Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/cf3c6e-4836-4415-91d4-f8bac4fb8f8a/1/DDvIzqseeTohA5zQseVHLHJkH2g.mft
File: DDvIzqseeTohA5zQseVHLHJkH2g.mft (raw, json)
Hash identifier: vZRCOkgG5bJEZuDH50cc/V4z5+uL4IghcOR5l1ZxB7g=
Subject key identifier: AF:DD:89:99:07:B4:8C:67:EA:8A:BB:80:73:6D:C1:7A:E8:CB:E4:63
Authority key identifier: 0C:3B:C8:CE:AB:1E:79:3A:21:03:9C:D0:B1:E5:47:2C:72:64:1F:68
Certificate issuer: /CN=0c3bc8ceab1e793a21039cd0b1e5472c72641f68
Certificate serial: 019A2930A0CB131D0BB3C046BC60A9D01905
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DDvIzqseeTohA5zQseVHLHJkH2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/cf3c6e-4836-4415-91d4-f8bac4fb8f8a/1/DDvIzqseeTohA5zQseVHLHJkH2g.mft
Manifest number: 16F7
Signing time: Tue 28 Oct 2025 05:00:44 +0000
Manifest this update: Tue 28 Oct 2025 05:00:44 +0000
Manifest next update: Wed 29 Oct 2025 05:00:44 +0000
Files and hashes: 1: DDvIzqseeTohA5zQseVHLHJkH2g.crl (hash: qXTeHXacPmDpz+HpLWjIbKSekvNkMCmfUPbYmKrEeOs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/cf3c6e-4836-4415-91d4-f8bac4fb8f8a/1/DDvIzqseeTohA5zQseVHLHJkH2g.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/cf3c6e-4836-4415-91d4-f8bac4fb8f8a/1/DDvIzqseeTohA5zQseVHLHJkH2g.mft
rsync://rpki.ripe.net/repository/DEFAULT/DDvIzqseeTohA5zQseVHLHJkH2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 05:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:29:30:a0:cb:13:1d:0b:b3:c0:46:bc:60:a9:d0:19:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c3bc8ceab1e793a21039cd0b1e5472c72641f68
Validity
Not Before: Oct 28 05:00:44 2025 GMT
Not After : Oct 29 05:00:44 2025 GMT
Subject: CN=afdd899907b48c67ea8abb80736dc17ae8cbe463
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:0b:d2:33:85:97:f0:d9:89:c8:ed:db:a2:d1:
9a:13:e0:dc:f2:d3:8b:3c:55:cf:cb:d8:19:f2:d2:
e6:6a:82:f0:2e:92:ac:f8:a6:ff:ab:a2:55:4b:cb:
08:3c:8d:64:aa:fc:73:3d:ed:59:ce:10:d3:9b:d4:
18:91:f1:e1:11:84:87:b0:e5:24:b1:3a:39:47:52:
e0:ff:07:ce:c7:00:a3:8b:5e:5a:65:0c:f4:12:31:
fe:67:ad:9f:c4:eb:90:0f:22:e3:12:99:9f:1a:79:
1b:af:6d:e2:0c:88:7f:40:48:30:fc:1a:4b:40:47:
35:f7:1c:4e:0e:3b:92:7c:a2:11:12:78:21:d5:f6:
dc:e2:55:af:8d:b2:ab:03:03:f7:7c:14:6e:13:42:
0f:33:dd:c6:4e:41:05:ea:6e:24:5d:3e:d5:08:7e:
18:f3:a2:98:90:2d:64:7d:d1:df:0b:61:d4:e8:25:
a5:ed:1c:3e:4a:23:3d:d6:73:5f:09:20:47:f0:10:
80:1a:d4:64:0d:18:1c:e2:19:51:74:96:32:8c:7a:
9e:d6:64:f2:a4:d9:ca:99:c5:b2:20:e7:e7:32:58:
ef:aa:94:d2:a0:30:56:61:fd:d7:d9:2b:41:af:c3:
59:ae:5b:7a:c4:b8:e3:0a:bc:d0:b8:1c:33:b4:7d:
74:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:DD:89:99:07:B4:8C:67:EA:8A:BB:80:73:6D:C1:7A:E8:CB:E4:63
X509v3 Authority Key Identifier:
keyid:0C:3B:C8:CE:AB:1E:79:3A:21:03:9C:D0:B1:E5:47:2C:72:64:1F:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DDvIzqseeTohA5zQseVHLHJkH2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/cf3c6e-4836-4415-91d4-f8bac4fb8f8a/1/DDvIzqseeTohA5zQseVHLHJkH2g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/cf3c6e-4836-4415-91d4-f8bac4fb8f8a/1/DDvIzqseeTohA5zQseVHLHJkH2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:e6:7c:93:24:a2:1f:0f:0b:3e:b8:1e:cb:69:06:38:49:5b:
ea:92:f0:25:8c:1f:11:98:d5:99:f8:03:10:c8:ef:eb:fd:ab:
ef:26:4f:98:a2:fe:32:f3:0c:90:43:71:a4:af:c7:42:d7:a9:
5b:4c:9b:ed:e2:8d:a3:53:56:83:4f:ca:90:08:e4:01:9a:34:
ef:fc:9d:a6:60:12:0d:28:78:85:b6:f6:3a:69:fc:0c:3d:50:
25:5b:72:92:7b:21:6d:55:0a:2e:ba:26:5d:47:f9:96:b8:6b:
b3:21:38:72:b5:d6:8c:59:4d:2f:c5:8b:d8:e8:26:54:c3:1f:
35:86:5a:a5:8a:f3:97:10:06:f2:6b:7d:85:dc:af:e1:cf:60:
66:d1:3b:a1:2c:10:59:ff:2f:13:24:cb:39:93:b9:c5:2f:df:
7f:83:05:9e:95:7d:5a:59:ba:ac:b5:a1:9e:8e:b9:1d:64:1a:
cc:2b:95:bd:d4:3d:b3:a7:a1:84:30:b8:f6:57:9b:5b:00:1b:
8f:7b:6d:15:73:89:95:65:f5:0a:43:2a:f2:39:d4:0e:a3:bc:
94:4f:87:7f:8a:04:21:97:7d:b2:9f:7f:97:a5:95:94:2e:9c:
11:da:f4:1e:20:76:54:1a:33:61:4f:a4:b0:b1:83:1f:51:ab:
1e:c8:7d:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 11:30:05 2025 by rpki-client