Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/72e91a-014f-483a-a544-4e33427f734e/1/DrG9MNMZGofH0KRi5nkyQxYz3R4.mft
File: DrG9MNMZGofH0KRi5nkyQxYz3R4.mft (raw, json)
Hash identifier: 9q4VYfPAW0hx5tdhnREgNfpxxHBolkudLJIzxkou8Qc=
Subject key identifier: 89:C1:C6:55:B0:D0:11:1D:D5:A0:DF:8D:9C:21:4A:04:73:89:AD:9C
Authority key identifier: 0E:B1:BD:30:D3:19:1A:87:C7:D0:A4:62:E6:79:32:43:16:33:DD:1E
Certificate issuer: /CN=0eb1bd30d3191a87c7d0a462e67932431633dd1e
Certificate serial: 019A24AEF76302B7AEE3C57AE99823FBC816
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DrG9MNMZGofH0KRi5nkyQxYz3R4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/72e91a-014f-483a-a544-4e33427f734e/1/DrG9MNMZGofH0KRi5nkyQxYz3R4.mft
Manifest number: 0410
Signing time: Mon 27 Oct 2025 08:00:37 +0000
Manifest this update: Mon 27 Oct 2025 08:00:37 +0000
Manifest next update: Tue 28 Oct 2025 08:00:37 +0000
Files and hashes: 1: DrG9MNMZGofH0KRi5nkyQxYz3R4.crl (hash: WlIKS1QroMKR4C6DAP7Pms2X7TyfFaxVBGxpyoxhjfo=)
2: ogxxjz_eGLDn7LYpHHuvCo9x5ng.roa (hash: B2U5jkd3tbLDGtZHWekj2Yva7wWVjyZDFNXj9MRShj4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/72e91a-014f-483a-a544-4e33427f734e/1/DrG9MNMZGofH0KRi5nkyQxYz3R4.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/72e91a-014f-483a-a544-4e33427f734e/1/DrG9MNMZGofH0KRi5nkyQxYz3R4.mft
rsync://rpki.ripe.net/repository/DEFAULT/DrG9MNMZGofH0KRi5nkyQxYz3R4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 08:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:ae:f7:63:02:b7:ae:e3:c5:7a:e9:98:23:fb:c8:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0eb1bd30d3191a87c7d0a462e67932431633dd1e
Validity
Not Before: Oct 27 08:00:37 2025 GMT
Not After : Oct 28 08:00:37 2025 GMT
Subject: CN=89c1c655b0d0111dd5a0df8d9c214a047389ad9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:10:18:36:1d:93:07:84:d0:cd:81:51:3a:87:
70:77:72:a8:14:9f:ec:c0:41:cf:67:e6:69:ed:58:
5a:d6:0a:a5:62:2e:cb:95:38:5b:1e:a1:3c:d3:a5:
e8:62:27:a9:bf:e8:9e:c4:1e:66:09:93:f5:59:39:
17:a9:ca:9e:2d:81:0f:66:a0:a6:08:cc:c0:7d:9d:
fd:83:b9:68:55:d8:2e:3f:dc:17:8f:3c:a6:e4:d5:
bc:23:dc:52:d0:df:8c:ba:e9:d9:4c:53:f5:39:ac:
4f:cf:a5:fd:d4:93:f1:10:27:97:16:b8:74:2e:d1:
59:4e:e2:91:45:aa:32:0f:d4:09:f6:51:52:67:6b:
f1:f1:b9:49:03:e7:1e:97:31:c7:3a:a5:3a:4a:b1:
79:5e:54:5c:d5:d5:d7:0a:88:da:93:25:27:30:0a:
58:6e:59:fa:b4:80:d1:60:69:ea:76:eb:0a:2a:70:
c8:a6:7a:08:ae:8d:d0:a1:d7:58:bc:21:7a:23:5f:
19:01:b7:91:65:5e:a8:fc:da:3d:e5:5b:ff:7b:6e:
ed:f2:0b:c7:00:60:73:9f:67:4a:14:e4:4b:48:82:
5f:a3:fb:8f:46:aa:01:1c:13:58:cf:19:bf:f1:98:
74:87:52:e6:f8:95:da:66:1e:0e:aa:1e:0c:47:5b:
1d:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:C1:C6:55:B0:D0:11:1D:D5:A0:DF:8D:9C:21:4A:04:73:89:AD:9C
X509v3 Authority Key Identifier:
keyid:0E:B1:BD:30:D3:19:1A:87:C7:D0:A4:62:E6:79:32:43:16:33:DD:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DrG9MNMZGofH0KRi5nkyQxYz3R4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/72e91a-014f-483a-a544-4e33427f734e/1/DrG9MNMZGofH0KRi5nkyQxYz3R4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/72e91a-014f-483a-a544-4e33427f734e/1/DrG9MNMZGofH0KRi5nkyQxYz3R4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:0f:46:fc:6e:76:0c:ea:76:0f:5b:3f:99:57:78:be:fd:f4:
23:6f:ba:9f:f9:2c:f0:c0:da:98:f6:97:90:00:3f:b3:54:4b:
cb:53:0f:72:dc:1c:c1:06:6e:4c:6b:15:ad:ae:8d:34:69:3a:
a9:68:0e:10:bf:94:5c:62:92:4a:97:d9:5f:b3:07:cc:6e:5b:
28:18:37:31:2a:cf:54:ae:71:cf:39:35:84:9c:0e:c8:5f:fd:
0e:0e:d9:34:03:77:a3:b9:41:d3:b5:26:b9:41:5a:b3:e1:b8:
12:97:56:fa:ff:68:f5:55:06:6d:fd:7e:9a:f1:ab:31:5a:17:
4b:5d:58:88:57:7c:7c:67:ca:6d:c3:78:67:ea:8f:18:4f:c6:
31:c2:c3:e0:2f:95:1a:c0:80:e6:ac:e2:4e:15:24:26:0c:a3:
bc:45:d1:4a:f1:b3:d7:c4:86:04:87:6a:eb:b2:e1:94:e1:81:
f8:42:d0:11:cc:35:37:02:0b:55:c6:29:91:b8:1e:ab:65:cd:
39:f2:e1:67:7e:74:9f:d8:4c:0e:5f:8c:a5:bc:29:58:8c:26:
9d:e0:c4:61:49:b1:8b:f5:e7:8a:6d:39:4c:4f:e8:cd:7f:80:
a9:78:ad:a0:58:22:b3:2f:e3:9f:67:7c:57:49:27:78:47:ef:
c2:ab:b9:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 18:17:45 2025 by rpki-client