Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/53be2f-e997-470d-93bf-41b5863ca8db/1/DhI9xSvlTkcrv-N18u1B5JqHg-c.mft
File: DhI9xSvlTkcrv-N18u1B5JqHg-c.mft (raw, json)
Hash identifier: ygUKwtOOuJ8o/6FM5EgweQw4nBkSfaLy50ZWJ4RbIPw=
Subject key identifier: 2F:16:3C:E1:65:C5:AA:67:BC:0A:0E:F1:51:85:5B:34:B9:00:6C:8E
Authority key identifier: 0E:12:3D:C5:2B:E5:4E:47:2B:BF:E3:75:F2:ED:41:E4:9A:87:83:E7
Certificate issuer: /CN=0e123dc52be54e472bbfe375f2ed41e49a8783e7
Certificate serial: 019A2741D33987F84440EC425AE617D4658E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DhI9xSvlTkcrv-N18u1B5JqHg-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/53be2f-e997-470d-93bf-41b5863ca8db/1/DhI9xSvlTkcrv-N18u1B5JqHg-c.mft
Manifest number: 0727
Signing time: Mon 27 Oct 2025 20:00:16 +0000
Manifest this update: Mon 27 Oct 2025 20:00:16 +0000
Manifest next update: Tue 28 Oct 2025 20:00:16 +0000
Files and hashes: 1: DhI9xSvlTkcrv-N18u1B5JqHg-c.crl (hash: fSVXVZSzz/pfD92saAMTBtA3qhWw7/fvhUXNhnKPdzk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/53be2f-e997-470d-93bf-41b5863ca8db/1/DhI9xSvlTkcrv-N18u1B5JqHg-c.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/53be2f-e997-470d-93bf-41b5863ca8db/1/DhI9xSvlTkcrv-N18u1B5JqHg-c.mft
rsync://rpki.ripe.net/repository/DEFAULT/DhI9xSvlTkcrv-N18u1B5JqHg-c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 20:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:27:41:d3:39:87:f8:44:40:ec:42:5a:e6:17:d4:65:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e123dc52be54e472bbfe375f2ed41e49a8783e7
Validity
Not Before: Oct 27 20:00:16 2025 GMT
Not After : Oct 28 20:00:16 2025 GMT
Subject: CN=2f163ce165c5aa67bc0a0ef151855b34b9006c8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:69:f3:80:74:c9:06:bb:34:9f:32:78:af:20:
f0:05:1a:10:3d:7d:e8:7b:f2:74:5f:a7:1d:3d:63:
66:a6:9a:80:7b:b1:c4:76:ad:82:79:29:77:73:0a:
ac:54:dd:7f:16:eb:26:f5:56:5b:e9:a1:1b:6f:27:
7b:38:07:88:1e:44:8a:bf:a4:0f:da:1c:0d:bd:c2:
68:81:80:ce:56:e1:df:28:b3:be:f6:d5:38:79:e0:
fc:b1:2c:9e:92:a8:2e:42:bd:5b:dd:3a:ca:53:15:
5a:a9:9d:72:86:47:b1:96:3b:61:31:65:2a:dc:8e:
94:e9:8e:dd:7d:19:d3:d5:9c:fc:fb:a0:58:cd:85:
eb:42:bb:ae:25:63:ee:64:9f:4f:04:52:05:57:17:
b3:20:b6:e6:29:9f:f4:8c:ba:89:a0:ff:5c:41:ea:
0b:f0:4d:30:a5:36:59:20:4f:49:88:1f:ab:a8:54:
27:0c:de:21:90:d9:f6:c1:83:5b:cc:25:0c:d7:aa:
6e:20:2a:58:3c:cb:46:63:18:6a:df:cf:fc:df:48:
04:b7:9a:a4:d0:c0:78:c8:f2:4c:ce:2c:ec:d4:ee:
0c:40:dc:46:a9:74:0c:a1:c6:88:1d:34:e8:06:52:
c6:5a:26:c9:3c:60:4d:a6:08:85:95:ef:8e:b6:d0:
87:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:16:3C:E1:65:C5:AA:67:BC:0A:0E:F1:51:85:5B:34:B9:00:6C:8E
X509v3 Authority Key Identifier:
keyid:0E:12:3D:C5:2B:E5:4E:47:2B:BF:E3:75:F2:ED:41:E4:9A:87:83:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DhI9xSvlTkcrv-N18u1B5JqHg-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/53be2f-e997-470d-93bf-41b5863ca8db/1/DhI9xSvlTkcrv-N18u1B5JqHg-c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/53be2f-e997-470d-93bf-41b5863ca8db/1/DhI9xSvlTkcrv-N18u1B5JqHg-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:d8:83:1c:14:65:ec:3b:c3:01:80:ee:bb:0b:57:b3:a2:55:
86:ab:13:fa:3e:6a:14:b2:6d:89:68:8c:97:82:12:ac:f0:c0:
ef:56:c9:a5:da:d0:da:c0:0b:bf:3d:70:7f:9d:23:7d:df:eb:
89:7b:b4:41:71:d7:da:1f:e0:23:9c:da:c5:28:f9:60:53:05:
64:ce:27:59:13:d2:94:69:01:7e:67:85:db:b0:1c:a7:75:a9:
01:34:ea:0d:0e:97:14:82:ec:a4:85:67:e7:74:9c:71:f6:ea:
a9:46:d7:b7:dc:dc:c5:ce:b9:2c:82:2b:7d:98:79:0a:f5:a3:
7a:b5:9d:7b:96:eb:4f:fd:7c:b8:08:65:ab:24:6a:58:67:2d:
5f:62:5a:70:3f:e8:03:e0:a1:c3:f0:b3:f8:ec:27:72:74:51:
4b:22:f8:b2:cf:2c:b3:3d:ed:62:a7:51:f4:6c:01:83:c3:62:
5a:4f:a5:59:62:cf:3f:ee:56:9d:04:1e:e0:20:10:19:6b:ee:
3f:4e:89:ad:b2:c2:f1:22:91:d9:29:6a:27:6c:82:fb:db:7c:
ff:37:6a:fe:1a:71:03:9f:7c:8d:99:b7:3a:4b:b8:ed:7d:3a:
06:af:56:0f:81:5b:5a:c7:5c:ed:28:16:ce:fe:f0:d6:4e:3d:
ad:cd:6a:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 02:01:33 2025 by rpki-client