Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/5015f6-0bd0-49f9-b854-b6ba86cf31f9/1/DIquGJxjzrVkPLCAMnvKo7Dvilk.mft
File: DIquGJxjzrVkPLCAMnvKo7Dvilk.mft (raw, json)
Hash identifier: ax41sMC0kL+jzMxfr8trUT/fDC1r0OUoxHxZ0HIPvHE=
Subject key identifier: 77:2D:A2:8C:1F:8F:8C:1F:6F:43:44:32:80:B5:40:05:05:AE:54:09
Authority key identifier: 0C:8A:AE:18:9C:63:CE:B5:64:3C:B0:80:32:7B:CA:A3:B0:EF:8A:59
Certificate issuer: /CN=0c8aae189c63ceb5643cb080327bcaa3b0ef8a59
Certificate serial: 0199FC2185CAC0B0C3673F886DF1E9E3B8B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DIquGJxjzrVkPLCAMnvKo7Dvilk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/5015f6-0bd0-49f9-b854-b6ba86cf31f9/1/DIquGJxjzrVkPLCAMnvKo7Dvilk.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 11:01:19 +0000
Manifest this update: Sun 19 Oct 2025 11:01:19 +0000
Manifest next update: Mon 20 Oct 2025 11:01:19 +0000
Files and hashes: 1: DIquGJxjzrVkPLCAMnvKo7Dvilk.crl (hash: ooQ2svpi8XrdkyPkvzGBppqaiNu/3e35k1+sPXjKZIk=)
2: WtAp0tL-l96y_gbMlR5puzdruQc.roa (hash: xRGTdhiVzbN5no9s0pfriVSMuD8OBdniQOQSDlzn9q8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/5015f6-0bd0-49f9-b854-b6ba86cf31f9/1/DIquGJxjzrVkPLCAMnvKo7Dvilk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/5015f6-0bd0-49f9-b854-b6ba86cf31f9/1/DIquGJxjzrVkPLCAMnvKo7Dvilk.mft
rsync://rpki.ripe.net/repository/DEFAULT/DIquGJxjzrVkPLCAMnvKo7Dvilk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:85:ca:c0:b0:c3:67:3f:88:6d:f1:e9:e3:b8:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c8aae189c63ceb5643cb080327bcaa3b0ef8a59
Validity
Not Before: Oct 19 11:01:19 2025 GMT
Not After : Oct 20 11:01:19 2025 GMT
Subject: CN=772da28c1f8f8c1f6f43443280b5400505ae5409
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:14:38:5a:bc:95:09:b4:9c:3c:44:35:39:7a:
2b:0c:d3:1b:97:d0:0c:9b:ce:69:25:e7:20:85:50:
9a:c0:1e:89:80:7f:8d:81:f4:6c:2a:c0:1c:0c:be:
b5:8d:05:d9:82:78:4b:48:7b:da:39:cc:be:d6:cb:
b6:ad:e2:eb:62:02:da:0d:b0:f9:44:29:30:c8:b9:
76:1b:04:21:a8:79:3a:fa:77:6d:b0:4f:f5:48:52:
d5:49:23:22:87:c9:cf:89:8c:f4:45:d4:00:82:3a:
52:ab:23:56:24:b8:79:59:87:bb:82:25:7e:de:cd:
60:42:e6:3d:21:6c:ce:b3:1a:52:3f:ab:71:0e:e2:
3b:a6:64:d6:c8:6b:b7:55:98:c9:50:5f:66:f3:74:
aa:af:fd:bb:14:b5:93:40:9e:ba:af:53:92:01:28:
1b:5c:06:e2:4c:de:fa:cd:ad:70:a4:2a:87:9e:52:
f3:cf:78:02:87:43:2c:3a:ce:c9:21:ea:7a:42:59:
77:4d:2c:86:8b:3a:f2:e7:c7:c8:d5:76:19:ec:12:
a9:7f:6a:32:9f:c9:d0:5e:14:06:07:4a:6e:7d:64:
27:43:22:f7:5a:19:b2:9a:cb:ce:2b:d3:ee:bc:0a:
88:ca:02:18:a6:3e:5e:41:28:54:ad:4e:c8:c9:5e:
20:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:2D:A2:8C:1F:8F:8C:1F:6F:43:44:32:80:B5:40:05:05:AE:54:09
X509v3 Authority Key Identifier:
keyid:0C:8A:AE:18:9C:63:CE:B5:64:3C:B0:80:32:7B:CA:A3:B0:EF:8A:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DIquGJxjzrVkPLCAMnvKo7Dvilk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5015f6-0bd0-49f9-b854-b6ba86cf31f9/1/DIquGJxjzrVkPLCAMnvKo7Dvilk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5015f6-0bd0-49f9-b854-b6ba86cf31f9/1/DIquGJxjzrVkPLCAMnvKo7Dvilk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:fa:e9:42:3e:d8:4b:c4:b0:bb:39:76:74:17:20:e5:f4:c5:
12:c1:55:24:4b:c8:bf:57:99:7d:04:e5:27:65:09:8a:3d:5c:
6e:3f:11:5e:8f:c9:4a:f2:d0:10:0a:cc:0b:f3:95:f3:eb:f1:
05:02:d4:dc:58:e9:3c:2a:06:8a:ad:4b:11:ab:0f:32:05:3d:
ea:82:cd:a5:67:ba:e5:14:90:18:fa:53:c2:d9:d8:54:70:77:
a4:4c:5b:f4:b4:91:0f:05:c7:b9:cf:14:2b:25:38:3a:36:70:
34:53:dc:04:c0:40:87:ba:03:8b:42:a2:9a:41:90:19:61:fb:
39:73:6d:04:5e:17:55:da:06:76:9b:86:b6:16:37:7d:bc:83:
96:38:41:53:23:6e:70:47:49:96:13:41:d1:c8:e2:2a:cc:07:
d2:ac:9a:2b:f9:4d:8f:2a:5b:da:0d:a4:15:6d:a0:3b:34:d5:
16:9b:e2:30:0c:e2:0b:75:a8:75:67:66:2f:f2:fe:55:55:0d:
19:37:a2:03:8e:df:3e:40:9f:44:4e:a0:9b:e6:a7:d7:55:fb:
3f:71:d0:0c:b2:ac:e3:37:22:e1:43:30:6d:47:73:c1:cd:06:
df:a7:d6:af:73:d3:f9:38:aa:d5:4c:24:74:19:7f:9e:30:91:
40:20:f9:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:29:42 2025 by rpki-client