa:1e:e8:ae:9a:90:4d:c7:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4798d23d621eaf2dd57980d5a00fbccc985882f2
Validity
Not Before: Oct 20 04:02:30 2025 GMT
Not After : Oct 21 04:02:30 2025 GMT
Subject: CN=da6f0d6c13a3e7b1fa2de29d4aaf8746a5df2391
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f2:aa:dd:bf:12:4d:c5:2d:1d:aa:f8:1e:70:
c4:a4:f8:da:c3:95:ab:45:ae:17:72:38:43:f5:bd:
dc:fa:e2:e9:92:c7:ed:1e:8e:87:24:ce:81:05:66:
fe:9f:d3:47:83:8c:6e:8c:0e:b0:8a:7f:ae:70:8a:
60:9a:54:98:93:26:cd:a0:a2:07:0a:c9:71:65:fb:
7f:32:04:d0:bd:01:bf:f5:0e:4d:46:8d:b0:d1:15:
f7:f5:dc:c5:ca:d8:ce:93:17:f7:38:17:a9:f1:90:
fb:a2:63:31:ae:11:8d:3a:ec:26:8e:7c:79:fa:85:
57:3d:3b:c0:95:ac:6f:33:33:12:f5:f1:88:f7:35:
0e:65:c1:d6:0b:62:bf:40:9a:98:9e:46:0a:ba:30:
ed:b1:45:d3:1c:66:8d:4e:b7:6a:9e:eb:a5:67:e7:
3c:41:bc:02:30:eb:5d:4d:11:49:a0:b5:1a:c3:f4:
7e:e9:9a:78:86:a2:ba:cf:99:bf:19:a3:17:75:ba:
9d:16:d4:e0:aa:00:0e:63:05:11:f1:f6:c4:4d:a3:
5c:c8:55:80:91:c1:62:58:52:29:96:f7:c6:cb:db:
fa:3b:d6:be:23:73:df:85:3c:cd:17:17:e1:cc:fd:
25:da:6f:6b:fb:3e:ca:2c:d2:a2:6b:14:e4:55:5b:
00:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:6F:0D:6C:13:A3:E7:B1:FA:2D:E2:9D:4A:AF:87:46:A5:DF:23:91
X509v3 Authority Key Identifier:
keyid:47:98:D2:3D:62:1E:AF:2D:D5:79:80:D5:A0:0F:BC:CC:98:58:82:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R5jSPWIery3VeYDVoA-8zJhYgvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/39a3dd-2d26-4753-a180-56d611720224/1/R5jSPWIery3VeYDVoA-8zJhYgvI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/39a3dd-2d26-4753-a180-56d611720224/1/R5jSPWIery3VeYDVoA-8zJhYgvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:a1:b3:2f:92:bf:c9:37:0b:58:98:dc:5d:96:27:e1:65:19:
62:24:73:d5:ef:22:7c:b7:2e:26:4c:ac:8b:0f:20:79:b9:c7:
36:4b:2a:26:01:57:be:26:0a:aa:35:55:bc:db:c4:3b:b2:ee:
41:4f:dd:00:3f:6d:2a:98:6d:9d:5b:9d:d9:b5:fe:d5:36:3f:
20:1e:e7:83:f6:1a:af:ec:6e:8c:07:22:bd:25:c8:1d:98:c8:
53:f5:f0:fe:8c:2c:01:7f:15:fb:2a:f6:0c:d0:c2:06:f6:27:
b9:9c:d2:dd:7f:f0:4d:2a:74:7d:0a:8e:83:8e:77:be:00:be:
ae:f8:eb:9a:43:94:34:0f:b3:97:37:b2:3d:65:b4:49:7a:03:
a1:d2:7b:b4:e1:96:82:c9:4d:b7:ba:b8:59:90:2c:62:9f:2b:
47:71:4a:eb:73:c0:d2:03:c1:ef:5d:21:cf:b6:b6:2b:4a:06:
3c:28:a9:15:8a:dd:22:1a:3c:27:94:81:e2:d1:35:a6:bf:08:
fb:99:51:41:06:55:aa:71:c5:68:ef:07:59:e5:d1:29:fb:22:
6c:66:45:45:de:a5:85:e9:e1:99:9a:ff:b9:2b:0e:3b:e4:5f:
89:ec:f5:9f:1a:8e:2d:38:c1:c0:c5:25:1c:e1:5d:5b:70:da:
25:39:51:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:39:46 2025 by rpki-client