Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/72e91a-014f-483a-a544-4e33427f734e/1/DrG9MNMZGofH0KRi5nkyQxYz3R4.mft
File: DrG9MNMZGofH0KRi5nkyQxYz3R4.mft (raw, json)
Hash identifier: FqZQ2QBGIj0D+PBo7lgKZaqqg0SPHOsREvc7Dq3onPY=
Subject key identifier: 17:20:B3:90:B2:3F:CF:0C:52:D4:85:9A:E3:AA:0F:7D:35:C9:4C:B4
Authority key identifier: 0E:B1:BD:30:D3:19:1A:87:C7:D0:A4:62:E6:79:32:43:16:33:DD:1E
Certificate issuer: /CN=0eb1bd30d3191a87c7d0a462e67932431633dd1e
Certificate serial: 019847ADA2443A3C842B834A69489A2DA0E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DrG9MNMZGofH0KRi5nkyQxYz3R4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/72e91a-014f-483a-a544-4e33427f734e/1/DrG9MNMZGofH0KRi5nkyQxYz3R4.mft
Manifest number: 0319
Signing time: Sat 26 Jul 2025 17:00:18 +0000
Manifest this update: Sat 26 Jul 2025 17:00:18 +0000
Manifest next update: Sun 27 Jul 2025 17:00:18 +0000
Files and hashes: 1: DrG9MNMZGofH0KRi5nkyQxYz3R4.crl (hash: nKQ3v5TuWD33gY2DQclKoc6frsO65Y+fTYUvKjmxFhI=)
2: ogxxjz_eGLDn7LYpHHuvCo9x5ng.roa (hash: B2U5jkd3tbLDGtZHWekj2Yva7wWVjyZDFNXj9MRShj4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/72e91a-014f-483a-a544-4e33427f734e/1/DrG9MNMZGofH0KRi5nkyQxYz3R4.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/72e91a-014f-483a-a544-4e33427f734e/1/DrG9MNMZGofH0KRi5nkyQxYz3R4.mft
rsync://rpki.ripe.net/repository/DEFAULT/DrG9MNMZGofH0KRi5nkyQxYz3R4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:ad:a2:44:3a:3c:84:2b:83:4a:69:48:9a:2d:a0:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0eb1bd30d3191a87c7d0a462e67932431633dd1e
Validity
Not Before: Jul 26 17:00:18 2025 GMT
Not After : Jul 27 17:00:18 2025 GMT
Subject: CN=1720b390b23fcf0c52d4859ae3aa0f7d35c94cb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:32:8c:4f:35:a8:6a:43:b1:0e:40:eb:27:94:
45:5c:26:f6:98:7a:7b:0c:9e:c3:53:2b:9b:a3:d2:
be:f5:93:9e:74:78:14:42:dd:67:94:82:09:4f:f5:
b6:cb:14:9e:ce:98:58:fb:f3:b5:10:16:94:02:03:
45:43:45:12:16:09:04:0b:1e:dc:6c:59:84:39:d0:
dd:e4:b3:1a:ae:83:bf:77:69:31:da:2a:1d:50:a4:
82:0f:b4:be:11:a6:23:2f:aa:69:72:62:e0:87:3f:
28:87:f3:07:f5:15:74:e5:4e:a1:27:9e:cb:44:a0:
13:ec:09:fe:59:9d:0d:9a:c6:aa:0d:fe:43:fe:55:
3f:2a:85:d6:ac:a4:c9:1f:7e:a2:ab:eb:22:b5:8e:
37:fe:80:5e:5f:8e:a2:57:40:a4:1e:37:6a:50:48:
eb:0e:a4:6c:ab:dc:20:74:15:4b:e8:d4:24:14:5e:
d1:7f:cb:69:1d:12:da:ea:e5:c1:42:0b:88:77:bb:
20:e4:85:dd:9e:91:45:e1:77:50:60:f1:df:54:a2:
45:cb:c2:a7:7e:b5:b1:06:9e:7e:d1:b4:e9:56:00:
6b:bf:01:ee:b1:86:e4:12:e4:36:48:dc:2d:e9:86:
b8:9b:75:d9:8d:8c:42:0f:22:d5:3a:62:10:b3:c0:
0f:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:20:B3:90:B2:3F:CF:0C:52:D4:85:9A:E3:AA:0F:7D:35:C9:4C:B4
X509v3 Authority Key Identifier:
keyid:0E:B1:BD:30:D3:19:1A:87:C7:D0:A4:62:E6:79:32:43:16:33:DD:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DrG9MNMZGofH0KRi5nkyQxYz3R4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/72e91a-014f-483a-a544-4e33427f734e/1/DrG9MNMZGofH0KRi5nkyQxYz3R4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/72e91a-014f-483a-a544-4e33427f734e/1/DrG9MNMZGofH0KRi5nkyQxYz3R4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:17:b3:43:93:f4:70:c5:1a:72:a6:b7:8e:f6:4e:a7:ad:15:
c4:a5:da:ed:0e:cb:75:ea:65:da:ba:3e:7a:56:db:5a:a2:e7:
df:df:68:c6:a6:d6:1b:99:1a:38:80:21:51:7d:08:50:36:ca:
ec:ef:11:f2:6b:30:b6:94:aa:57:d7:0a:d2:a0:d8:65:80:bf:
b4:1a:d9:3a:9d:8e:00:f5:e1:3a:59:60:ab:08:02:c9:8e:60:
b9:ca:f6:36:4f:14:7b:6e:8e:db:60:00:60:71:66:7b:bb:e3:
49:d6:f5:44:ff:e8:78:9b:56:07:67:55:fe:9c:b6:45:15:57:
25:70:19:29:41:87:e3:b5:86:b1:32:32:2c:36:3d:bf:33:5f:
2d:74:20:c8:1c:6d:82:29:fe:46:55:5a:35:42:02:64:f0:10:
65:22:2c:a8:28:5d:ae:48:bc:b4:4c:b9:4a:61:ee:77:2d:6b:
f4:f1:db:0a:b1:63:3c:ce:98:86:ef:05:e3:32:ac:49:a7:ff:
1b:7c:7f:2b:b8:0d:3e:1e:0f:d7:16:65:d0:0f:e3:a3:ca:f0:
54:5c:19:41:02:73:29:71:b8:19:11:b2:e9:e7:3c:08:84:d9:
e6:06:c7:c4:fa:4f:e6:59:56:89:d3:e6:fb:be:3a:9a:ac:33:
45:a3:fd:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:31:45 2025 by rpki-client