Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/7b2dac-0fb4-4309-8861-7231146d156f/1/DxoYFt02i3fPMr0hqeC61d9s3_A.mft
File: DxoYFt02i3fPMr0hqeC61d9s3_A.mft (raw, json)
Hash identifier: c0DaFnum6xsxx5Ev+miIJylK2dBmaTmwfshlGT7wxhc=
Subject key identifier: 6A:49:34:23:06:AB:6C:14:0F:BD:07:D4:57:42:6F:D7:97:FB:CE:ED
Authority key identifier: 0F:1A:18:16:DD:36:8B:77:CF:32:BD:21:A9:E0:BA:D5:DF:6C:DF:F0
Certificate issuer: /CN=0f1a1816dd368b77cf32bd21a9e0bad5df6cdff0
Certificate serial: 019A725CE788B688581FBB88E093F86E283E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DxoYFt02i3fPMr0hqeC61d9s3_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/7b2dac-0fb4-4309-8861-7231146d156f/1/DxoYFt02i3fPMr0hqeC61d9s3_A.mft
Manifest number: 171D
Signing time: Tue 11 Nov 2025 10:01:22 +0000
Manifest this update: Tue 11 Nov 2025 10:01:22 +0000
Manifest next update: Wed 12 Nov 2025 10:01:22 +0000
Files and hashes: 1: DxoYFt02i3fPMr0hqeC61d9s3_A.crl (hash: TLGdsgrr1TjSXfElKW39v+B3Z0NDc69ptrnRLejt7cQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/7b2dac-0fb4-4309-8861-7231146d156f/1/DxoYFt02i3fPMr0hqeC61d9s3_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/7b2dac-0fb4-4309-8861-7231146d156f/1/DxoYFt02i3fPMr0hqeC61d9s3_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/DxoYFt02i3fPMr0hqeC61d9s3_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:e7:88:b6:88:58:1f:bb:88:e0:93:f8:6e:28:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f1a1816dd368b77cf32bd21a9e0bad5df6cdff0
Validity
Not Before: Nov 11 10:01:22 2025 GMT
Not After : Nov 12 10:01:22 2025 GMT
Subject: CN=6a49342306ab6c140fbd07d457426fd797fbceed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:61:69:59:b5:35:98:9b:d0:91:8f:31:b8:81:
d2:60:2f:04:a7:97:04:fb:71:7e:91:f6:15:14:a5:
6a:b1:9b:f0:9f:8b:fa:46:67:cc:c9:0e:69:bb:cd:
ff:a7:0e:58:39:99:b2:b8:ad:55:c8:4a:37:a8:3a:
ac:49:50:91:19:75:ca:26:ba:0f:ba:55:11:1a:85:
d9:28:0e:8d:f0:73:86:d4:53:b6:48:eb:89:4b:d8:
1c:17:d0:66:69:bd:5d:3b:d0:92:da:11:32:65:f0:
c0:36:54:c7:ea:57:55:73:b6:ed:9f:ba:4f:9d:af:
01:95:d9:a9:1f:a9:61:d6:2a:07:38:35:5b:7f:bb:
01:3d:f3:24:52:e9:29:c6:c2:65:7c:e1:3f:53:49:
5b:ca:7e:f6:75:df:52:69:50:b9:0a:b6:7b:e1:2c:
d6:ba:c4:9e:79:8a:37:77:e0:d5:f4:ae:a9:d5:b1:
2f:75:2c:8b:18:38:a5:19:88:bb:b6:ac:84:f8:05:
d9:ce:49:c4:9e:3f:3e:e8:fa:f5:83:0c:c7:e9:6d:
05:c7:eb:e0:24:c1:b4:5b:f0:77:ee:ef:a1:27:72:
85:87:bd:b6:63:d8:d8:6a:14:9b:e9:8c:f4:c0:00:
0a:ca:30:93:90:61:97:35:1f:b4:6a:10:00:6d:34:
b4:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:49:34:23:06:AB:6C:14:0F:BD:07:D4:57:42:6F:D7:97:FB:CE:ED
X509v3 Authority Key Identifier:
keyid:0F:1A:18:16:DD:36:8B:77:CF:32:BD:21:A9:E0:BA:D5:DF:6C:DF:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DxoYFt02i3fPMr0hqeC61d9s3_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/7b2dac-0fb4-4309-8861-7231146d156f/1/DxoYFt02i3fPMr0hqeC61d9s3_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/7b2dac-0fb4-4309-8861-7231146d156f/1/DxoYFt02i3fPMr0hqeC61d9s3_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:f0:4f:0b:ed:3b:46:bf:bd:a9:61:8e:44:b3:5f:e0:64:a0:
1a:d0:2e:ee:e9:88:1e:5f:eb:81:17:c3:4e:21:2c:2f:33:ec:
8c:f9:af:ad:6f:cf:de:aa:da:1f:4c:a8:7d:fa:b2:2d:c2:cb:
e6:2b:f5:8f:f8:a0:29:48:d9:ec:34:d0:7b:9c:7f:fa:5c:13:
d0:01:cf:83:9a:e2:e3:e8:9e:39:5f:4e:43:f3:8e:c5:c5:a5:
8e:6f:9b:75:6e:f8:1a:77:b6:38:b4:68:92:9b:54:cc:60:bd:
e4:71:d6:57:8e:4f:23:07:4a:cc:de:96:4e:be:ce:52:60:4e:
f7:28:a1:60:e1:87:1d:ac:71:64:8d:52:f5:13:e2:fa:66:e7:
dd:19:44:bc:0a:43:ab:00:03:56:a2:3c:94:e8:f8:d7:8b:ec:
e9:0d:cd:e4:c4:5b:00:27:36:f3:9c:9b:28:08:38:1a:4e:8d:
2c:3c:f6:b8:de:dc:9f:31:1f:ac:b6:ff:1d:1b:4d:2b:fc:75:
bb:8a:5a:20:6a:9c:b2:cc:e8:e6:8a:8c:c7:12:88:f3:bf:e4:
cf:a6:01:e3:48:74:0a:b1:17:8f:58:17:22:f2:b2:0b:05:4e:
ef:d3:6c:73:87:4d:63:3c:e2:4c:ad:ed:8d:f6:5f:11:8d:e1:
5f:5b:6e:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:07:05 2025 by rpki-client