Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/4c84cd-0bf1-43a3-b442-65bd4224cdb9/1/0sAfMj0dJYn5qbRi_nDzawn6xjI.mft
File: 0sAfMj0dJYn5qbRi_nDzawn6xjI.mft (raw, json)
Hash identifier: ZRtBjFnkkdaiJQ1nBrsbEWLhKKDW2/Kxg6NqKmmdCKc=
Subject key identifier: C1:20:49:DD:2F:C0:E7:87:80:76:5F:6D:92:E9:40:71:85:14:AA:5A
Authority key identifier: D2:C0:1F:32:3D:1D:25:89:F9:A9:B4:62:FE:70:F3:6B:09:FA:C6:32
Certificate issuer: /CN=d2c01f323d1d2589f9a9b462fe70f36b09fac632
Certificate serial: 0199FCFD43CC53CDAF5EE6032CED1537173E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0sAfMj0dJYn5qbRi_nDzawn6xjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/4c84cd-0bf1-43a3-b442-65bd4224cdb9/1/0sAfMj0dJYn5qbRi_nDzawn6xjI.mft
Manifest number: 070F
Signing time: Sun 19 Oct 2025 15:01:20 +0000
Manifest this update: Sun 19 Oct 2025 15:01:20 +0000
Manifest next update: Mon 20 Oct 2025 15:01:20 +0000
Files and hashes: 1: 0sAfMj0dJYn5qbRi_nDzawn6xjI.crl (hash: rzcSLj/Bg5ykOoo2+kguMOhxtwMHryGOBXph0X5Y4ow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/4c84cd-0bf1-43a3-b442-65bd4224cdb9/1/0sAfMj0dJYn5qbRi_nDzawn6xjI.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/4c84cd-0bf1-43a3-b442-65bd4224cdb9/1/0sAfMj0dJYn5qbRi_nDzawn6xjI.mft
rsync://rpki.ripe.net/repository/DEFAULT/0sAfMj0dJYn5qbRi_nDzawn6xjI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:43:cc:53:cd:af:5e:e6:03:2c:ed:15:37:17:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2c01f323d1d2589f9a9b462fe70f36b09fac632
Validity
Not Before: Oct 19 15:01:20 2025 GMT
Not After : Oct 20 15:01:20 2025 GMT
Subject: CN=c12049dd2fc0e78780765f6d92e940718514aa5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:40:0d:57:04:a4:77:5a:bd:34:6c:6e:a2:80:
9d:02:a0:e8:11:79:7a:07:de:1a:92:81:21:39:11:
2f:d8:17:cf:48:e0:07:eb:1e:e2:47:68:de:01:f2:
e1:99:69:1b:2d:90:5d:63:26:7d:c1:fb:9a:78:89:
10:6e:57:c5:02:84:4f:b6:d6:f2:d2:ff:d2:a9:08:
c1:2d:44:8b:19:fe:9b:1e:3a:9d:6e:cc:56:d5:d9:
79:3d:00:3e:dc:16:30:ca:6e:31:92:61:81:ba:ff:
2c:41:d6:33:e9:91:b3:1c:86:81:95:7d:21:12:07:
3e:e0:05:d1:8e:62:27:41:2f:36:83:91:b9:0d:1e:
93:26:c2:6f:ad:7d:ae:ce:a0:cb:e9:8f:3c:ba:df:
18:d1:e6:e7:3f:fa:74:eb:37:17:bf:c2:b9:23:b1:
23:ef:34:78:54:e8:43:61:0f:70:79:6a:7d:1c:73:
7b:7a:e6:d1:af:97:3e:07:b6:d9:5d:52:b9:2d:9b:
ed:76:c3:f9:8c:71:d0:f7:9a:f5:2c:45:24:eb:7f:
4d:50:fa:70:44:e9:00:3d:9e:aa:b9:10:e5:c3:05:
16:22:aa:49:6e:51:13:bb:c4:91:8b:0d:bc:26:a7:
4c:db:d3:d2:a4:3c:64:e0:66:c3:80:08:a4:0a:e5:
05:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:20:49:DD:2F:C0:E7:87:80:76:5F:6D:92:E9:40:71:85:14:AA:5A
X509v3 Authority Key Identifier:
keyid:D2:C0:1F:32:3D:1D:25:89:F9:A9:B4:62:FE:70:F3:6B:09:FA:C6:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0sAfMj0dJYn5qbRi_nDzawn6xjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/4c84cd-0bf1-43a3-b442-65bd4224cdb9/1/0sAfMj0dJYn5qbRi_nDzawn6xjI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/4c84cd-0bf1-43a3-b442-65bd4224cdb9/1/0sAfMj0dJYn5qbRi_nDzawn6xjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:48:51:dd:b3:ee:2f:08:20:5c:f2:10:74:1d:9e:44:cb:b0:
cb:82:ff:8a:3a:fd:27:af:06:13:ce:dd:c0:8d:a7:51:80:7c:
b1:83:8e:2b:aa:ac:71:86:95:b8:c9:fb:a5:ae:30:94:27:8c:
da:b6:4d:4f:03:d2:53:ff:3b:5e:3e:92:b7:fd:e7:10:26:44:
06:d9:0e:28:ad:b5:3a:2a:fc:72:ee:3f:0a:c8:e2:c3:b3:2d:
c9:bb:a9:73:36:f8:53:0b:ba:73:35:d7:8e:65:e2:bb:b0:b3:
25:3f:6f:d4:17:2c:ab:7c:73:78:f7:6c:b5:51:79:d6:9c:78:
db:a6:3e:c6:9f:20:bf:7c:32:92:f3:ec:08:3b:81:29:78:40:
8c:43:e2:d2:c0:9a:aa:7c:5b:2f:f0:6e:3f:9f:97:21:65:96:
d6:db:17:37:fd:3a:0c:85:ea:09:82:ae:2b:be:b2:e6:16:7f:
9b:09:58:fe:78:2c:4a:9a:f8:c3:6d:cb:f1:64:5a:a8:7b:8d:
c7:43:59:81:01:c4:20:72:40:6c:ac:d0:4b:74:7f:57:a5:c3:
be:6b:1d:0d:13:83:e2:57:99:16:01:57:3d:7b:d4:4c:bc:70:
65:fb:7f:5c:e4:29:9c:71:61:f9:3f:17:bc:71:fd:8d:fb:49:
6d:79:b2:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:06:42 2025 by rpki-client