Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/2f4796-4512-464d-b9de-880f8238fe0b/1/Dp842O8xOufFpwiU9m6HGjMYA_8.mft
File: Dp842O8xOufFpwiU9m6HGjMYA_8.mft (raw, json)
Hash identifier: Ke/UVdVqKcWRe6cidCzzFMGumO7k6TFMUcFAxP16fiE=
Subject key identifier: B6:0C:E5:16:3D:B3:A8:FB:E6:D1:26:5B:07:5E:01:8B:A8:C1:5C:15
Authority key identifier: 0E:9F:38:D8:EF:31:3A:E7:C5:A7:08:94:F6:6E:87:1A:33:18:03:FF
Certificate issuer: /CN=0e9f38d8ef313ae7c5a70894f66e871a331803ff
Certificate serial: 019A4EF545718E3F15180C7CFAC608E9E5E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dp842O8xOufFpwiU9m6HGjMYA_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/2f4796-4512-464d-b9de-880f8238fe0b/1/Dp842O8xOufFpwiU9m6HGjMYA_8.mft
Manifest number: 170A
Signing time: Tue 04 Nov 2025 13:01:28 +0000
Manifest this update: Tue 04 Nov 2025 13:01:28 +0000
Manifest next update: Wed 05 Nov 2025 13:01:28 +0000
Files and hashes: 1: Dp842O8xOufFpwiU9m6HGjMYA_8.crl (hash: 6Kph3MTqwVibOqxxN9DPin5GlW1jPt2Wi8DnxssbmKg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/2f4796-4512-464d-b9de-880f8238fe0b/1/Dp842O8xOufFpwiU9m6HGjMYA_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/2f4796-4512-464d-b9de-880f8238fe0b/1/Dp842O8xOufFpwiU9m6HGjMYA_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dp842O8xOufFpwiU9m6HGjMYA_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:45:71:8e:3f:15:18:0c:7c:fa:c6:08:e9:e5:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e9f38d8ef313ae7c5a70894f66e871a331803ff
Validity
Not Before: Nov 4 13:01:28 2025 GMT
Not After : Nov 5 13:01:28 2025 GMT
Subject: CN=b60ce5163db3a8fbe6d1265b075e018ba8c15c15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:ba:65:48:bc:cc:6a:67:b9:e0:b9:d3:77:56:
e3:c2:54:69:e1:2d:a5:e1:98:8d:c7:fc:9d:42:e0:
e4:3d:e5:3b:bc:6f:ec:be:2d:f3:4d:9d:55:94:d7:
33:93:59:7d:35:8f:5d:bb:a6:2e:ca:11:9e:73:11:
5b:eb:cb:5f:3b:67:d1:3a:d4:88:6d:ac:8c:2e:d5:
38:f5:26:c9:0a:4d:1b:aa:72:67:86:6b:ce:e7:cd:
62:03:cc:5d:c3:ef:fe:7f:c0:86:15:e4:e5:33:88:
1f:d3:2d:7d:f8:19:fb:cc:eb:0d:a8:d0:9b:37:63:
d9:9d:75:d7:5a:1f:c5:5f:29:cf:bd:9b:2d:bb:34:
9c:5d:2f:74:c0:0e:e2:9c:17:98:be:54:39:d6:c1:
34:6d:35:cf:7d:b9:fc:7f:fc:2d:97:cc:bb:d0:05:
43:c5:93:36:1e:39:72:11:e9:58:ab:9b:a6:ea:b7:
62:0f:aa:52:9d:0d:56:8d:eb:d3:97:63:33:8b:ab:
8a:f1:aa:66:49:4a:e0:fb:38:0c:95:8b:e0:7e:99:
21:f9:54:e0:d5:9e:4b:c3:23:7f:0f:b0:14:18:99:
18:ac:2a:57:28:8e:1d:b4:9c:60:3f:28:d1:9e:9c:
28:c6:36:33:f1:93:e8:53:31:48:f0:61:a0:c2:5c:
76:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:0C:E5:16:3D:B3:A8:FB:E6:D1:26:5B:07:5E:01:8B:A8:C1:5C:15
X509v3 Authority Key Identifier:
keyid:0E:9F:38:D8:EF:31:3A:E7:C5:A7:08:94:F6:6E:87:1A:33:18:03:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dp842O8xOufFpwiU9m6HGjMYA_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/2f4796-4512-464d-b9de-880f8238fe0b/1/Dp842O8xOufFpwiU9m6HGjMYA_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/2f4796-4512-464d-b9de-880f8238fe0b/1/Dp842O8xOufFpwiU9m6HGjMYA_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:40:56:4d:37:dc:c0:c4:f3:47:60:b8:0e:8a:1f:6c:af:31:
f5:92:a1:22:25:03:9f:2f:b1:92:b6:3d:e7:48:57:0c:be:06:
0d:74:c5:57:3f:ec:a1:1e:0a:29:3e:2e:57:02:c4:cf:03:3c:
b1:16:7d:61:57:77:ea:7e:29:b8:66:ac:23:5d:db:f7:50:c7:
67:64:d8:d2:ec:3b:06:ba:af:df:1b:05:13:96:33:75:d7:1b:
11:45:e5:94:33:e8:90:aa:16:5a:ae:c6:66:3e:75:7c:0f:0b:
3b:72:76:5c:92:5d:4c:ee:6b:99:22:51:1f:c1:17:0d:40:7b:
81:a9:83:f3:fe:df:92:b4:c0:44:33:a4:37:6c:76:58:ca:90:
77:e5:23:57:1f:ba:7f:56:ef:80:ec:e4:67:ee:26:9e:5d:0d:
da:cb:69:45:7c:fc:34:47:b6:80:12:55:40:08:d9:09:4f:7a:
9c:99:be:41:fa:e2:ec:fa:42:ca:62:e8:b3:39:ee:95:b7:eb:
d9:cd:5a:9d:f9:67:1a:79:66:9d:f6:a1:b8:59:f0:12:a2:13:
c6:32:c6:e1:58:97:75:15:06:53:2d:84:a7:0e:29:bc:69:fd:
a9:d4:17:ff:e1:24:a0:40:2f:35:6c:c1:6a:b4:ef:4b:e6:62:
d6:53:c4:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:25:18 2025 by rpki-client