Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/b79777-4a04-4dab-a1dc-25374494ceee/1/DNLKvrHXJOekjdYemn4MUKTpv1A.mft
File: DNLKvrHXJOekjdYemn4MUKTpv1A.mft (raw, json)
Hash identifier: xJryPrCzSo51yLIR8WHqpk7Hmzyk8iH5SKThpuCzopg=
Subject key identifier: 1D:68:61:16:16:FD:F7:7B:7C:34:C3:9E:E9:1D:CE:47:52:D0:46:48
Authority key identifier: 0C:D2:CA:BE:B1:D7:24:E7:A4:8D:D6:1E:9A:7E:0C:50:A4:E9:BF:50
Certificate issuer: /CN=0cd2cabeb1d724e7a48dd61e9a7e0c50a4e9bf50
Certificate serial: 019A4F991D374B4375C3FFD3B35C187975B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DNLKvrHXJOekjdYemn4MUKTpv1A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/b79777-4a04-4dab-a1dc-25374494ceee/1/DNLKvrHXJOekjdYemn4MUKTpv1A.mft
Manifest number: 07DD
Signing time: Tue 04 Nov 2025 16:00:25 +0000
Manifest this update: Tue 04 Nov 2025 16:00:25 +0000
Manifest next update: Wed 05 Nov 2025 16:00:25 +0000
Files and hashes: 1: DNLKvrHXJOekjdYemn4MUKTpv1A.crl (hash: AwUpan3vKpDtoKcY9iUTS2cGsTJzbEh1Z6oTqXVhCIY=)
2: gFGZ2BFs8uwMqzE5e-fa-6VVCNI.roa (hash: RsuEdz61HYwgHfhCVbH78Gqegx1PGZpeCp/nCDSO5do=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/b79777-4a04-4dab-a1dc-25374494ceee/1/DNLKvrHXJOekjdYemn4MUKTpv1A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/b79777-4a04-4dab-a1dc-25374494ceee/1/DNLKvrHXJOekjdYemn4MUKTpv1A.mft
rsync://rpki.ripe.net/repository/DEFAULT/DNLKvrHXJOekjdYemn4MUKTpv1A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:99:1d:37:4b:43:75:c3:ff:d3:b3:5c:18:79:75:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cd2cabeb1d724e7a48dd61e9a7e0c50a4e9bf50
Validity
Not Before: Nov 4 16:00:25 2025 GMT
Not After : Nov 5 16:00:25 2025 GMT
Subject: CN=1d68611616fdf77b7c34c39ee91dce4752d04648
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:33:28:d8:23:31:89:d2:dd:41:b6:a4:df:c6:
59:23:a9:26:43:a4:d3:3c:5f:63:34:72:25:78:ee:
53:a8:91:a4:ac:77:c1:b9:91:e7:0d:f2:32:18:ae:
29:bf:53:d0:a6:dd:9d:c6:4e:82:9a:86:f2:f7:ed:
e3:30:23:8f:74:11:36:0b:7d:87:0c:50:24:11:49:
fd:be:dd:cf:66:1f:d1:4f:15:d2:1d:6a:4b:53:16:
08:3c:37:92:33:cf:21:ad:fa:04:62:d0:32:b4:8d:
36:92:3c:96:6a:3f:ff:0f:39:ff:31:eb:b5:10:50:
5b:38:77:2f:84:35:3b:df:c6:21:95:36:da:0f:c8:
c8:61:3f:65:8f:59:a6:89:04:07:a5:07:f0:e7:ab:
5b:81:f6:69:e2:89:06:7d:a5:8e:11:68:67:ed:11:
74:9f:71:7a:26:ec:d4:f0:90:54:e0:0b:b9:d6:d2:
37:f6:03:d0:c8:a1:71:91:55:35:2e:03:c2:44:2d:
5e:27:5d:4f:a5:c4:cb:7e:1e:53:bd:26:16:d5:3b:
55:02:a5:e7:8f:b5:54:f2:d3:9b:95:78:c6:4e:a7:
c0:83:24:49:40:58:a8:df:85:74:75:59:82:4d:87:
63:59:74:be:d3:ce:d9:63:6b:62:b8:3f:60:14:a1:
25:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:68:61:16:16:FD:F7:7B:7C:34:C3:9E:E9:1D:CE:47:52:D0:46:48
X509v3 Authority Key Identifier:
keyid:0C:D2:CA:BE:B1:D7:24:E7:A4:8D:D6:1E:9A:7E:0C:50:A4:E9:BF:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DNLKvrHXJOekjdYemn4MUKTpv1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b79777-4a04-4dab-a1dc-25374494ceee/1/DNLKvrHXJOekjdYemn4MUKTpv1A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b79777-4a04-4dab-a1dc-25374494ceee/1/DNLKvrHXJOekjdYemn4MUKTpv1A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:67:68:79:53:29:01:7d:2a:15:04:08:77:e9:2f:6c:1d:2d:
18:af:98:86:12:f4:5a:df:69:07:5a:e8:ea:25:23:f7:a7:e2:
73:8a:2e:d9:ad:e6:df:37:c5:89:8b:51:cd:47:c7:c0:83:81:
ed:b9:f4:16:d2:e2:1f:57:94:e8:aa:5e:78:8c:45:40:29:cd:
be:59:70:f6:83:11:16:f4:9b:58:89:49:83:0a:f0:11:9e:60:
2d:9e:6b:3d:11:a3:d6:c3:d0:c4:4c:5f:23:fc:27:e5:a2:4a:
e9:28:61:93:87:12:bb:cf:6a:b6:24:87:1c:a6:84:67:f4:33:
09:20:83:fd:34:78:4d:6e:7b:cd:22:91:95:a9:36:34:ef:e6:
f6:90:4d:34:be:76:70:8b:67:ed:f2:9e:e6:18:e5:56:e3:6f:
7a:89:16:74:6d:85:fd:20:92:09:93:10:3e:78:34:a4:2d:5b:
27:12:80:75:2f:88:26:4b:6d:c7:ca:2c:ee:71:fd:97:d0:09:
e4:46:15:53:8f:44:bb:61:cc:90:a5:bf:34:5f:68:68:3e:f0:
05:b3:e3:df:52:44:30:12:a4:cd:a4:35:b4:58:e2:20:45:3c:
cb:b2:df:df:10:b3:8b:70:c2:d4:44:e6:57:2c:bd:e3:15:e6:
fb:55:30:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:51:03 2025 by rpki-client