Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/0fc900-7c48-4a51-83fe-dcf3a1c25cf3/1/DMw2Ao0AWBDKuiRhS9YHMd1JUDM.mft
File: DMw2Ao0AWBDKuiRhS9YHMd1JUDM.mft (raw, json)
Hash identifier: 9cp2jUvTp1ez90SsFOsel4byx1aUNIWcUqEXD/lbnCY=
Subject key identifier: 67:7B:D8:53:63:94:5D:1B:7A:83:E0:56:87:74:60:09:F0:EB:21:11
Authority key identifier: 0C:CC:36:02:8D:00:58:10:CA:BA:24:61:4B:D6:07:31:DD:49:50:33
Certificate issuer: /CN=0ccc36028d005810caba24614bd60731dd495033
Certificate serial: 019A711374672F2BEA3106343456AF52E5F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DMw2Ao0AWBDKuiRhS9YHMd1JUDM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/0fc900-7c48-4a51-83fe-dcf3a1c25cf3/1/DMw2Ao0AWBDKuiRhS9YHMd1JUDM.mft
Manifest number: 0290
Signing time: Tue 11 Nov 2025 04:01:31 +0000
Manifest this update: Tue 11 Nov 2025 04:01:31 +0000
Manifest next update: Wed 12 Nov 2025 04:01:31 +0000
Files and hashes: 1: DMw2Ao0AWBDKuiRhS9YHMd1JUDM.crl (hash: PtRq31Zb4GWO5SzgqUootRKyXxo0Hz1+3A66xIG6FBc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/0fc900-7c48-4a51-83fe-dcf3a1c25cf3/1/DMw2Ao0AWBDKuiRhS9YHMd1JUDM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/0fc900-7c48-4a51-83fe-dcf3a1c25cf3/1/DMw2Ao0AWBDKuiRhS9YHMd1JUDM.mft
rsync://rpki.ripe.net/repository/DEFAULT/DMw2Ao0AWBDKuiRhS9YHMd1JUDM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:74:67:2f:2b:ea:31:06:34:34:56:af:52:e5:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ccc36028d005810caba24614bd60731dd495033
Validity
Not Before: Nov 11 04:01:31 2025 GMT
Not After : Nov 12 04:01:31 2025 GMT
Subject: CN=677bd85363945d1b7a83e05687746009f0eb2111
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f0:02:aa:15:32:f1:7e:4b:41:ef:f6:56:c6:
e1:67:6e:99:99:6e:37:b4:49:c6:01:49:44:a1:3b:
fa:d5:a0:0b:4b:59:69:ec:7d:73:0a:c9:cd:8b:33:
ce:20:e5:c1:0a:ad:22:49:28:5f:57:68:0a:e5:6a:
5d:d1:b6:2c:30:00:2b:bd:0b:a2:06:8c:76:ca:74:
8d:83:cc:1c:cf:c2:19:a2:cc:3c:69:a9:b8:88:ef:
4c:15:9a:a2:f0:50:cf:e4:25:b7:8d:5c:90:18:f9:
47:48:b0:15:72:38:f8:a8:c0:e5:c7:53:b8:b0:f8:
07:a4:3c:db:6e:0e:07:69:e4:99:2a:2b:42:91:e3:
15:ca:0b:93:a2:c6:79:d4:26:e3:3e:ea:85:d4:33:
28:9a:05:23:88:3d:ae:4f:36:9b:8e:0e:5b:96:28:
18:e5:9b:95:44:ff:49:84:55:b0:f3:08:c1:97:11:
00:b7:57:de:7e:d5:be:8b:74:3a:7e:d3:f8:ce:4f:
ee:a1:36:57:49:e9:ab:8c:f3:be:9b:ae:4a:30:2d:
e6:18:d0:8a:5f:52:96:24:96:3c:21:19:a6:1b:eb:
a8:41:72:97:47:80:94:91:84:b2:57:41:5e:01:cd:
7d:05:95:35:c1:89:96:e2:94:60:d4:d3:b3:15:8b:
f9:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:7B:D8:53:63:94:5D:1B:7A:83:E0:56:87:74:60:09:F0:EB:21:11
X509v3 Authority Key Identifier:
keyid:0C:CC:36:02:8D:00:58:10:CA:BA:24:61:4B:D6:07:31:DD:49:50:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DMw2Ao0AWBDKuiRhS9YHMd1JUDM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/0fc900-7c48-4a51-83fe-dcf3a1c25cf3/1/DMw2Ao0AWBDKuiRhS9YHMd1JUDM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/0fc900-7c48-4a51-83fe-dcf3a1c25cf3/1/DMw2Ao0AWBDKuiRhS9YHMd1JUDM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:ea:6b:42:ec:1c:05:69:11:5d:2b:1d:ad:9b:e4:50:87:6c:
aa:ec:9f:79:cd:55:a6:a5:4e:67:e0:b8:90:76:4a:42:4a:18:
c2:53:b5:a0:a9:71:5e:40:c1:2d:2a:69:dd:25:6a:58:c7:01:
ba:e8:43:a0:90:9b:39:46:84:c9:3d:34:0c:99:2a:69:df:98:
81:63:73:49:a3:95:f8:b1:d9:db:5e:d1:f7:51:5f:d0:1b:e3:
ed:b9:6e:79:21:1d:09:02:d5:f0:9a:d2:66:f4:13:e3:6b:cb:
60:f4:70:de:9b:b7:95:b8:c3:a5:38:53:86:cb:d7:64:ca:b3:
0c:cb:5c:aa:2e:4c:93:1b:dc:9e:94:eb:84:24:71:94:1d:89:
d9:96:8c:47:54:99:d6:16:ef:09:80:b5:11:08:88:d8:f8:26:
a8:fa:02:04:30:0d:df:80:ed:ea:6b:5a:58:3c:3e:b9:19:b2:
c9:25:cb:24:31:7d:ef:a0:35:72:07:d5:b6:c8:bb:2b:6e:87:
35:8a:33:20:80:a5:37:b2:ce:e2:ac:46:bc:9d:8e:5d:56:03:
c1:26:02:03:46:86:9d:6b:ac:ff:00:75:98:d6:03:c8:65:71:
26:6e:1e:95:b3:66:f8:3d:a5:38:11:55:7c:90:5a:bd:ea:e8:
d7:21:40:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:41:41 2025 by rpki-client