Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/f87140-bc2c-4f3f-83fd-a3d455d34809/1/msDRGjfaNdvi9_a5YZ5VcmNOH2I.mft
File: msDRGjfaNdvi9_a5YZ5VcmNOH2I.mft (raw, json)
Hash identifier: gyGqcB6Qj4LNu2dNNnIz3irpY7M6qXhvZS/F+UYDZnA=
Subject key identifier: 6C:DF:7D:36:E2:94:F3:F1:1A:0A:03:FA:02:48:07:A2:B4:56:37:33
Authority key identifier: 9A:C0:D1:1A:37:DA:35:DB:E2:F7:F6:B9:61:9E:55:72:63:4E:1F:62
Certificate issuer: /CN=9ac0d11a37da35dbe2f7f6b9619e5572634e1f62
Certificate serial: 019A232E68438C86D98988BD543F1CA744C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/msDRGjfaNdvi9_a5YZ5VcmNOH2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/f87140-bc2c-4f3f-83fd-a3d455d34809/1/msDRGjfaNdvi9_a5YZ5VcmNOH2I.mft
Manifest number: 136B
Signing time: Mon 27 Oct 2025 01:00:35 +0000
Manifest this update: Mon 27 Oct 2025 01:00:35 +0000
Manifest next update: Tue 28 Oct 2025 01:00:35 +0000
Files and hashes: 1: msDRGjfaNdvi9_a5YZ5VcmNOH2I.crl (hash: 4aCEMccex9Fog9UKTYEbikV7S2Yr/ZQ1lVD0s8swfCM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/f87140-bc2c-4f3f-83fd-a3d455d34809/1/msDRGjfaNdvi9_a5YZ5VcmNOH2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/f87140-bc2c-4f3f-83fd-a3d455d34809/1/msDRGjfaNdvi9_a5YZ5VcmNOH2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/msDRGjfaNdvi9_a5YZ5VcmNOH2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:23:2e:68:43:8c:86:d9:89:88:bd:54:3f:1c:a7:44:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ac0d11a37da35dbe2f7f6b9619e5572634e1f62
Validity
Not Before: Oct 27 01:00:35 2025 GMT
Not After : Oct 28 01:00:35 2025 GMT
Subject: CN=6cdf7d36e294f3f11a0a03fa024807a2b4563733
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a6:a2:06:65:d0:59:ff:e1:1d:69:96:a7:13:
07:21:fc:ee:1b:53:38:e3:30:2e:0d:c4:32:69:90:
0a:1d:87:65:de:77:bd:60:23:0b:1c:25:76:e8:f2:
8b:a3:f2:54:28:3c:47:5a:53:d0:76:fa:c3:34:00:
76:b9:9a:36:5e:2a:f5:00:39:50:aa:9f:e2:5c:9d:
ad:c0:8f:0b:2a:9c:8d:ad:b5:4f:48:74:37:b1:46:
91:25:56:31:eb:b1:69:1c:25:b3:3b:54:1b:a9:35:
10:35:b4:44:2d:75:35:4a:ce:81:a0:5f:32:86:64:
6e:73:42:ee:66:2d:38:88:c8:2e:ff:b9:72:8f:02:
5b:cc:c6:ce:19:a1:75:c1:e4:f8:ac:a6:a2:52:0a:
1b:e5:98:73:59:80:b0:27:df:14:6b:39:83:a4:49:
34:a1:25:72:3e:16:07:5a:f7:58:83:8e:21:93:b3:
60:88:58:b7:dc:6e:db:c6:bf:85:c6:ba:9e:56:30:
89:a1:63:52:c7:82:91:23:1d:50:3b:fe:11:fb:38:
42:1d:ef:2c:e3:52:7d:9c:e6:35:97:96:29:1d:79:
69:1c:fd:a4:dd:18:46:e7:c7:51:80:95:41:70:a4:
b8:84:5b:b5:92:f5:ee:84:33:5d:37:fb:1e:e1:5a:
6a:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:DF:7D:36:E2:94:F3:F1:1A:0A:03:FA:02:48:07:A2:B4:56:37:33
X509v3 Authority Key Identifier:
keyid:9A:C0:D1:1A:37:DA:35:DB:E2:F7:F6:B9:61:9E:55:72:63:4E:1F:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/msDRGjfaNdvi9_a5YZ5VcmNOH2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/f87140-bc2c-4f3f-83fd-a3d455d34809/1/msDRGjfaNdvi9_a5YZ5VcmNOH2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/f87140-bc2c-4f3f-83fd-a3d455d34809/1/msDRGjfaNdvi9_a5YZ5VcmNOH2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:1f:78:bd:11:9a:c0:a8:ed:56:5f:38:66:32:24:34:ce:c1:
29:5a:92:ef:59:51:4b:de:a8:62:2b:b6:88:75:ad:f3:ef:39:
7a:4f:17:f0:31:c2:05:23:f6:e4:c4:93:95:a1:dd:81:60:e8:
76:dc:21:73:38:53:55:98:11:1e:8c:ab:ff:2e:40:c7:12:f6:
73:79:a1:64:cf:fb:fe:67:4e:cd:5a:c8:1e:80:af:70:ff:ec:
f4:63:30:21:cb:c2:02:42:a1:db:e7:55:89:11:4c:e6:02:8e:
10:c7:5f:34:c8:32:d8:c3:a8:2a:98:a1:2d:ca:75:3e:2e:7a:
c7:cf:ed:dd:eb:09:00:c6:1c:74:99:46:f5:c6:ba:52:89:fe:
0a:ff:e2:e4:5d:12:f1:03:27:96:d0:f9:0b:8a:1d:2b:ab:7c:
94:95:34:19:04:7a:73:cc:c4:cb:d3:c6:6a:93:c9:4a:58:ab:
81:ed:31:30:6e:65:84:51:98:38:8d:3a:85:13:9c:d6:c9:db:
0f:e0:e3:54:c0:d0:c5:70:57:a5:7c:15:f3:66:b1:ab:54:38:
ce:0a:33:84:89:94:6a:54:42:32:86:ed:82:90:49:65:b9:0b:
da:b5:0c:8c:f9:f0:b4:8b:9b:4b:5d:ef:7a:2f:44:05:6e:f3:
a5:a4:2a:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 06:34:00 2025 by rpki-client