Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/72778b-c07f-49bb-9e1d-1f0b03544810/1/dQrGfFd2g13wkZmDEJYOg8I9ncY.mft
File: dQrGfFd2g13wkZmDEJYOg8I9ncY.mft (raw, json)
Hash identifier: IkmbLv2r0kYUZxyk1duvzJh4uBYJr4bHuv6xisFPLok=
Subject key identifier: 0E:E7:0E:A6:FF:17:4C:59:3C:D7:21:E6:73:BF:9F:FB:19:9A:EE:00
Authority key identifier: 75:0A:C6:7C:57:76:83:5D:F0:91:99:83:10:96:0E:83:C2:3D:9D:C6
Certificate issuer: /CN=750ac67c5776835df091998310960e83c23d9dc6
Certificate serial: 019A722676DA7F8943BB49FE9B577AC65329
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQrGfFd2g13wkZmDEJYOg8I9ncY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/72778b-c07f-49bb-9e1d-1f0b03544810/1/dQrGfFd2g13wkZmDEJYOg8I9ncY.mft
Manifest number: 0B0A
Signing time: Tue 11 Nov 2025 09:01:54 +0000
Manifest this update: Tue 11 Nov 2025 09:01:54 +0000
Manifest next update: Wed 12 Nov 2025 09:01:54 +0000
Files and hashes: 1: dQrGfFd2g13wkZmDEJYOg8I9ncY.crl (hash: lsjNyZ4LmSkTVNlvJ1ykrXoyC/8Fq4sY6X0ao4HvlTc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/72778b-c07f-49bb-9e1d-1f0b03544810/1/dQrGfFd2g13wkZmDEJYOg8I9ncY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/72778b-c07f-49bb-9e1d-1f0b03544810/1/dQrGfFd2g13wkZmDEJYOg8I9ncY.mft
rsync://rpki.ripe.net/repository/DEFAULT/dQrGfFd2g13wkZmDEJYOg8I9ncY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:76:da:7f:89:43:bb:49:fe:9b:57:7a:c6:53:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=750ac67c5776835df091998310960e83c23d9dc6
Validity
Not Before: Nov 11 09:01:54 2025 GMT
Not After : Nov 12 09:01:54 2025 GMT
Subject: CN=0ee70ea6ff174c593cd721e673bf9ffb199aee00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:49:83:f4:76:e9:4a:4f:1c:32:c8:61:6f:9f:
d0:4a:b0:4b:21:eb:f8:16:9e:1a:ae:92:00:2f:75:
43:09:55:11:7e:b8:e2:b2:70:c5:52:37:61:00:75:
df:f6:d0:2d:8b:db:45:66:b4:fc:fc:ac:28:14:0d:
3b:85:c2:df:eb:52:1d:0e:e0:94:1b:63:48:8d:b9:
0c:6d:73:18:f5:ff:24:bd:0c:bd:8e:6f:5b:ea:ca:
4b:6f:bb:9a:89:99:af:3e:71:ef:42:c4:1e:2b:db:
0a:19:f6:ce:52:22:32:36:5f:33:fc:aa:a7:a1:ce:
66:fa:95:ac:31:03:55:5b:b2:bf:98:db:c4:72:91:
4f:62:97:10:5a:50:e8:ce:fd:5b:64:0b:eb:98:cd:
24:31:80:e4:5d:6d:aa:b9:03:3a:f6:2d:16:d1:d5:
4e:7e:61:0a:fe:6e:f2:14:28:0f:a5:89:58:6a:85:
44:8c:8a:cf:55:5d:cd:51:d9:d5:0a:c5:4f:d7:a6:
d3:2a:31:19:6e:52:ce:f3:1f:7a:cd:ec:e1:c8:e5:
29:ee:a2:45:d6:f2:5a:ad:7a:52:13:83:a6:5c:5e:
0f:a7:1d:e0:92:4a:f4:ff:89:3a:40:84:e7:70:ac:
ef:44:fe:d1:51:4d:a3:25:c3:ad:91:2e:0d:1c:86:
f1:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:E7:0E:A6:FF:17:4C:59:3C:D7:21:E6:73:BF:9F:FB:19:9A:EE:00
X509v3 Authority Key Identifier:
keyid:75:0A:C6:7C:57:76:83:5D:F0:91:99:83:10:96:0E:83:C2:3D:9D:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQrGfFd2g13wkZmDEJYOg8I9ncY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/72778b-c07f-49bb-9e1d-1f0b03544810/1/dQrGfFd2g13wkZmDEJYOg8I9ncY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/72778b-c07f-49bb-9e1d-1f0b03544810/1/dQrGfFd2g13wkZmDEJYOg8I9ncY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:45:20:bb:e9:43:84:19:78:c6:50:7d:a3:86:9b:5f:62:a4:
ad:aa:e0:4d:52:f8:a8:5d:10:4f:39:5d:06:fe:9d:04:4e:f3:
dc:40:90:5b:af:8b:a8:50:2d:58:98:39:19:91:7d:23:77:2a:
80:ab:97:2c:1a:94:09:21:02:aa:d6:be:89:62:1f:f6:e3:40:
3f:9b:3e:fe:cd:63:91:71:c2:7a:72:6e:4a:bb:d1:6d:98:49:
38:14:3d:2d:b8:ce:75:3d:f8:3b:d9:ee:fd:9a:52:59:bf:81:
6a:3d:ae:82:8b:74:92:ef:eb:4f:9e:fa:5d:85:dd:75:2a:61:
ff:00:7a:32:cd:ed:e3:be:ba:44:e4:28:41:10:2e:c6:00:e1:
4c:31:85:1a:e7:93:e6:8f:4c:44:af:ac:8e:a9:83:9e:d1:40:
52:25:4c:a9:cf:24:13:ed:3d:06:3e:30:3e:7e:98:b4:c9:72:
ca:e2:09:a7:d4:aa:ed:ef:30:d7:05:83:07:0c:97:f4:01:2c:
fb:75:e3:ce:01:08:6d:98:79:d4:41:29:4c:10:fc:9f:2e:c8:
70:cf:9b:29:51:95:e0:cd:15:cc:46:85:9f:20:4c:09:c8:14:
f0:86:15:4a:e4:d0:07:fc:b7:06:6d:69:46:1e:ac:7c:1e:ae:
91:8e:81:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:37:31 2025 by rpki-client