Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/31a78f-c31b-4381-8631-6829c0fc738e/1/1-P-dpDC_8mjIQ6LlhgmMjXAhygY.mft
File: 1-P-dpDC_8mjIQ6LlhgmMjXAhygY.mft (raw, json)
Hash identifier: P7F3Z/wlzpLUamm/0dviouK0J76kLArzLgkOfOg6B7o=
Subject key identifier: 73:54:5D:28:58:1E:BA:76:09:FC:12:16:3C:27:76:61:58:3B:9B:F1
Authority key identifier: F8:FF:9D:A4:30:BF:F2:68:C8:43:A2:E5:86:09:8C:8D:70:21:CA:06
Certificate issuer: /CN=f8ff9da430bff268c843a2e586098c8d7021ca06
Certificate serial: 019A71B8E9D3757C0095F814D6DBBC678CBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-P-dpDC_8mjIQ6LlhgmMjXAhygY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/31a78f-c31b-4381-8631-6829c0fc738e/1/1-P-dpDC_8mjIQ6LlhgmMjXAhygY.mft
Manifest number: 0E12
Signing time: Tue 11 Nov 2025 07:02:15 +0000
Manifest this update: Tue 11 Nov 2025 07:02:15 +0000
Manifest next update: Wed 12 Nov 2025 07:02:15 +0000
Files and hashes: 1: 1-P-dpDC_8mjIQ6LlhgmMjXAhygY.crl (hash: N7P3G1MyJrHto6z24CACjwGm2uU5hHe8UrcCth18iS0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/31a78f-c31b-4381-8631-6829c0fc738e/1/1-P-dpDC_8mjIQ6LlhgmMjXAhygY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/31a78f-c31b-4381-8631-6829c0fc738e/1/1-P-dpDC_8mjIQ6LlhgmMjXAhygY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-P-dpDC_8mjIQ6LlhgmMjXAhygY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:e9:d3:75:7c:00:95:f8:14:d6:db:bc:67:8c:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8ff9da430bff268c843a2e586098c8d7021ca06
Validity
Not Before: Nov 11 07:02:15 2025 GMT
Not After : Nov 12 07:02:15 2025 GMT
Subject: CN=73545d28581eba7609fc12163c277661583b9bf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:fb:96:17:4b:50:0d:0d:b5:72:ac:fb:15:f4:
c4:55:25:51:e9:71:39:63:75:d0:64:a7:e5:57:e9:
da:d0:dc:cd:40:a1:50:d3:a0:5a:b1:fb:f6:d9:7a:
88:1f:6c:c6:7d:89:fe:df:9a:58:9f:76:1e:5c:11:
33:5c:0d:0f:61:02:a9:8c:09:a7:28:88:89:39:d1:
62:74:d2:41:6b:89:ca:d9:8f:56:02:7d:96:b4:aa:
50:38:99:0b:20:92:f3:96:0c:69:f9:4b:ed:00:6e:
d4:49:05:5f:48:62:1f:99:53:5f:68:50:3f:3a:41:
55:d6:98:13:47:6e:2f:42:21:35:2b:e7:b7:9b:cb:
17:08:82:81:85:7e:75:12:e1:aa:15:d5:34:5e:36:
69:07:78:67:c1:9d:1c:12:d8:38:e7:93:db:00:59:
3e:d2:81:d9:23:66:4d:2b:00:42:2c:84:1b:fe:c1:
34:db:7f:df:a7:8f:3b:17:ed:92:31:f1:bb:7c:e4:
f1:7d:c9:1f:59:50:d6:82:42:ba:99:66:a9:6f:65:
b6:98:85:60:f5:fb:bf:0d:23:10:f1:25:71:54:51:
ee:3e:42:be:4a:bd:ce:6b:c4:e7:9b:62:f3:3d:de:
8b:97:69:6e:c7:0e:fd:58:64:b9:24:b2:47:d4:7b:
9b:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:54:5D:28:58:1E:BA:76:09:FC:12:16:3C:27:76:61:58:3B:9B:F1
X509v3 Authority Key Identifier:
keyid:F8:FF:9D:A4:30:BF:F2:68:C8:43:A2:E5:86:09:8C:8D:70:21:CA:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-P-dpDC_8mjIQ6LlhgmMjXAhygY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/31a78f-c31b-4381-8631-6829c0fc738e/1/1-P-dpDC_8mjIQ6LlhgmMjXAhygY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/31a78f-c31b-4381-8631-6829c0fc738e/1/1-P-dpDC_8mjIQ6LlhgmMjXAhygY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:57:62:bc:5c:95:c1:b5:81:1e:db:00:d6:9e:57:c6:d4:d6:
35:e0:8e:6c:69:6c:aa:49:a5:e9:cb:28:12:b1:26:5a:dd:bc:
62:57:c1:72:ae:51:f8:10:47:9b:a9:c5:41:68:cf:d8:f9:5e:
ed:10:07:16:c6:42:08:b4:06:05:13:62:13:7b:a6:8c:d5:f4:
fe:77:19:94:65:57:41:34:01:9b:be:8c:ff:85:b5:f4:84:6d:
0a:63:56:11:aa:ec:6c:5d:7d:25:92:c6:9d:0c:e7:e0:ac:97:
7b:b5:75:71:28:43:b5:9b:3c:c2:0a:88:02:2c:1b:8d:38:57:
51:cf:fb:9e:d9:63:96:b4:23:83:5c:c0:93:c0:b8:97:cd:bd:
75:20:f5:3c:b1:f9:75:12:53:06:55:44:d4:83:24:64:73:56:
b2:bc:df:1c:69:ab:ab:26:77:46:1f:bf:a4:10:b1:39:10:42:
16:22:73:4a:87:d1:de:3d:a3:46:da:a0:f0:47:d1:f6:42:a4:
15:da:3a:4e:9a:44:e9:6f:2a:1c:de:38:00:3b:e4:ea:70:73:
40:18:c5:c3:5d:e9:f3:f7:8c:2e:4f:2b:22:fb:68:48:29:63:
80:f4:77:1b:4f:3f:e3:c5:f4:53:fb:ee:44:58:2a:d5:11:e1:
38:a2:93:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:44:43 2025 by rpki-client