Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/e326b9-795f-4a0b-9efd-e69be395b0f7/1/DXQT3PU3N0pw2qMf2amf0psDMjk.mft
File: DXQT3PU3N0pw2qMf2amf0psDMjk.mft (raw, json)
Hash identifier: oprvKiOLxcTtRHEVsnlYqHh/b2+YL+S9Y2IzGBLyZQo=
Subject key identifier: 36:89:0F:47:26:B5:0C:F8:B6:2B:F7:6B:9F:4C:67:0C:3D:F3:BD:26
Authority key identifier: 0D:74:13:DC:F5:37:37:4A:70:DA:A3:1F:D9:A9:9F:D2:9B:03:32:39
Certificate issuer: /CN=0d7413dcf537374a70daa31fd9a99fd29b033239
Certificate serial: 019848F7A335198CD4D57383FB519B06202B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXQT3PU3N0pw2qMf2amf0psDMjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/e326b9-795f-4a0b-9efd-e69be395b0f7/1/DXQT3PU3N0pw2qMf2amf0psDMjk.mft
Manifest number: 13C6
Signing time: Sat 26 Jul 2025 23:00:45 +0000
Manifest this update: Sat 26 Jul 2025 23:00:45 +0000
Manifest next update: Sun 27 Jul 2025 23:00:45 +0000
Files and hashes: 1: DXQT3PU3N0pw2qMf2amf0psDMjk.crl (hash: hmgPrSIPGtelOaHRlCZG2C9fl0oiYVsjXsEjdbQMDbc=)
2: ka4zet-SkUrSnEvI5_4fHR-JIQI.roa (hash: EBw/ap+q2JTBNlcLQGiKoKAynchkYNGQi71a58xmflM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/e326b9-795f-4a0b-9efd-e69be395b0f7/1/DXQT3PU3N0pw2qMf2amf0psDMjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/e326b9-795f-4a0b-9efd-e69be395b0f7/1/DXQT3PU3N0pw2qMf2amf0psDMjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/DXQT3PU3N0pw2qMf2amf0psDMjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 23:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:f7:a3:35:19:8c:d4:d5:73:83:fb:51:9b:06:20:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d7413dcf537374a70daa31fd9a99fd29b033239
Validity
Not Before: Jul 26 23:00:45 2025 GMT
Not After : Jul 27 23:00:45 2025 GMT
Subject: CN=36890f4726b50cf8b62bf76b9f4c670c3df3bd26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:4b:c3:7d:4e:73:cc:6e:0b:79:1f:5c:dc:8a:
ac:6d:dd:e7:8e:76:eb:4f:ce:cd:d4:4a:4a:c6:fe:
12:5c:32:cc:a0:6c:bc:6b:4f:fc:70:21:cf:2f:72:
da:7e:dc:fc:c1:b5:92:22:74:c6:be:b1:e5:c5:ea:
da:c3:58:4f:dc:54:f4:35:91:fe:51:5a:08:54:27:
08:ac:c7:d6:95:d3:70:f5:07:09:6d:59:8b:6a:91:
73:bb:91:a3:93:ca:71:33:51:8c:3d:2f:f4:80:29:
ab:31:d8:b3:85:8d:6a:e4:e1:08:72:f8:23:3b:bc:
cd:46:ec:85:75:01:d2:f3:66:74:99:28:64:e4:5b:
86:a9:f0:db:87:26:d6:2a:74:16:87:dd:97:fe:f1:
65:cb:86:0d:e8:37:3c:b0:5e:02:3a:3a:8c:79:be:
e3:70:2a:52:76:66:23:b8:fa:6c:96:83:94:10:63:
7d:d4:07:a7:3b:4c:97:82:df:e4:e6:51:c0:39:86:
66:75:62:c9:69:31:9b:62:57:6f:0d:88:3e:39:75:
63:13:31:86:f2:95:0f:41:bf:ee:da:a9:4f:bb:f3:
7a:e7:80:44:54:18:77:ac:78:01:a4:9d:05:a2:1f:
91:48:73:db:26:28:59:f0:13:e2:68:e1:3f:dc:64:
f8:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:89:0F:47:26:B5:0C:F8:B6:2B:F7:6B:9F:4C:67:0C:3D:F3:BD:26
X509v3 Authority Key Identifier:
keyid:0D:74:13:DC:F5:37:37:4A:70:DA:A3:1F:D9:A9:9F:D2:9B:03:32:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXQT3PU3N0pw2qMf2amf0psDMjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e326b9-795f-4a0b-9efd-e69be395b0f7/1/DXQT3PU3N0pw2qMf2amf0psDMjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e326b9-795f-4a0b-9efd-e69be395b0f7/1/DXQT3PU3N0pw2qMf2amf0psDMjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:c3:dc:ed:f7:04:2c:ba:aa:15:b6:e9:7e:03:af:83:13:5d:
cb:28:8c:6d:4c:f4:07:e3:67:81:21:4f:5b:50:71:29:24:d0:
77:73:05:a0:60:0e:8a:96:2c:f7:fb:ad:88:f1:35:02:b9:ed:
ce:22:18:f8:8b:a2:80:a3:d0:6b:5c:ea:e8:8e:e9:22:27:ed:
18:c0:c8:a7:df:b1:d5:79:25:61:72:17:b5:da:cd:38:47:9c:
d5:a3:b7:bc:ae:5c:4c:73:24:07:ae:cb:f0:02:94:bd:6d:70:
9e:83:9e:8f:74:a2:5a:0e:bc:02:96:1b:2f:b8:94:c9:a2:e2:
48:2a:d9:91:7f:8e:20:eb:a4:3c:e1:1e:34:61:b2:16:92:a5:
e4:52:2a:e5:58:ef:ef:fa:a0:3f:4f:b4:59:2e:8b:5c:78:19:
58:59:69:7b:cf:ee:c0:b6:da:47:de:8d:31:0e:5d:47:ba:7f:
d4:26:14:d2:a8:a7:87:62:58:ba:39:51:31:bb:f8:ef:9a:c0:
dd:2f:75:22:8d:f3:c2:a8:8d:12:78:06:bc:7d:e0:69:55:36:
e3:81:26:43:2f:cc:13:ae:d6:a7:30:68:32:0f:07:01:45:62:
1a:b1:1e:6f:25:e0:c4:26:67:2d:26:ae:e5:ae:2e:40:3d:5f:
c1:44:6a:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 06:48:21 2025 by rpki-client