Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/4a1238-cb64-4a46-af95-65be44d0dbd4/1/Dchx21CYv4OP_qmaAvZ5Nos-GrI.mft
File: Dchx21CYv4OP_qmaAvZ5Nos-GrI.mft (raw, json)
Hash identifier: 4MNpdn5ZxLYYT5HFfwZnXUQbAfHkhnhXp3375oZ0esU=
Subject key identifier: A9:DB:72:8D:B7:81:86:9C:DB:BD:8B:09:95:28:E7:47:09:99:F5:DE
Authority key identifier: 0D:C8:71:DB:50:98:BF:83:8F:FE:A9:9A:02:F6:79:36:8B:3E:1A:B2
Certificate issuer: /CN=0dc871db5098bf838ffea99a02f679368b3e1ab2
Certificate serial: 019A251C5171121F4A911423BD487C7CBAC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dchx21CYv4OP_qmaAvZ5Nos-GrI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/4a1238-cb64-4a46-af95-65be44d0dbd4/1/Dchx21CYv4OP_qmaAvZ5Nos-GrI.mft
Manifest number: 16F4
Signing time: Mon 27 Oct 2025 10:00:04 +0000
Manifest this update: Mon 27 Oct 2025 10:00:04 +0000
Manifest next update: Tue 28 Oct 2025 10:00:04 +0000
Files and hashes: 1: Dchx21CYv4OP_qmaAvZ5Nos-GrI.crl (hash: akN+h/OzO0NLahPRXq4Zz2h68oTDTJQ+1Ycb21rqHLg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/4a1238-cb64-4a46-af95-65be44d0dbd4/1/Dchx21CYv4OP_qmaAvZ5Nos-GrI.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/4a1238-cb64-4a46-af95-65be44d0dbd4/1/Dchx21CYv4OP_qmaAvZ5Nos-GrI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dchx21CYv4OP_qmaAvZ5Nos-GrI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 08:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:25:1c:51:71:12:1f:4a:91:14:23:bd:48:7c:7c:ba:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dc871db5098bf838ffea99a02f679368b3e1ab2
Validity
Not Before: Oct 27 10:00:04 2025 GMT
Not After : Oct 28 10:00:04 2025 GMT
Subject: CN=a9db728db781869cdbbd8b099528e7470999f5de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:bd:22:cd:6b:bd:86:ef:5b:bc:3d:97:41:88:
86:2f:62:ad:77:ac:ac:93:29:4d:5e:52:ff:70:4a:
5f:eb:f9:ad:68:96:49:81:9e:54:68:d4:4f:be:44:
b5:2e:9f:73:8a:d4:82:26:7c:72:63:50:c6:c9:b9:
ac:a3:aa:5d:27:ab:23:5f:d2:80:3c:ab:b0:ab:c9:
25:5c:5e:ae:df:32:0e:29:19:fd:ef:a4:8d:6e:df:
e6:20:58:e0:26:ce:e8:d8:07:64:08:f8:60:bd:b2:
0d:e9:53:3a:33:0b:c3:cf:74:be:a5:a1:29:c6:22:
9e:83:50:34:5a:48:af:1c:fa:a8:04:d3:28:41:33:
b2:80:88:f8:65:33:2e:63:57:c1:64:6e:b9:4f:8d:
2e:24:7a:67:5c:55:ae:6e:6f:b2:17:13:dc:31:da:
e4:71:06:b5:af:8b:09:27:1c:44:6d:90:8c:04:23:
e1:75:d2:9e:93:7e:23:6a:7c:89:e3:7c:5e:44:cb:
60:b3:b2:cb:4a:dc:39:2d:5e:84:c7:d7:6a:25:1e:
7f:2b:74:e1:a4:f6:0a:c3:bd:79:73:8b:7b:a5:6a:
f1:9c:f4:33:a5:f4:af:4e:5b:72:be:92:9e:24:35:
4e:8a:70:39:a4:3b:9f:85:05:ba:47:26:c2:00:06:
97:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:DB:72:8D:B7:81:86:9C:DB:BD:8B:09:95:28:E7:47:09:99:F5:DE
X509v3 Authority Key Identifier:
keyid:0D:C8:71:DB:50:98:BF:83:8F:FE:A9:9A:02:F6:79:36:8B:3E:1A:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dchx21CYv4OP_qmaAvZ5Nos-GrI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/4a1238-cb64-4a46-af95-65be44d0dbd4/1/Dchx21CYv4OP_qmaAvZ5Nos-GrI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/4a1238-cb64-4a46-af95-65be44d0dbd4/1/Dchx21CYv4OP_qmaAvZ5Nos-GrI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:6a:5f:a9:48:70:2d:19:79:e7:81:ca:03:e7:20:ef:72:58:
3d:ea:36:c0:bb:ca:43:12:42:f0:d5:3a:e0:19:ee:b9:84:d6:
f8:9d:09:ca:7d:66:d4:5d:46:fd:73:7b:8d:9e:2c:6d:90:3b:
a9:f5:07:91:20:f0:8f:2c:b7:7f:d8:ce:56:47:08:d8:3c:69:
45:79:7e:18:7b:ab:72:f4:3f:a2:a3:2b:58:0f:2e:ad:b5:c9:
a6:7c:f3:8c:f1:67:b1:14:56:70:3c:4a:67:a7:21:8c:f5:a6:
33:7c:50:fd:bb:ff:bb:05:39:4d:b2:04:c8:3a:c9:ac:69:2f:
66:34:dc:a5:12:f1:25:95:69:29:c7:32:f9:3b:20:30:80:36:
82:2e:bb:bd:c7:35:d5:13:df:05:d1:b3:86:5c:c6:80:16:ef:
b7:b2:79:60:1b:f8:af:21:e0:bb:57:ae:13:d5:8f:4d:51:90:
ac:66:57:fc:97:31:e6:67:ef:d7:a1:32:0d:52:a7:03:59:64:
a0:4e:b5:b7:3a:39:20:59:4e:c5:25:d1:21:f5:07:ad:c1:82:
eb:94:a3:99:32:b1:d2:e4:7f:f6:e9:29:b2:64:be:b3:2f:e2:
eb:a0:d3:37:03:69:3b:e0:53:cd:14:d9:23:7c:8a:61:37:33:
7d:84:95:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 12:24:59 2025 by rpki-client