Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/921df1-fa7d-4307-b9c3-7ce8c9704cf0/1/DP4QWKMePBiUvPBkx-g3C7ps-OQ.mft
File: DP4QWKMePBiUvPBkx-g3C7ps-OQ.mft (raw, json)
Hash identifier: SJ3tlcwT2z/lEMQ9Z3cNxand/yotk1p8ZaYYdt9EH+w=
Subject key identifier: EA:28:B7:C5:3F:C1:C5:68:8A:73:8A:19:87:93:78:48:75:20:B8:BB
Authority key identifier: 0C:FE:10:58:A3:1E:3C:18:94:BC:F0:64:C7:E8:37:0B:BA:6C:F8:E4
Certificate issuer: /CN=0cfe1058a31e3c1894bcf064c7e8370bba6cf8e4
Certificate serial: 0199FDD8D1A8F0ECE47C412D05E3DC3C8C0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DP4QWKMePBiUvPBkx-g3C7ps-OQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/921df1-fa7d-4307-b9c3-7ce8c9704cf0/1/DP4QWKMePBiUvPBkx-g3C7ps-OQ.mft
Manifest number: 0DC8
Signing time: Sun 19 Oct 2025 19:01:09 +0000
Manifest this update: Sun 19 Oct 2025 19:01:09 +0000
Manifest next update: Mon 20 Oct 2025 19:01:09 +0000
Files and hashes: 1: DP4QWKMePBiUvPBkx-g3C7ps-OQ.crl (hash: dDUnmUxw4HijZ2DIjWtvCoObellwmXjE982gfmUh8hg=)
2: UKqORdLzZXdOrDEcMxzidP1Tf04.roa (hash: 993OGeNZfndwd7HXQtjHB4WsdW/h/7CpCQberKrZGUc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/921df1-fa7d-4307-b9c3-7ce8c9704cf0/1/DP4QWKMePBiUvPBkx-g3C7ps-OQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/921df1-fa7d-4307-b9c3-7ce8c9704cf0/1/DP4QWKMePBiUvPBkx-g3C7ps-OQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/DP4QWKMePBiUvPBkx-g3C7ps-OQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d8:d1:a8:f0:ec:e4:7c:41:2d:05:e3:dc:3c:8c:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cfe1058a31e3c1894bcf064c7e8370bba6cf8e4
Validity
Not Before: Oct 19 19:01:09 2025 GMT
Not After : Oct 20 19:01:09 2025 GMT
Subject: CN=ea28b7c53fc1c5688a738a19879378487520b8bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:41:03:0d:f2:82:9a:c6:6d:88:43:8c:4b:fd:
65:e0:0c:be:37:0d:02:7f:cb:d2:f0:34:82:31:bf:
8c:80:b9:8e:1d:ae:6a:8e:6c:26:5e:6d:5c:da:05:
80:24:5a:c5:73:d9:a3:69:76:68:dd:f9:f7:b9:d1:
d2:1f:e1:a4:c1:04:ee:34:d2:2b:f6:02:6f:fb:f9:
46:84:83:9f:40:d6:67:37:af:e5:56:79:da:0e:ee:
85:34:a2:eb:0e:c5:12:bc:72:d9:de:15:e5:ce:e8:
f4:e5:ca:db:6a:66:9f:a8:c9:f8:3a:db:62:a2:41:
d3:23:fe:44:c0:e1:97:f4:47:b9:69:40:78:e1:29:
08:66:2b:fc:0d:41:f2:aa:9d:72:29:b4:2e:d9:9e:
dc:8a:35:7f:97:09:3e:15:de:14:5c:7d:68:85:0a:
c2:c7:70:d0:fc:8f:60:cf:10:14:56:56:3a:a5:18:
e7:48:99:7b:00:d0:92:f3:a7:8b:6c:56:2a:4c:32:
2b:62:7e:45:b3:b2:0e:84:05:ca:1a:e3:e1:8c:8f:
0b:1b:fe:76:5e:81:ab:4b:da:e0:f5:9a:a4:46:75:
69:7f:85:bd:3e:35:7b:a7:84:03:95:d9:76:28:0f:
79:7d:0d:53:5b:0f:3f:7a:3b:b1:0d:df:34:17:b7:
83:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:28:B7:C5:3F:C1:C5:68:8A:73:8A:19:87:93:78:48:75:20:B8:BB
X509v3 Authority Key Identifier:
keyid:0C:FE:10:58:A3:1E:3C:18:94:BC:F0:64:C7:E8:37:0B:BA:6C:F8:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DP4QWKMePBiUvPBkx-g3C7ps-OQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/921df1-fa7d-4307-b9c3-7ce8c9704cf0/1/DP4QWKMePBiUvPBkx-g3C7ps-OQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/921df1-fa7d-4307-b9c3-7ce8c9704cf0/1/DP4QWKMePBiUvPBkx-g3C7ps-OQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:dd:21:29:44:f4:a0:04:fb:82:d5:c2:cf:99:ba:ba:bf:df:
5a:ee:ab:c8:11:2d:03:f1:f1:ef:6e:8c:0c:14:6c:66:3f:e0:
d7:92:c3:02:26:4f:88:6a:a9:a0:b1:2b:89:43:5f:3b:60:df:
e8:1e:0f:00:38:94:d8:54:c7:64:44:89:dd:4d:e5:36:d5:44:
91:86:cc:e2:36:1c:6d:64:67:fb:41:29:49:0d:93:1d:08:2b:
72:e4:8b:37:1d:1b:6b:58:a6:87:6e:cd:ff:1c:45:86:05:18:
fd:0a:12:3e:8d:e4:a3:c2:35:f7:a4:85:8e:76:5d:87:60:22:
35:06:ab:38:b0:15:6a:7a:c5:ad:64:bd:fc:0e:c9:82:25:a3:
d5:4b:76:7d:1e:fc:9d:78:90:00:80:16:70:b7:05:67:e0:00:
6c:8a:11:12:91:88:d1:f3:d5:f3:22:ba:d2:0d:94:3f:c3:71:
15:f9:b9:e3:fb:9f:fb:55:33:4d:47:46:de:f2:e4:b4:7f:a3:
13:97:9e:74:58:3b:28:fc:81:8e:01:4d:d6:53:41:18:75:9a:
4b:a6:f6:65:0e:93:95:88:b6:7f:c0:58:bf:46:61:08:92:64:
e7:39:a9:59:07:ae:8a:8a:93:3b:c7:15:7b:c1:2b:19:7a:eb:
a6:18:41:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:30:03 2025 by rpki-client