Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/f8474b-5aeb-4058-9f4e-0042425bab1a/1/D3l2BSC3wVwuQmAwgnK4SfiO1nc.mft
File: D3l2BSC3wVwuQmAwgnK4SfiO1nc.mft (raw, json)
Hash identifier: KocURM54Gz3E30++OhkmCCPLhabG7KbS+34wL4UGqeU=
Subject key identifier: 8A:2C:95:21:AB:AE:DA:8D:ED:E7:0F:5D:D9:93:86:07:FB:55:2E:F3
Authority key identifier: 0F:79:76:05:20:B7:C1:5C:2E:42:60:30:82:72:B8:49:F8:8E:D6:77
Certificate issuer: /CN=0f79760520b7c15c2e4260308272b849f88ed677
Certificate serial: 0199FE1031299A2B85848C6E4B1B50DC85B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D3l2BSC3wVwuQmAwgnK4SfiO1nc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/f8474b-5aeb-4058-9f4e-0042425bab1a/1/D3l2BSC3wVwuQmAwgnK4SfiO1nc.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 20:01:37 +0000
Manifest this update: Sun 19 Oct 2025 20:01:37 +0000
Manifest next update: Mon 20 Oct 2025 20:01:37 +0000
Files and hashes: 1: D3l2BSC3wVwuQmAwgnK4SfiO1nc.crl (hash: 8AVjx4zpu9VgP90f8bcXD2BIp/tmr3XuTqyhONf9SuQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/f8474b-5aeb-4058-9f4e-0042425bab1a/1/D3l2BSC3wVwuQmAwgnK4SfiO1nc.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/f8474b-5aeb-4058-9f4e-0042425bab1a/1/D3l2BSC3wVwuQmAwgnK4SfiO1nc.mft
rsync://rpki.ripe.net/repository/DEFAULT/D3l2BSC3wVwuQmAwgnK4SfiO1nc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:10:31:29:9a:2b:85:84:8c:6e:4b:1b:50:dc:85:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f79760520b7c15c2e4260308272b849f88ed677
Validity
Not Before: Oct 19 20:01:37 2025 GMT
Not After : Oct 20 20:01:37 2025 GMT
Subject: CN=8a2c9521abaeda8dede70f5dd9938607fb552ef3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:77:6f:7a:95:3d:56:6d:30:e6:9c:fc:01:a2:
a7:c8:b0:eb:15:90:6b:ac:f1:3a:7f:96:f7:86:54:
6d:5a:a2:05:66:31:bb:10:a3:e2:4c:42:39:bc:c8:
96:b3:d1:b3:72:a3:72:c3:16:25:79:1b:6d:07:87:
10:ed:f7:c9:ce:32:6b:44:8f:24:07:a2:5f:7b:c8:
0a:2f:2d:11:59:60:b2:05:14:ae:64:32:48:26:d5:
ac:67:16:8c:98:26:08:5e:a1:12:70:d0:12:b7:64:
28:16:ef:1a:d3:85:1c:e2:63:47:9e:9f:77:65:d1:
61:04:6b:95:9f:72:07:7b:d1:ce:56:c7:50:ad:0e:
f2:86:e6:31:36:5d:e4:3f:c1:75:94:03:a7:c8:2e:
7a:fa:4d:84:8b:1e:e9:42:e7:25:4b:e4:74:47:ab:
76:7f:cd:67:e7:57:7e:8f:02:e7:00:2c:72:92:e4:
7c:b5:0c:8e:e7:7b:db:fa:cc:47:98:44:b3:25:90:
da:e1:7b:95:2e:e9:47:fd:8d:ea:2a:bc:8e:de:81:
60:e2:82:99:37:8d:e0:e6:b8:7d:3f:36:8c:bd:ca:
78:42:36:ec:7a:50:96:a3:89:27:5f:f0:e5:0b:4f:
96:d7:a3:d0:91:3f:0d:94:26:df:57:9b:82:e7:53:
c2:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:2C:95:21:AB:AE:DA:8D:ED:E7:0F:5D:D9:93:86:07:FB:55:2E:F3
X509v3 Authority Key Identifier:
keyid:0F:79:76:05:20:B7:C1:5C:2E:42:60:30:82:72:B8:49:F8:8E:D6:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D3l2BSC3wVwuQmAwgnK4SfiO1nc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f8474b-5aeb-4058-9f4e-0042425bab1a/1/D3l2BSC3wVwuQmAwgnK4SfiO1nc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f8474b-5aeb-4058-9f4e-0042425bab1a/1/D3l2BSC3wVwuQmAwgnK4SfiO1nc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:43:41:f8:9c:f8:bf:63:91:33:0a:83:7e:cf:76:b2:ad:bc:
ba:e4:b3:9c:0c:34:7f:f9:4e:ea:3b:a1:5e:df:d9:63:64:28:
bc:a8:65:31:2b:a5:b1:6f:3d:a9:40:e8:17:19:f8:2d:ab:54:
1c:6b:b5:03:bb:0d:22:d6:6a:9c:bc:fa:68:f4:d9:ed:a6:8d:
a2:8c:27:f5:0d:66:c7:14:6b:b5:d2:cd:fb:68:46:fb:be:7c:
53:49:13:74:e7:48:fc:54:b9:c9:28:13:2e:2c:51:96:94:ee:
06:ed:5e:b0:8d:5e:b1:51:6d:b6:18:06:5f:b4:de:3f:b3:18:
01:1e:20:69:8d:9f:9b:3e:00:04:0d:61:b3:64:25:3e:25:be:
e4:07:4f:84:b4:6e:40:ec:f9:b8:99:79:68:7f:f3:da:cd:56:
53:20:ed:77:f8:88:4b:40:88:31:69:b6:98:64:5c:47:9d:ba:
bf:67:16:75:e4:7d:0d:e3:12:e6:40:b9:4a:77:ff:e8:9b:8b:
7e:f7:8a:03:11:30:02:c0:d4:ac:e0:2b:3c:8c:10:a4:36:76:
6d:b9:69:57:f3:0a:04:9a:5d:98:2c:98:e6:b8:d1:ff:74:53:
5c:8e:1a:bd:45:5f:f2:0a:ab:a9:a5:ce:c6:23:34:8b:2f:5c:
9b:e3:a0:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:57:03 2025 by rpki-client