Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/2e805c-bced-4f54-b320-f9de59c37291/1/dpcDbZO0rGcPD_xakM6ral-LwpU.mft
File: dpcDbZO0rGcPD_xakM6ral-LwpU.mft (raw, json)
Hash identifier: 1/QhWVhKa9xbfwTzCP9vCbb1cN/IvSr03jJKTM3MCTs=
Subject key identifier: C7:4A:C5:E5:B5:EA:04:CD:3E:E3:C3:ED:73:58:BE:A5:41:00:8D:DD
Authority key identifier: 76:97:03:6D:93:B4:AC:67:0F:0F:FC:5A:90:CE:AB:6A:5F:8B:C2:95
Certificate issuer: /CN=7697036d93b4ac670f0ffc5a90ceab6a5f8bc295
Certificate serial: 019A71B9259A4C477ADE90BFDB7C71CDDA46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dpcDbZO0rGcPD_xakM6ral-LwpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/2e805c-bced-4f54-b320-f9de59c37291/1/dpcDbZO0rGcPD_xakM6ral-LwpU.mft
Manifest number: 0F3D
Signing time: Tue 11 Nov 2025 07:02:30 +0000
Manifest this update: Tue 11 Nov 2025 07:02:30 +0000
Manifest next update: Wed 12 Nov 2025 07:02:30 +0000
Files and hashes: 1: dpcDbZO0rGcPD_xakM6ral-LwpU.crl (hash: ts6WDyx3Hvjs2FpfoenwuSrhXpEROcMZVCNjpPe8FwE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/2e805c-bced-4f54-b320-f9de59c37291/1/dpcDbZO0rGcPD_xakM6ral-LwpU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/2e805c-bced-4f54-b320-f9de59c37291/1/dpcDbZO0rGcPD_xakM6ral-LwpU.mft
rsync://rpki.ripe.net/repository/DEFAULT/dpcDbZO0rGcPD_xakM6ral-LwpU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:25:9a:4c:47:7a:de:90:bf:db:7c:71:cd:da:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7697036d93b4ac670f0ffc5a90ceab6a5f8bc295
Validity
Not Before: Nov 11 07:02:30 2025 GMT
Not After : Nov 12 07:02:30 2025 GMT
Subject: CN=c74ac5e5b5ea04cd3ee3c3ed7358bea541008ddd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:1d:24:18:8f:a2:41:47:13:6c:44:61:82:65:
90:d6:39:a9:46:07:8a:5b:86:d6:ab:c9:ce:11:fb:
10:06:ee:2a:99:d5:fb:45:cc:71:8d:84:25:7d:7a:
eb:56:be:40:9f:1e:ac:c6:35:0c:76:69:14:86:35:
29:90:6b:2b:de:78:bf:65:15:9c:2d:82:c5:82:0a:
52:54:4d:3e:33:44:be:b6:ea:c1:0e:9d:e4:4c:c2:
63:0b:22:de:73:eb:55:cc:be:28:ba:a2:04:cf:ab:
f0:8f:a2:f7:1a:88:5d:47:2d:8d:03:7d:65:59:e3:
51:54:9b:3a:4f:d3:0a:6e:65:6e:33:df:8b:a1:0b:
58:33:9c:66:a2:d8:5b:d3:b4:09:0b:df:d1:b9:7d:
a0:ab:e8:4e:9e:90:00:e6:9d:03:44:08:53:4c:a8:
27:e7:68:f9:5e:1d:41:0a:bf:11:0b:cc:c0:e2:59:
66:e1:26:ed:32:d9:82:78:1b:53:f9:e5:3c:e1:ab:
95:0c:47:1d:6a:55:e9:1d:17:80:f1:52:c6:2f:d4:
76:58:92:03:a1:4f:7f:5d:98:8d:6a:1a:05:d7:ef:
6e:65:9f:d1:02:72:e0:26:0e:58:c2:89:ac:05:14:
d7:02:a9:19:c5:d7:f2:d5:e4:29:20:f3:ed:67:73:
b3:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:4A:C5:E5:B5:EA:04:CD:3E:E3:C3:ED:73:58:BE:A5:41:00:8D:DD
X509v3 Authority Key Identifier:
keyid:76:97:03:6D:93:B4:AC:67:0F:0F:FC:5A:90:CE:AB:6A:5F:8B:C2:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dpcDbZO0rGcPD_xakM6ral-LwpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2e805c-bced-4f54-b320-f9de59c37291/1/dpcDbZO0rGcPD_xakM6ral-LwpU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2e805c-bced-4f54-b320-f9de59c37291/1/dpcDbZO0rGcPD_xakM6ral-LwpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:31:e2:d2:92:44:71:ee:54:83:0b:74:45:d0:bf:f4:fe:29:
58:12:99:a2:2b:e4:d3:11:fb:4f:94:10:b9:cb:0f:5a:7d:d3:
7b:5d:3e:17:fa:2b:c7:a7:1f:d6:97:22:8b:6e:55:b3:ef:6c:
84:d1:a8:79:82:d5:c3:45:4a:a5:48:0f:d6:ee:27:51:39:e4:
12:6b:31:1d:bc:1b:b1:8c:6a:56:ee:50:01:ae:d2:a6:43:31:
ab:56:aa:a5:05:3e:9d:e6:7a:d2:12:c8:cb:e1:c6:c0:5f:59:
fa:b6:41:db:d3:5e:39:7d:18:18:fb:23:4d:89:bc:73:85:33:
fc:e6:8d:91:27:1c:69:16:cd:53:16:b9:55:b4:01:c8:fa:c5:
79:5c:0c:06:cd:65:6d:cb:45:e1:c2:5c:fa:5e:4c:f3:ae:37:
cd:73:ac:a3:ce:08:9f:4d:4b:60:a8:a6:ad:8b:de:dd:2f:70:
63:e9:44:ce:91:96:81:cb:e2:e2:33:0c:b8:4a:e9:70:62:88:
e0:bc:4f:93:c9:08:53:ff:9a:aa:7b:f1:38:30:27:50:fa:15:
84:cf:51:06:73:36:d6:7a:41:c2:35:8d:ab:ad:f5:7e:b8:88:
5b:38:fc:84:e5:4f:39:cb:31:37:22:41:5c:4d:3c:09:be:a6:
b6:93:38:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:42:48 2025 by rpki-client