Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/b79777-4a04-4dab-a1dc-25374494ceee/1/DNLKvrHXJOekjdYemn4MUKTpv1A.mft
File: DNLKvrHXJOekjdYemn4MUKTpv1A.mft (raw, json)
Hash identifier: WUjIGvfHe8zjNrtDD3cl6xOSKx72Z8zIgAU6ih35HsU=
Subject key identifier: A8:5F:66:33:08:94:3D:A5:60:72:10:06:65:AA:2A:0D:15:68:CC:CD
Authority key identifier: 0C:D2:CA:BE:B1:D7:24:E7:A4:8D:D6:1E:9A:7E:0C:50:A4:E9:BF:50
Certificate issuer: /CN=0cd2cabeb1d724e7a48dd61e9a7e0c50a4e9bf50
Certificate serial: 0199FE7D8137EE9700320A39FCB15B922F1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DNLKvrHXJOekjdYemn4MUKTpv1A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/b79777-4a04-4dab-a1dc-25374494ceee/1/DNLKvrHXJOekjdYemn4MUKTpv1A.mft
Manifest number: 07B3
Signing time: Sun 19 Oct 2025 22:01:01 +0000
Manifest this update: Sun 19 Oct 2025 22:01:01 +0000
Manifest next update: Mon 20 Oct 2025 22:01:01 +0000
Files and hashes: 1: DNLKvrHXJOekjdYemn4MUKTpv1A.crl (hash: mocm54TYHhc6SjjSbldtN5cIat2kK5UQ7ywRLuATkXk=)
2: gFGZ2BFs8uwMqzE5e-fa-6VVCNI.roa (hash: RsuEdz61HYwgHfhCVbH78Gqegx1PGZpeCp/nCDSO5do=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/b79777-4a04-4dab-a1dc-25374494ceee/1/DNLKvrHXJOekjdYemn4MUKTpv1A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/b79777-4a04-4dab-a1dc-25374494ceee/1/DNLKvrHXJOekjdYemn4MUKTpv1A.mft
rsync://rpki.ripe.net/repository/DEFAULT/DNLKvrHXJOekjdYemn4MUKTpv1A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:7d:81:37:ee:97:00:32:0a:39:fc:b1:5b:92:2f:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cd2cabeb1d724e7a48dd61e9a7e0c50a4e9bf50
Validity
Not Before: Oct 19 22:01:01 2025 GMT
Not After : Oct 20 22:01:01 2025 GMT
Subject: CN=a85f663308943da56072100665aa2a0d1568cccd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a1:92:21:01:c0:76:4b:d6:04:cc:59:98:6a:
15:c4:76:37:b2:1c:1b:77:23:77:0e:13:25:d9:eb:
29:11:2b:33:53:97:fb:65:ab:68:ec:45:4b:9a:9e:
28:83:12:44:17:ec:89:73:cf:4d:6e:3c:9e:27:46:
f4:d4:2c:ec:bb:36:5d:e9:88:03:3e:6d:f2:31:08:
1b:cc:e5:9a:19:2a:62:9a:cf:bb:e3:db:8a:0f:13:
a3:72:49:3a:06:be:e5:7a:d6:80:7a:85:2c:df:70:
f5:2b:b9:47:84:49:36:77:8f:dc:d7:b4:b9:8a:6d:
2d:e6:e0:16:66:cd:40:01:69:37:7e:dc:b9:9c:d3:
51:b1:05:fc:7f:6a:34:a8:b3:12:ed:eb:45:66:58:
80:23:c8:44:ac:48:66:28:db:9d:36:07:dc:cc:bb:
31:b2:fb:b1:53:2b:fa:07:34:bc:38:73:3d:99:38:
13:e8:6f:e2:03:76:b2:cf:ce:36:46:be:cb:f0:6f:
40:7c:85:5c:3b:f0:28:47:db:b2:d0:01:0f:90:cd:
ea:df:09:00:fe:7b:8a:83:0c:dc:e2:5c:4a:46:7a:
90:c6:fd:6a:c2:64:85:89:3a:26:a8:f4:8e:d7:2d:
e3:31:4f:5f:16:7e:94:6c:84:ae:15:b5:1a:3a:45:
8d:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:5F:66:33:08:94:3D:A5:60:72:10:06:65:AA:2A:0D:15:68:CC:CD
X509v3 Authority Key Identifier:
keyid:0C:D2:CA:BE:B1:D7:24:E7:A4:8D:D6:1E:9A:7E:0C:50:A4:E9:BF:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DNLKvrHXJOekjdYemn4MUKTpv1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b79777-4a04-4dab-a1dc-25374494ceee/1/DNLKvrHXJOekjdYemn4MUKTpv1A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b79777-4a04-4dab-a1dc-25374494ceee/1/DNLKvrHXJOekjdYemn4MUKTpv1A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:f4:7d:f9:b4:5a:52:0b:79:49:1a:1b:7d:ee:be:ee:95:ce:
8f:8d:2e:0d:80:2f:33:bd:27:3b:9a:7b:51:50:6b:84:98:d6:
9e:b5:4b:83:2f:3d:c8:4b:39:32:8a:11:43:8e:44:ef:40:ed:
bb:d2:16:94:3f:4a:e0:dc:29:23:a8:5a:7f:1a:38:42:8f:19:
5f:5a:16:77:f4:98:da:0a:1b:11:45:58:df:4d:b4:f9:6f:27:
c7:94:ec:ef:69:54:fc:d0:d4:ef:5c:d6:b6:24:fa:c3:e5:a9:
28:8a:70:9b:51:96:7c:31:ee:bc:aa:8b:f8:eb:28:09:63:49:
2d:61:14:cb:9a:4f:7b:71:77:4e:75:8a:bc:db:91:7a:be:60:
06:45:a8:84:b0:2f:51:97:1b:bc:14:f1:4c:4e:85:fa:12:05:
14:a5:37:e0:74:8d:ef:6b:d2:bf:9f:5d:41:7c:02:bf:ff:81:
8c:f8:b0:91:8b:20:f0:21:67:21:07:39:83:49:c2:48:e1:25:
46:bd:e8:52:cb:6e:ae:80:3b:1e:7f:b8:6c:ed:36:85:e3:eb:
c0:77:45:71:7d:60:de:80:b7:9a:f2:04:73:57:c8:9e:c0:a0:
9d:3a:09:58:fa:ac:de:61:5e:45:c4:e3:ac:90:04:dd:37:af:
b4:cb:22:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:14:39 2025 by rpki-client