Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/cd33f9-4f04-4983-a43a-3a8231edb46c/1/DSC_pCDAzV9fGNuOe9o1X-joW30.mft
File: DSC_pCDAzV9fGNuOe9o1X-joW30.mft (raw, json)
Hash identifier: GIHB9mvTSueqEoS9sUeG5TpikHiYMCgKDgg02ZGmrUE=
Subject key identifier: FD:E0:76:C6:09:C9:C6:4E:76:2C:ED:0A:0D:A7:A2:06:B9:D0:74:B5
Authority key identifier: 0D:20:BF:A4:20:C0:CD:5F:5F:18:DB:8E:7B:DA:35:5F:E8:E8:5B:7D
Certificate issuer: /CN=0d20bfa420c0cd5f5f18db8e7bda355fe8e85b7d
Certificate serial: 019848C066AFBE8CD92C3AB568563EA0FD75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DSC_pCDAzV9fGNuOe9o1X-joW30.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/cd33f9-4f04-4983-a43a-3a8231edb46c/1/DSC_pCDAzV9fGNuOe9o1X-joW30.mft
Manifest number: FA
Signing time: Sat 26 Jul 2025 22:00:25 +0000
Manifest this update: Sat 26 Jul 2025 22:00:25 +0000
Manifest next update: Sun 27 Jul 2025 22:00:25 +0000
Files and hashes: 1: DSC_pCDAzV9fGNuOe9o1X-joW30.crl (hash: IwRxHskeVdox/36cbBd/jvhKEf3FUFFJl6WvZq+5AXA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/cd33f9-4f04-4983-a43a-3a8231edb46c/1/DSC_pCDAzV9fGNuOe9o1X-joW30.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/cd33f9-4f04-4983-a43a-3a8231edb46c/1/DSC_pCDAzV9fGNuOe9o1X-joW30.mft
rsync://rpki.ripe.net/repository/DEFAULT/DSC_pCDAzV9fGNuOe9o1X-joW30.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 22:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:c0:66:af:be:8c:d9:2c:3a:b5:68:56:3e:a0:fd:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d20bfa420c0cd5f5f18db8e7bda355fe8e85b7d
Validity
Not Before: Jul 26 22:00:25 2025 GMT
Not After : Jul 27 22:00:25 2025 GMT
Subject: CN=fde076c609c9c64e762ced0a0da7a206b9d074b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:03:9e:bd:f6:d9:50:66:ef:2b:ac:82:96:47:
1b:40:2c:49:b4:78:5b:26:6e:4d:1c:dc:99:54:95:
a0:6f:13:53:86:50:59:69:aa:22:0b:51:9b:08:a1:
68:67:b2:a9:fa:a4:07:4c:b3:fe:d3:69:6c:21:de:
2a:e7:f9:ae:ec:db:a6:f2:3d:a1:5d:d1:62:c1:9e:
ad:37:63:33:94:5d:51:cb:c7:70:6c:0f:16:fb:fe:
39:ff:a7:59:41:ae:30:d1:ba:81:c6:6e:14:87:37:
34:82:f3:8b:22:bd:b9:5d:b7:05:bf:06:d9:ac:8d:
8c:03:7f:ec:ee:6c:e2:4e:cb:af:b7:16:40:63:61:
7f:c0:7f:01:e4:ab:ef:db:bb:aa:ca:a6:05:95:aa:
89:a0:a1:d4:dc:f2:2f:21:76:b4:83:ce:56:eb:7d:
d4:93:2e:36:26:0f:48:c9:c2:b5:56:13:23:be:82:
bb:70:a0:88:46:ad:34:af:51:73:24:88:c2:7c:4c:
30:9a:03:e2:09:bf:75:d9:92:58:fb:8b:c8:81:87:
79:a9:98:cb:c8:af:02:0c:8b:6d:66:d5:ad:f3:6c:
1e:11:3c:aa:98:39:c8:0d:56:b8:63:d4:f5:59:b2:
4a:1c:5b:49:db:d3:e2:de:9a:9e:da:96:c0:32:20:
0b:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:E0:76:C6:09:C9:C6:4E:76:2C:ED:0A:0D:A7:A2:06:B9:D0:74:B5
X509v3 Authority Key Identifier:
keyid:0D:20:BF:A4:20:C0:CD:5F:5F:18:DB:8E:7B:DA:35:5F:E8:E8:5B:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DSC_pCDAzV9fGNuOe9o1X-joW30.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/cd33f9-4f04-4983-a43a-3a8231edb46c/1/DSC_pCDAzV9fGNuOe9o1X-joW30.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/cd33f9-4f04-4983-a43a-3a8231edb46c/1/DSC_pCDAzV9fGNuOe9o1X-joW30.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d6:22:1a:1a:fe:9f:55:2c:f2:be:e2:5d:23:0a:b1:72:e8:bb:
8c:73:6a:d0:9c:38:b8:39:cd:bd:61:8e:24:2e:54:66:29:8c:
a1:5b:e5:6f:d6:b0:0e:4f:9c:a3:28:fe:75:d2:23:a5:6b:33:
54:d6:26:b8:5c:e4:53:86:72:6d:d3:c9:c0:63:19:8d:ac:b1:
17:bb:c7:70:8d:69:52:6d:a0:ce:cf:b3:46:12:a0:09:28:66:
a9:46:09:ce:80:fb:f8:4d:15:32:f8:e3:b5:ac:68:22:49:c6:
4e:7f:e1:77:0d:ed:cf:8f:a1:a6:15:a3:50:bd:44:c3:39:26:
24:70:ab:07:31:11:f3:22:4e:bd:35:2e:c1:81:23:6c:e9:00:
02:32:de:e7:de:3e:97:4a:53:4e:49:c8:6e:31:ab:25:5c:f7:
ab:ac:04:b0:4f:85:95:89:1b:9a:59:20:fe:1a:2f:29:56:b9:
63:06:53:b7:bf:7d:3a:29:8f:5d:3f:2f:30:a6:3f:2d:e3:0e:
d7:7c:58:ba:6f:9f:7f:f6:eb:92:73:01:2c:06:05:af:df:79:
bf:57:56:0f:74:3f:2f:00:1c:ed:21:06:5c:dd:04:89:20:8b:
fa:bc:74:c3:ee:82:9a:0f:14:12:25:4c:c4:a5:b1:3a:63:c7:
ec:a7:69:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:09:56 2025 by rpki-client