Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/65fea2-a3d9-492f-8e44-894dfa5df017/1/DTM_ctnilFQ4Jb5jcp-ANKRRcJA.mft
File: DTM_ctnilFQ4Jb5jcp-ANKRRcJA.mft (raw, json)
Hash identifier: Hya4kUfwj1xpOyLR5YUEgDuOcWsai5rkO792Woqn+V4=
Subject key identifier: 9A:3B:16:F6:C1:FB:C2:62:83:37:6C:F2:D3:2B:8E:E2:F8:7E:18:E4
Authority key identifier: 0D:33:3F:72:D9:E2:94:54:38:25:BE:63:72:9F:80:34:A4:51:70:90
Certificate issuer: /CN=0d333f72d9e294543825be63729f8034a4517090
Certificate serial: 0198481BD17E9B49C25FBCA8BF02647ADD30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DTM_ctnilFQ4Jb5jcp-ANKRRcJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/65fea2-a3d9-492f-8e44-894dfa5df017/1/DTM_ctnilFQ4Jb5jcp-ANKRRcJA.mft
Manifest number: 09F6
Signing time: Sat 26 Jul 2025 19:00:39 +0000
Manifest this update: Sat 26 Jul 2025 19:00:39 +0000
Manifest next update: Sun 27 Jul 2025 19:00:39 +0000
Files and hashes: 1: DTM_ctnilFQ4Jb5jcp-ANKRRcJA.crl (hash: G2yzUg5XQZ/ZMqQeH2iI1FKtsK0zwWpRSfPEnRMR1n8=)
2: IoDHlDbNXO3jlcqfipIcULBON5A.roa (hash: KOgCTDaSahbElR1Ol4oBVrEjOtYhS4W0VzXtKth8BeM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/65fea2-a3d9-492f-8e44-894dfa5df017/1/DTM_ctnilFQ4Jb5jcp-ANKRRcJA.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/65fea2-a3d9-492f-8e44-894dfa5df017/1/DTM_ctnilFQ4Jb5jcp-ANKRRcJA.mft
rsync://rpki.ripe.net/repository/DEFAULT/DTM_ctnilFQ4Jb5jcp-ANKRRcJA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:1b:d1:7e:9b:49:c2:5f:bc:a8:bf:02:64:7a:dd:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d333f72d9e294543825be63729f8034a4517090
Validity
Not Before: Jul 26 19:00:39 2025 GMT
Not After : Jul 27 19:00:39 2025 GMT
Subject: CN=9a3b16f6c1fbc26283376cf2d32b8ee2f87e18e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:98:14:48:c4:98:52:b3:33:a8:95:9e:b3:06:
08:76:3a:68:7e:a9:af:c5:11:05:27:54:be:5b:4d:
8f:ce:40:09:3f:e8:0a:90:cb:63:7f:be:9a:24:1d:
aa:e8:a2:07:ab:2f:22:07:8c:98:c5:4f:35:6a:92:
2b:7a:b9:8d:33:ae:ae:ee:d9:6c:c7:df:02:78:a6:
95:db:fb:e3:c3:df:93:17:da:84:02:24:7b:e7:f3:
0a:0f:c3:8e:46:b8:cd:b2:11:07:36:0b:8a:d7:f5:
98:ed:9d:23:36:57:5a:2a:08:a0:3a:94:37:96:2e:
43:f7:3e:29:0b:18:a2:e7:d9:d7:f0:13:9f:18:81:
5d:a6:c4:84:a4:28:14:52:ce:bf:8b:02:9a:84:67:
dd:74:0a:a0:8b:df:e1:b5:29:da:a6:ad:28:6e:41:
e6:53:88:da:f3:f6:44:06:13:35:f1:ad:29:b6:51:
66:6a:4d:50:d7:7a:0d:4f:7c:89:d6:03:8d:a0:6d:
44:6c:d7:3a:9f:57:68:8f:45:d4:46:7d:07:13:23:
66:d4:f3:93:4d:e4:ea:d3:67:a3:1f:d9:5c:c9:8a:
03:30:00:8b:19:3a:a7:ac:5c:22:4f:61:3e:d2:83:
1a:d3:d7:cb:f0:27:8e:20:56:9b:5f:1c:f6:76:48:
ef:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:3B:16:F6:C1:FB:C2:62:83:37:6C:F2:D3:2B:8E:E2:F8:7E:18:E4
X509v3 Authority Key Identifier:
keyid:0D:33:3F:72:D9:E2:94:54:38:25:BE:63:72:9F:80:34:A4:51:70:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DTM_ctnilFQ4Jb5jcp-ANKRRcJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/65fea2-a3d9-492f-8e44-894dfa5df017/1/DTM_ctnilFQ4Jb5jcp-ANKRRcJA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/65fea2-a3d9-492f-8e44-894dfa5df017/1/DTM_ctnilFQ4Jb5jcp-ANKRRcJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:2a:8f:47:22:2d:31:b3:10:ea:c8:73:4a:d6:9f:0a:d5:56:
b5:ed:ce:c7:b0:5c:37:af:d4:4b:4d:6c:7b:39:79:18:8c:61:
c7:46:92:62:7a:01:3f:1b:ee:d0:e5:9a:a7:4e:16:66:87:85:
0b:a7:c0:a4:27:8c:7e:cb:65:c4:e8:a8:bf:e6:6b:e2:1b:44:
b1:91:12:85:be:2b:66:12:82:f1:86:40:ce:db:ed:41:08:fc:
9b:8e:5f:9e:1c:1f:40:c2:16:33:7c:63:ac:45:81:fb:b9:1f:
1b:16:6f:d8:80:b3:a1:09:11:7e:d4:24:59:d3:26:5f:46:a4:
b8:6a:a4:38:ff:01:da:3a:b0:db:cc:a2:1e:19:e1:28:59:63:
c4:f8:e8:88:14:3c:a0:1d:ba:8c:10:a2:5e:52:51:52:e4:5c:
77:eb:72:06:3a:a2:e9:d3:5a:94:4f:8f:4e:f6:8b:e4:bc:e9:
c4:fb:23:cf:d6:21:88:1a:14:70:d0:49:eb:0f:8c:23:8c:81:
16:5f:2f:f2:7a:85:23:25:f5:ef:d2:b0:5c:89:76:31:4b:66:
c1:73:81:ab:cd:71:79:6b:4e:1a:56:7c:c0:df:1e:46:d7:06:
3d:f5:1c:4d:69:80:38:88:a4:71:6d:a3:ff:f3:a0:f4:14:c5:
a7:79:3d:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:49:10 2025 by rpki-client