Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/9a99c5-0713-4b76-b8f2-01adc1015648/1/dDWQyYyt2-4a14ldOC1Q9f28SK0.mft
File: dDWQyYyt2-4a14ldOC1Q9f28SK0.mft (raw, json)
Hash identifier: OzDbK6EKS9qno89UdjcOQpPOgWwwXn/s7sTQMVUsBfs=
Subject key identifier: 54:16:33:5F:8A:58:F0:44:BD:2B:F1:B4:F3:D1:99:E2:BF:A2:EF:4F
Authority key identifier: 74:35:90:C9:8C:AD:DB:EE:1A:D7:89:5D:38:2D:50:F5:FD:BC:48:AD
Certificate issuer: /CN=743590c98caddbee1ad7895d382d50f5fdbc48ad
Certificate serial: 019A71EEF1D13941FFC4CF78654E52AB0B1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dDWQyYyt2-4a14ldOC1Q9f28SK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/9a99c5-0713-4b76-b8f2-01adc1015648/1/dDWQyYyt2-4a14ldOC1Q9f28SK0.mft
Manifest number: C6
Signing time: Tue 11 Nov 2025 08:01:16 +0000
Manifest this update: Tue 11 Nov 2025 08:01:16 +0000
Manifest next update: Wed 12 Nov 2025 08:01:16 +0000
Files and hashes: 1: dDWQyYyt2-4a14ldOC1Q9f28SK0.crl (hash: 4jRPcfUwNKFK9foJhIcWFiKquCguGPskeQ/WfOLAZUI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/9a99c5-0713-4b76-b8f2-01adc1015648/1/dDWQyYyt2-4a14ldOC1Q9f28SK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/9a99c5-0713-4b76-b8f2-01adc1015648/1/dDWQyYyt2-4a14ldOC1Q9f28SK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/dDWQyYyt2-4a14ldOC1Q9f28SK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:f1:d1:39:41:ff:c4:cf:78:65:4e:52:ab:0b:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=743590c98caddbee1ad7895d382d50f5fdbc48ad
Validity
Not Before: Nov 11 08:01:16 2025 GMT
Not After : Nov 12 08:01:16 2025 GMT
Subject: CN=5416335f8a58f044bd2bf1b4f3d199e2bfa2ef4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:47:d2:13:12:ae:54:a0:45:08:0f:38:12:8d:
26:0f:66:18:2c:59:61:d9:c2:ae:9c:2d:cb:70:26:
b7:0b:67:ae:19:fc:cf:52:b9:86:2d:ae:2c:d1:2b:
8a:14:ed:93:47:c9:ed:b3:94:f1:fa:4f:3d:94:05:
21:f8:06:ed:2c:0d:04:6b:bf:48:c1:ac:87:ec:7a:
f7:72:89:c3:e9:2d:9e:e5:ac:a7:4a:83:39:4a:b6:
64:78:ad:2e:3a:b1:22:79:89:d0:f7:cb:89:1b:4a:
3e:a5:5f:e0:17:e9:d0:dd:6d:23:a9:94:e4:91:53:
dc:89:8c:9e:b7:34:ca:3c:23:a9:2a:f0:e8:e2:cb:
e8:ed:68:05:5f:30:47:8e:e6:ae:31:5a:44:5b:fc:
a8:58:56:c6:b7:f7:fc:91:5d:dd:2a:53:ee:05:9e:
86:10:45:57:89:45:e0:e7:f2:b6:76:ee:0e:1b:eb:
d9:bf:bf:b3:7d:41:76:bc:22:f6:a1:0c:2c:88:cc:
57:0c:d2:dc:f5:3e:f1:3c:53:4d:53:34:f2:f4:11:
5d:7a:77:c3:f3:ab:ea:d2:e2:9c:80:02:e4:4f:c8:
e8:26:f3:e5:ea:77:c2:f5:0e:07:a7:9d:44:e3:ec:
61:a3:6c:df:d7:63:a4:77:80:f6:72:89:42:9c:96:
55:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:16:33:5F:8A:58:F0:44:BD:2B:F1:B4:F3:D1:99:E2:BF:A2:EF:4F
X509v3 Authority Key Identifier:
keyid:74:35:90:C9:8C:AD:DB:EE:1A:D7:89:5D:38:2D:50:F5:FD:BC:48:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dDWQyYyt2-4a14ldOC1Q9f28SK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/9a99c5-0713-4b76-b8f2-01adc1015648/1/dDWQyYyt2-4a14ldOC1Q9f28SK0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/9a99c5-0713-4b76-b8f2-01adc1015648/1/dDWQyYyt2-4a14ldOC1Q9f28SK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:0e:b6:54:63:84:76:60:ab:05:cb:86:cf:f3:b0:6a:71:b3:
01:5e:3a:90:13:f3:fb:02:00:24:1c:a8:52:c5:a7:df:d6:e5:
14:1f:dc:90:ed:a0:3f:b5:f2:e5:2c:70:3d:37:71:bd:13:f9:
c6:4a:8b:47:ab:f0:45:c9:99:ad:e0:38:ec:d2:23:09:25:e0:
03:b0:99:3d:a6:e2:86:d6:9a:94:b3:93:bb:87:6a:8b:9c:98:
4b:9b:f2:89:22:4b:b3:d7:e7:33:1e:bb:29:e3:27:cb:c8:df:
f9:48:5d:e6:c9:f8:2e:3b:35:d9:7d:da:42:cb:3c:a9:77:21:
92:d7:3a:d8:fa:76:7b:e3:41:37:1b:53:7d:b3:77:b2:58:e8:
6c:5b:af:9e:e7:01:6d:b3:64:39:a6:14:b8:f7:b6:31:6e:53:
be:22:60:6a:4b:fc:3b:da:da:70:61:85:e6:5b:cf:e7:5a:cc:
98:03:6b:86:79:ed:91:f2:b5:60:c9:4f:3e:46:cc:34:79:ac:
7d:bb:4a:70:e7:40:45:0d:1c:8c:4d:01:58:7b:0d:6a:73:e1:
a3:9c:c2:cc:f7:7b:f2:00:d2:db:6b:9d:65:c7:b2:69:b6:c7:
9b:a1:f8:af:b4:c1:33:f2:6f:aa:94:82:ef:c3:b7:bf:4c:4d:
1e:d2:29:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:43:07 2025 by rpki-client