Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/e6f0c4-799d-4620-ab7b-b4225de2723a/1/D4jGhrHhIvzcFlwCN6D149mQvwE.mft
File: D4jGhrHhIvzcFlwCN6D149mQvwE.mft (raw, json)
Hash identifier: c+6+j2sIESjEWpKOieHtV/3NW/v6FY2q2YkCQGEnp2o=
Subject key identifier: D3:82:56:58:E3:1D:68:9D:18:0A:C0:7C:69:B1:F9:4A:78:40:95:17
Authority key identifier: 0F:88:C6:86:B1:E1:22:FC:DC:16:5C:02:37:A0:F5:E3:D9:90:BF:01
Certificate issuer: /CN=0f88c686b1e122fcdc165c0237a0f5e3d990bf01
Certificate serial: 019A71B8232D10D3B00057AD7C27B71FCB36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D4jGhrHhIvzcFlwCN6D149mQvwE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/e6f0c4-799d-4620-ab7b-b4225de2723a/1/D4jGhrHhIvzcFlwCN6D149mQvwE.mft
Manifest number: 0CCC
Signing time: Tue 11 Nov 2025 07:01:24 +0000
Manifest this update: Tue 11 Nov 2025 07:01:24 +0000
Manifest next update: Wed 12 Nov 2025 07:01:24 +0000
Files and hashes: 1: D4jGhrHhIvzcFlwCN6D149mQvwE.crl (hash: nK31SsZiRtMYAYJLY91hb5DuSgJ7+Mw+Ons7vWJJr1M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/e6f0c4-799d-4620-ab7b-b4225de2723a/1/D4jGhrHhIvzcFlwCN6D149mQvwE.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/e6f0c4-799d-4620-ab7b-b4225de2723a/1/D4jGhrHhIvzcFlwCN6D149mQvwE.mft
rsync://rpki.ripe.net/repository/DEFAULT/D4jGhrHhIvzcFlwCN6D149mQvwE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:23:2d:10:d3:b0:00:57:ad:7c:27:b7:1f:cb:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f88c686b1e122fcdc165c0237a0f5e3d990bf01
Validity
Not Before: Nov 11 07:01:24 2025 GMT
Not After : Nov 12 07:01:24 2025 GMT
Subject: CN=d3825658e31d689d180ac07c69b1f94a78409517
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:37:53:f7:ef:e8:50:b8:a2:44:66:63:7d:4c:
a6:7d:a1:59:aa:de:c4:2d:e9:fd:1f:85:e9:fe:27:
c4:44:3f:17:f4:86:14:75:20:6a:97:d1:38:2d:c0:
41:c4:5f:c4:81:74:28:9b:14:a3:a4:f7:0b:46:18:
85:56:5b:ac:7b:2f:39:4c:2d:63:ed:66:b2:53:46:
d2:c8:d8:82:5e:72:9e:f0:ec:75:d4:85:18:62:5a:
36:5e:62:69:49:76:72:e4:ff:b7:61:01:cd:69:20:
bc:28:e1:1d:88:89:c6:2f:6e:8f:dd:c5:ea:f9:3e:
69:de:ae:e9:99:c6:58:fb:74:ce:59:e3:ca:b1:44:
54:ac:61:dd:e3:88:d0:13:2c:3e:5a:12:18:8a:0b:
2b:8c:46:13:26:87:d1:1c:20:a1:01:76:de:32:ac:
1a:bc:b7:3d:12:32:3e:4c:9a:71:64:71:55:91:ea:
f0:76:0e:34:52:9b:72:4f:c8:a3:1b:7e:6c:32:ed:
4b:0f:cd:18:c2:db:62:56:40:b3:b3:90:27:00:c2:
84:4d:00:d9:76:8e:35:34:aa:f0:10:1d:b1:2b:e3:
47:57:f0:38:cd:47:9f:b6:d5:64:96:84:de:47:ec:
85:72:01:d7:9a:41:2c:3f:9e:0d:93:99:d6:c7:25:
34:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:82:56:58:E3:1D:68:9D:18:0A:C0:7C:69:B1:F9:4A:78:40:95:17
X509v3 Authority Key Identifier:
keyid:0F:88:C6:86:B1:E1:22:FC:DC:16:5C:02:37:A0:F5:E3:D9:90:BF:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D4jGhrHhIvzcFlwCN6D149mQvwE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/e6f0c4-799d-4620-ab7b-b4225de2723a/1/D4jGhrHhIvzcFlwCN6D149mQvwE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/e6f0c4-799d-4620-ab7b-b4225de2723a/1/D4jGhrHhIvzcFlwCN6D149mQvwE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:a6:dd:f6:69:b5:11:a0:8d:8d:b9:00:f4:a4:ee:5c:cc:7e:
11:ef:b9:d6:d7:0f:4c:b4:36:54:e9:b2:2e:ef:cd:91:f0:42:
75:16:04:d2:10:f5:49:c7:df:2d:01:91:f9:7e:43:71:62:05:
81:43:9b:3f:38:3b:1e:5f:d9:dd:1f:b6:4b:c9:25:00:c3:49:
a2:c0:bb:dd:ba:5f:57:bc:95:99:ea:e0:04:f5:97:01:72:f8:
33:53:2d:21:df:93:c8:e2:7f:25:d7:59:12:85:f2:c8:15:e4:
76:ff:f5:34:ed:c2:60:70:de:96:04:44:81:3d:3d:6d:b0:09:
d3:4c:83:e1:1a:eb:2b:7d:56:4d:ff:ba:55:80:7d:f0:0f:bf:
ae:af:48:d5:ec:ec:55:13:b1:10:ee:e5:c4:c1:29:71:09:e8:
7b:5e:52:ee:84:da:5b:b0:9c:38:94:10:0f:20:09:0d:4a:c8:
e8:ab:a6:32:12:29:e2:9d:c7:b5:99:6b:0b:60:c3:18:5e:b3:
02:ed:26:a9:c2:8a:e1:24:d3:a5:b5:2c:95:ed:f7:58:ff:21:
1f:ed:4c:13:fa:15:3b:9e:d7:f7:00:be:6c:e7:76:53:f6:3d:
fa:b2:1d:19:d9:30:1e:2c:35:88:ee:f3:a4:a3:0a:18:1c:51:
e0:91:cf:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:06:40 2025 by rpki-client