Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/a9b91b-684e-4d78-aae9-c447b4193210/1/Dr8L3NkBYisW_9QUS1iIcHMixTQ.mft
File: Dr8L3NkBYisW_9QUS1iIcHMixTQ.mft (raw, json)
Hash identifier: PC1uYZMNkRiZBJf2IuSpEvQxNQ7MQim4Y8FUsQDCkGQ=
Subject key identifier: 9F:8C:AC:4B:70:BA:52:ED:D6:E4:B5:02:29:B1:58:6D:23:52:E2:31
Authority key identifier: 0E:BF:0B:DC:D9:01:62:2B:16:FF:D4:14:4B:58:88:70:73:22:C5:34
Certificate issuer: /CN=0ebf0bdcd901622b16ffd4144b5888707322c534
Certificate serial: 019A4DE1A6970DD219E463CA7C1B8706B720
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dr8L3NkBYisW_9QUS1iIcHMixTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/a9b91b-684e-4d78-aae9-c447b4193210/1/Dr8L3NkBYisW_9QUS1iIcHMixTQ.mft
Manifest number: 16FF
Signing time: Tue 04 Nov 2025 08:00:25 +0000
Manifest this update: Tue 04 Nov 2025 08:00:25 +0000
Manifest next update: Wed 05 Nov 2025 08:00:25 +0000
Files and hashes: 1: Dr8L3NkBYisW_9QUS1iIcHMixTQ.crl (hash: 1j1P0NqeH8nP6ys0ewvS1MKSH9IuLC+WHj0oZXq77Ak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/a9b91b-684e-4d78-aae9-c447b4193210/1/Dr8L3NkBYisW_9QUS1iIcHMixTQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/a9b91b-684e-4d78-aae9-c447b4193210/1/Dr8L3NkBYisW_9QUS1iIcHMixTQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dr8L3NkBYisW_9QUS1iIcHMixTQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:a6:97:0d:d2:19:e4:63:ca:7c:1b:87:06:b7:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ebf0bdcd901622b16ffd4144b5888707322c534
Validity
Not Before: Nov 4 08:00:25 2025 GMT
Not After : Nov 5 08:00:25 2025 GMT
Subject: CN=9f8cac4b70ba52edd6e4b50229b1586d2352e231
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:dc:ed:7b:ed:cb:55:c8:4c:7d:9c:39:fc:0b:
df:6e:51:96:85:fa:a1:37:a9:d3:5f:03:49:44:46:
ad:dd:c4:41:31:50:11:77:8d:cb:38:15:eb:c3:6e:
4a:83:c7:56:20:98:55:28:34:b9:67:91:4b:3c:cc:
e7:0a:7b:93:2c:9a:89:ca:a5:23:fe:94:cc:ae:be:
fc:36:2a:44:37:60:83:b2:77:91:8b:06:c8:23:b1:
a1:7d:9c:fb:6b:b7:27:ec:9c:ee:f3:b8:56:28:de:
3d:d3:b3:4b:43:42:be:c4:66:43:a8:bf:7c:02:3a:
7a:ba:ef:b1:66:37:2c:a2:fe:86:97:3a:e5:8a:51:
01:62:28:a4:40:a4:10:51:3a:f2:f7:c1:06:70:2e:
a3:03:6c:8c:99:03:fb:a2:13:29:e7:ff:0a:b6:c8:
37:11:79:96:3f:26:8a:cd:df:b8:d3:53:94:4a:ef:
17:c3:e4:6b:57:0e:41:1a:4c:1e:0d:e8:ed:23:06:
19:02:02:e4:75:5f:2e:56:32:de:c9:c3:e8:0c:c9:
e0:59:f8:d1:71:32:e7:d2:f9:15:bc:9f:49:59:88:
52:14:54:a8:0e:da:29:0e:f5:20:49:0a:0a:37:a6:
6f:41:ec:fc:85:0e:1d:41:4b:5b:fe:54:a7:bb:19:
ce:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:8C:AC:4B:70:BA:52:ED:D6:E4:B5:02:29:B1:58:6D:23:52:E2:31
X509v3 Authority Key Identifier:
keyid:0E:BF:0B:DC:D9:01:62:2B:16:FF:D4:14:4B:58:88:70:73:22:C5:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dr8L3NkBYisW_9QUS1iIcHMixTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/a9b91b-684e-4d78-aae9-c447b4193210/1/Dr8L3NkBYisW_9QUS1iIcHMixTQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/a9b91b-684e-4d78-aae9-c447b4193210/1/Dr8L3NkBYisW_9QUS1iIcHMixTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:53:25:1e:42:39:56:91:0f:ba:b4:c2:a2:fd:3f:bc:11:81:
a3:58:c5:13:a1:08:86:79:e1:e5:96:b7:d5:8e:40:66:d2:9a:
20:fa:4f:3a:78:a8:ac:be:92:6f:9d:9b:40:e8:2f:e1:37:e8:
d1:55:18:7f:9b:e1:bc:e0:60:77:7f:be:f8:24:f6:1f:a4:cf:
4a:d4:bb:6e:b2:7b:08:3b:b7:59:10:2c:c3:f0:a7:89:e1:96:
c6:70:c3:d7:88:58:6d:d3:37:2a:db:28:75:b4:18:f2:17:77:
99:f1:92:92:06:08:0f:91:04:6e:77:66:6b:42:55:48:e5:48:
a2:0d:f9:ec:20:77:82:eb:77:5c:77:37:3d:b1:f7:32:d6:a7:
6f:2e:c2:26:8c:ea:18:cd:99:d3:a2:eb:78:03:c0:2d:3d:f2:
31:9c:18:de:eb:32:d8:d4:7f:e8:25:df:cf:08:89:56:bb:49:
72:02:c4:dc:68:1d:fe:0e:c3:dd:4f:99:7e:1f:f3:68:59:09:
3e:7b:fc:b4:75:32:88:08:6a:2b:63:bb:00:e1:13:da:36:1d:
d8:c2:29:08:a3:dc:d9:ec:0c:10:ad:6b:d8:fc:0b:d8:38:ec:
2b:93:a8:93:09:df:ee:40:ca:38:83:bf:55:f9:e9:91:70:95:
72:76:99:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:50:31 2025 by rpki-client