Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/0b9773-f9d8-4d87-8772-7008bc97c7b1/1/dpx0RfVnkSzoKKX3h-yUSgjb_eM.mft
File: dpx0RfVnkSzoKKX3h-yUSgjb_eM.mft (raw, json)
Hash identifier: 4bxzwNwuXtllbrgHdNLxmaj+CbZx2WcyFB2yUSo3DW8=
Subject key identifier: 5E:8C:CA:65:A2:9A:1E:11:1B:C2:7F:60:36:5A:EE:52:0B:E9:E0:C7
Authority key identifier: 76:9C:74:45:F5:67:91:2C:E8:28:A5:F7:87:EC:94:4A:08:DB:FD:E3
Certificate issuer: /CN=769c7445f567912ce828a5f787ec944a08dbfde3
Certificate serial: 019A71B796A8C5C1FA8DF10F7CC8F9F4DC22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dpx0RfVnkSzoKKX3h-yUSgjb_eM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/0b9773-f9d8-4d87-8772-7008bc97c7b1/1/dpx0RfVnkSzoKKX3h-yUSgjb_eM.mft
Manifest number: 12FF
Signing time: Tue 11 Nov 2025 07:00:48 +0000
Manifest this update: Tue 11 Nov 2025 07:00:48 +0000
Manifest next update: Wed 12 Nov 2025 07:00:48 +0000
Files and hashes: 1: dpx0RfVnkSzoKKX3h-yUSgjb_eM.crl (hash: 1QGVntx/UjTAdHWkg3UQnJBCOnVu3HMHu4vUN9au3iw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/0b9773-f9d8-4d87-8772-7008bc97c7b1/1/dpx0RfVnkSzoKKX3h-yUSgjb_eM.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/0b9773-f9d8-4d87-8772-7008bc97c7b1/1/dpx0RfVnkSzoKKX3h-yUSgjb_eM.mft
rsync://rpki.ripe.net/repository/DEFAULT/dpx0RfVnkSzoKKX3h-yUSgjb_eM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:96:a8:c5:c1:fa:8d:f1:0f:7c:c8:f9:f4:dc:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=769c7445f567912ce828a5f787ec944a08dbfde3
Validity
Not Before: Nov 11 07:00:48 2025 GMT
Not After : Nov 12 07:00:48 2025 GMT
Subject: CN=5e8cca65a29a1e111bc27f60365aee520be9e0c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:84:12:c8:7e:86:40:94:92:f3:e7:28:1d:bc:
02:65:51:35:a0:68:e5:78:9b:51:fe:c2:39:3e:c3:
ce:65:b6:7d:8e:c8:c5:99:1b:39:7f:9d:dc:5b:d7:
06:3f:e3:f5:08:76:c0:e6:c0:c2:b1:6d:d1:4d:ac:
a4:04:8e:55:2b:d5:d1:3a:cd:20:59:fc:de:6a:67:
94:e4:80:4b:8f:f0:28:d7:82:85:b5:16:a4:d8:11:
b1:2d:f7:c3:13:f8:c0:87:db:c7:aa:38:88:ea:01:
95:7f:63:26:96:61:45:22:c7:27:1f:b8:b5:1e:4a:
e6:40:41:d4:e9:48:6e:91:15:c8:f6:f5:73:f7:6c:
e3:9a:66:4b:d0:07:39:c5:ab:12:89:be:11:99:51:
86:c1:bf:4c:20:9a:95:97:5f:04:9c:fa:20:01:d1:
6d:a3:75:af:b4:84:c3:5b:36:c0:d5:14:db:aa:c1:
47:2d:52:16:78:6b:c4:52:3a:ae:3e:b5:39:20:7d:
f2:1f:e0:4e:f6:b2:3b:23:74:fc:22:bc:b4:3f:2e:
e9:d6:a0:a7:a9:07:16:a4:dd:fb:0e:45:66:43:39:
36:33:c9:6b:22:d5:1b:4a:f5:72:ae:ea:e5:be:d5:
d8:0b:99:42:23:9e:56:39:54:7d:8f:e4:4e:d8:14:
86:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:8C:CA:65:A2:9A:1E:11:1B:C2:7F:60:36:5A:EE:52:0B:E9:E0:C7
X509v3 Authority Key Identifier:
keyid:76:9C:74:45:F5:67:91:2C:E8:28:A5:F7:87:EC:94:4A:08:DB:FD:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dpx0RfVnkSzoKKX3h-yUSgjb_eM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/0b9773-f9d8-4d87-8772-7008bc97c7b1/1/dpx0RfVnkSzoKKX3h-yUSgjb_eM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/0b9773-f9d8-4d87-8772-7008bc97c7b1/1/dpx0RfVnkSzoKKX3h-yUSgjb_eM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:50:47:3b:64:7d:a9:c5:72:04:8f:43:10:9d:02:1d:ff:9c:
09:f9:7f:c8:ef:00:c4:10:81:ae:c2:a1:83:52:49:d9:55:b0:
4a:ec:1b:bf:c5:d5:bb:ea:d0:93:f2:91:1d:91:d1:da:4d:3d:
d9:1b:5e:8c:9d:f1:00:e0:3b:5c:9f:ef:b7:33:d6:6b:b6:63:
17:58:b7:0d:2d:a0:c8:c2:7c:e9:b3:71:c6:6b:21:a9:68:4f:
79:71:1c:7e:cf:28:30:f3:40:a2:83:6d:da:82:2c:30:12:3a:
2f:43:c5:8e:72:47:ec:62:01:33:8f:a3:be:d4:05:a4:a5:69:
a5:7a:1a:12:de:b3:16:de:5b:81:51:1d:1a:ca:f4:d8:a6:18:
36:7a:8c:6e:db:2a:33:76:3f:aa:e3:17:1c:76:1e:0f:8b:fe:
96:94:17:22:fe:2f:aa:2c:45:f9:86:8f:9f:c3:df:7d:8f:0e:
93:f9:23:b4:fa:ad:5b:f8:af:1e:70:c3:60:aa:ee:6b:5f:fd:
7a:c2:7a:4c:c5:5a:0f:33:0d:df:fa:69:af:d0:3d:30:04:f9:
52:af:c6:fe:ff:3e:9b:25:4d:8b:8b:1c:b8:d0:81:09:c7:26:
fb:64:da:87:be:44:57:ec:16:ba:ae:3c:4d:fd:60:9c:fb:3e:
f7:7c:e5:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:16:17 2025 by rpki-client