Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8adf19-0869-46fb-92b3-f0d7b2774d3e/1/DPSuqBZureCsfGkRvcnmnHB1TBQ.mft
File: DPSuqBZureCsfGkRvcnmnHB1TBQ.mft (raw, json)
Hash identifier: 8naYyViSqrpugVodDZ/btz85rqzUWikoEOCNIOdAFYQ=
Subject key identifier: 21:EA:01:79:5A:A1:DD:57:2A:8F:79:6C:C6:59:20:D9:9D:1D:42:31
Authority key identifier: 0C:F4:AE:A8:16:6E:AD:E0:AC:7C:69:11:BD:C9:E6:9C:70:75:4C:14
Certificate issuer: /CN=0cf4aea8166eade0ac7c6911bdc9e69c70754c14
Certificate serial: 019A7112ED6A7EE511F270090C396011C419
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DPSuqBZureCsfGkRvcnmnHB1TBQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8adf19-0869-46fb-92b3-f0d7b2774d3e/1/DPSuqBZureCsfGkRvcnmnHB1TBQ.mft
Manifest number: 01D3
Signing time: Tue 11 Nov 2025 04:00:57 +0000
Manifest this update: Tue 11 Nov 2025 04:00:57 +0000
Manifest next update: Wed 12 Nov 2025 04:00:57 +0000
Files and hashes: 1: DPSuqBZureCsfGkRvcnmnHB1TBQ.crl (hash: 9u8RRRYWfD5eWAZukeAfZkTxP07HDR5IhRltTboHu+E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/8adf19-0869-46fb-92b3-f0d7b2774d3e/1/DPSuqBZureCsfGkRvcnmnHB1TBQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/8adf19-0869-46fb-92b3-f0d7b2774d3e/1/DPSuqBZureCsfGkRvcnmnHB1TBQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/DPSuqBZureCsfGkRvcnmnHB1TBQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:ed:6a:7e:e5:11:f2:70:09:0c:39:60:11:c4:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cf4aea8166eade0ac7c6911bdc9e69c70754c14
Validity
Not Before: Nov 11 04:00:57 2025 GMT
Not After : Nov 12 04:00:57 2025 GMT
Subject: CN=21ea01795aa1dd572a8f796cc65920d99d1d4231
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:0f:ef:9f:11:e5:12:5b:f5:c8:3c:7a:02:65:
e3:8b:25:69:a5:c8:75:ca:f3:c7:14:71:3d:21:c1:
0d:71:59:d0:fe:18:70:39:da:80:c8:c3:ad:3e:d7:
e4:c1:04:fd:98:f2:88:ff:97:d1:1a:58:2d:5d:9d:
f5:9c:f4:39:38:e3:e5:9f:10:b9:24:fe:13:bd:92:
9a:b2:65:47:ba:b7:5b:6b:af:5f:5f:e2:64:56:0a:
d2:12:87:20:b9:25:fe:30:dc:5f:98:20:7e:46:98:
dc:cd:e8:b4:28:98:51:5e:ce:a1:94:57:ca:06:2e:
59:40:d8:e0:51:f4:1a:fa:fc:42:1a:c2:92:06:b5:
ed:61:32:bf:b9:44:4a:77:9a:da:fb:65:e7:43:24:
28:a8:1c:99:ac:f8:04:f7:0b:4f:11:92:ad:31:36:
50:ce:bd:bf:a0:c5:ea:0c:78:9a:35:5f:74:6b:2c:
d5:2e:d8:50:7d:e9:04:8c:3c:41:6e:66:f7:c6:6c:
43:4c:05:98:70:76:d6:ed:bb:24:bb:3e:da:4b:2b:
6f:45:9b:f3:80:48:ef:64:17:fc:33:22:35:cc:5b:
a9:50:df:35:1f:3d:f0:6a:6c:1d:2b:e8:53:cd:b1:
e8:94:c6:e1:43:0a:14:4c:ac:2f:2f:7a:51:c2:60:
8a:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:EA:01:79:5A:A1:DD:57:2A:8F:79:6C:C6:59:20:D9:9D:1D:42:31
X509v3 Authority Key Identifier:
keyid:0C:F4:AE:A8:16:6E:AD:E0:AC:7C:69:11:BD:C9:E6:9C:70:75:4C:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DPSuqBZureCsfGkRvcnmnHB1TBQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8adf19-0869-46fb-92b3-f0d7b2774d3e/1/DPSuqBZureCsfGkRvcnmnHB1TBQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8adf19-0869-46fb-92b3-f0d7b2774d3e/1/DPSuqBZureCsfGkRvcnmnHB1TBQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:bf:21:fd:84:6f:34:e0:d5:19:5b:98:18:dd:e2:56:e2:39:
d3:2b:a9:45:6b:23:12:a0:8b:ba:d1:2f:f8:2e:3f:41:d4:95:
60:85:e1:dc:e9:c5:04:ae:36:87:91:0e:2f:5e:df:51:87:78:
46:87:53:3b:d7:10:4d:83:e1:d0:f1:89:5c:dd:0d:e6:82:f3:
02:7c:de:fe:6a:17:4b:79:a3:26:ab:76:f3:1c:47:bc:64:25:
48:76:98:e7:d9:6d:60:bd:3d:d5:5b:0e:50:8b:76:b9:eb:4e:
5b:7f:5f:82:5c:dc:34:f0:24:86:a4:ad:33:e6:0b:e1:02:43:
be:06:5e:8d:82:8e:9d:e5:70:0b:b6:44:87:cd:59:2b:3b:f2:
a0:2b:47:45:54:12:f2:51:96:9f:f3:31:5e:ec:41:0f:3c:33:
4c:4b:df:da:3b:95:be:d6:e3:09:73:bd:bb:9e:f5:9b:e3:4e:
5b:00:05:45:0d:eb:17:73:01:c8:f0:f3:c5:0d:98:8a:72:dc:
89:49:08:80:fb:5c:1a:1e:7a:92:fa:0b:b3:0f:4f:fd:22:6f:
75:d4:1a:3f:8b:48:53:11:e4:6c:27:a4:45:b7:58:27:e7:73:
b4:71:fa:35:8a:69:e7:9d:7b:86:83:24:e9:58:e7:6e:52:b4:
fd:bf:54:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:04:18 2025 by rpki-client