Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/cea161-cb5c-4e41-b836-d80077e12b5d/1/D0nEmnXPbiSMm1HHBU2y-Nnc7cs.mft
File: D0nEmnXPbiSMm1HHBU2y-Nnc7cs.mft (raw, json)
Hash identifier: IxeavOJjks8hau05d001VZzI2v8APgUYIX8prbu5GYI=
Subject key identifier: 8A:FC:B5:99:F2:90:6E:DD:71:94:5F:99:62:B0:81:A2:87:97:23:E9
Authority key identifier: 0F:49:C4:9A:75:CF:6E:24:8C:9B:51:C7:05:4D:B2:F8:D9:DC:ED:CB
Certificate issuer: /CN=0f49c49a75cf6e248c9b51c7054db2f8d9dcedcb
Certificate serial: 019A71B92E1754E5BC2E533C8503410B8359
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D0nEmnXPbiSMm1HHBU2y-Nnc7cs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/cea161-cb5c-4e41-b836-d80077e12b5d/1/D0nEmnXPbiSMm1HHBU2y-Nnc7cs.mft
Manifest number: 0C2A
Signing time: Tue 11 Nov 2025 07:02:32 +0000
Manifest this update: Tue 11 Nov 2025 07:02:32 +0000
Manifest next update: Wed 12 Nov 2025 07:02:32 +0000
Files and hashes: 1: D0nEmnXPbiSMm1HHBU2y-Nnc7cs.crl (hash: DyhnP7z1WWOZTqLLL9F1KUEpCQ8+teUUcqALCEVcmUA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/cea161-cb5c-4e41-b836-d80077e12b5d/1/D0nEmnXPbiSMm1HHBU2y-Nnc7cs.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/cea161-cb5c-4e41-b836-d80077e12b5d/1/D0nEmnXPbiSMm1HHBU2y-Nnc7cs.mft
rsync://rpki.ripe.net/repository/DEFAULT/D0nEmnXPbiSMm1HHBU2y-Nnc7cs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:2e:17:54:e5:bc:2e:53:3c:85:03:41:0b:83:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f49c49a75cf6e248c9b51c7054db2f8d9dcedcb
Validity
Not Before: Nov 11 07:02:32 2025 GMT
Not After : Nov 12 07:02:32 2025 GMT
Subject: CN=8afcb599f2906edd71945f9962b081a2879723e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:7b:bc:f0:d6:88:47:ca:3d:cc:5a:c2:be:10:
a8:35:7b:24:69:a4:b2:0d:f6:05:25:ca:77:98:b6:
16:d0:b5:92:2d:e7:db:19:4f:f6:af:2e:a0:b9:73:
f2:af:4d:b7:6e:af:98:da:df:e9:c6:9c:c0:0c:34:
d3:3c:d3:75:48:1f:87:62:77:e0:c1:f4:62:60:f3:
34:13:89:f9:41:52:be:7a:bf:4f:5c:ef:b6:34:c5:
b8:74:c6:d3:46:cc:c8:ca:eb:3e:fa:51:de:ee:76:
2b:1e:0f:fa:fe:9c:f1:6f:ae:6c:cb:11:47:3e:b9:
74:42:77:ce:09:e9:c2:e4:60:ef:cd:03:04:29:5a:
fb:63:a2:30:66:6b:b5:96:21:3f:7d:66:8a:4b:a3:
c2:5b:de:10:8b:78:30:7b:00:68:60:4a:c8:68:2e:
f3:10:91:a2:91:8d:ac:30:9c:fe:ec:33:67:60:d1:
56:28:0e:8a:82:d8:c6:4c:fd:bf:2b:15:cc:ed:d9:
14:72:f7:98:5e:8d:75:d0:79:b3:9f:7b:b6:67:78:
4b:62:dc:ec:22:e6:b2:19:77:7f:3d:dc:47:ad:55:
b3:3a:bb:ef:32:47:e4:73:77:cd:ec:1e:2f:9b:8a:
76:79:2b:96:a5:82:e0:7b:c9:49:51:0b:59:68:f7:
5d:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:FC:B5:99:F2:90:6E:DD:71:94:5F:99:62:B0:81:A2:87:97:23:E9
X509v3 Authority Key Identifier:
keyid:0F:49:C4:9A:75:CF:6E:24:8C:9B:51:C7:05:4D:B2:F8:D9:DC:ED:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D0nEmnXPbiSMm1HHBU2y-Nnc7cs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/cea161-cb5c-4e41-b836-d80077e12b5d/1/D0nEmnXPbiSMm1HHBU2y-Nnc7cs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/cea161-cb5c-4e41-b836-d80077e12b5d/1/D0nEmnXPbiSMm1HHBU2y-Nnc7cs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:36:4e:13:a1:51:bc:56:4f:d2:0f:28:2b:cf:ed:d5:85:8b:
aa:5b:ec:22:9a:61:ab:f0:95:9d:f5:ba:81:14:e4:ae:f1:a9:
2b:9e:c0:4a:bc:97:f4:6c:a7:a1:14:6b:ba:86:13:05:dc:62:
c5:6b:6f:87:ca:18:c4:ab:05:89:80:87:ef:c8:c0:1d:df:66:
6b:1d:37:29:46:c6:ac:84:40:36:f0:cc:5c:97:78:79:e9:37:
a7:0a:1f:f8:56:86:6c:9b:bf:99:63:14:b8:7f:58:36:72:7a:
6c:2d:fb:fb:8c:80:35:8e:1e:f5:81:2f:11:d4:b4:4c:a2:d8:
8d:15:1a:c2:1e:61:a6:d8:a9:c3:d9:58:75:eb:fd:93:5e:25:
4b:02:be:56:d2:87:ec:25:9d:d2:fb:86:61:99:05:38:6a:a0:
75:61:05:68:d7:1f:99:d3:b3:72:02:32:e1:55:50:92:38:39:
bc:11:15:1d:e3:a1:83:ab:89:fa:82:4d:b7:0e:ee:27:e5:eb:
0c:fe:9e:39:23:65:8c:55:32:89:9c:fc:b3:9e:34:e1:bc:ae:
e0:20:43:a6:cf:56:67:67:6f:79:5e:7d:7b:6a:72:ae:9b:aa:
59:ee:2e:80:d3:63:b3:34:4f:6c:51:e2:54:6f:75:e1:6f:68:
8f:52:e5:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:04:46 2025 by rpki-client