Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/9a99c5-0713-4b76-b8f2-01adc1015648/1/dDWQyYyt2-4a14ldOC1Q9f28SK0.mft
File: dDWQyYyt2-4a14ldOC1Q9f28SK0.mft (raw, json)
Hash identifier: MvuufYgFu0mbS/wDXSPi/2xtODLavLYvEQqGhgsX/A0=
Subject key identifier: C6:63:36:A9:FA:92:27:D2:28:CD:26:0D:2E:D2:E8:3C:46:8B:BD:95
Authority key identifier: 74:35:90:C9:8C:AD:DB:EE:1A:D7:89:5D:38:2D:50:F5:FD:BC:48:AD
Certificate issuer: /CN=743590c98caddbee1ad7895d382d50f5fdbc48ad
Certificate serial: 019923D63852EC3629D8E6B9C75D03F898B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dDWQyYyt2-4a14ldOC1Q9f28SK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/9a99c5-0713-4b76-b8f2-01adc1015648/1/dDWQyYyt2-4a14ldOC1Q9f28SK0.mft
Manifest number: 19
Signing time: Sun 07 Sep 2025 11:01:05 +0000
Manifest this update: Sun 07 Sep 2025 11:01:05 +0000
Manifest next update: Mon 08 Sep 2025 11:01:05 +0000
Files and hashes: 1: dDWQyYyt2-4a14ldOC1Q9f28SK0.crl (hash: PcCDsQevFqb1iRmjA1oU0pPzzUFJHPYZ/ZfUIKTs6NU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/9a99c5-0713-4b76-b8f2-01adc1015648/1/dDWQyYyt2-4a14ldOC1Q9f28SK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/9a99c5-0713-4b76-b8f2-01adc1015648/1/dDWQyYyt2-4a14ldOC1Q9f28SK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/dDWQyYyt2-4a14ldOC1Q9f28SK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:d6:38:52:ec:36:29:d8:e6:b9:c7:5d:03:f8:98:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=743590c98caddbee1ad7895d382d50f5fdbc48ad
Validity
Not Before: Sep 7 11:01:05 2025 GMT
Not After : Sep 8 11:01:05 2025 GMT
Subject: CN=c66336a9fa9227d228cd260d2ed2e83c468bbd95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f3:60:55:22:a0:bf:4f:94:55:67:42:ab:3f:
da:31:c7:65:e7:52:30:10:b9:73:0f:39:bc:48:79:
e4:5a:ce:1a:85:e6:31:57:b0:e6:97:54:7b:61:e3:
1d:53:b3:2e:10:ee:de:89:d2:c0:b0:dd:8a:73:79:
f6:23:31:9b:60:62:f9:19:d4:75:f4:03:69:76:05:
21:88:ec:45:e4:64:ed:c8:76:7e:a7:81:cf:8a:8b:
ba:a2:60:7d:f0:11:a6:94:01:89:de:a8:d3:e0:9b:
82:69:9e:4b:77:bd:ea:f0:4c:47:b9:88:f5:51:69:
02:7e:cb:a3:ab:26:80:38:72:d4:d2:68:95:60:21:
93:d9:49:75:9d:9d:da:2d:6c:4a:93:ba:2f:3a:62:
41:95:6e:73:0c:c3:47:6f:0c:9a:b2:97:5e:ef:21:
b4:d1:18:10:b4:48:fa:1c:7d:00:36:de:92:39:2e:
54:94:a1:f6:81:fa:4a:46:53:0b:46:96:89:27:6d:
5f:55:e9:78:e8:36:ca:63:49:a1:44:a3:d1:5d:98:
21:e1:f4:c8:f5:3c:55:e1:fb:56:fe:45:6c:2f:85:
e3:43:f4:78:fe:75:ea:d5:06:c3:2a:44:c0:75:2b:
74:83:22:b1:51:28:25:d1:58:ac:92:a2:60:e3:54:
45:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:63:36:A9:FA:92:27:D2:28:CD:26:0D:2E:D2:E8:3C:46:8B:BD:95
X509v3 Authority Key Identifier:
keyid:74:35:90:C9:8C:AD:DB:EE:1A:D7:89:5D:38:2D:50:F5:FD:BC:48:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dDWQyYyt2-4a14ldOC1Q9f28SK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/9a99c5-0713-4b76-b8f2-01adc1015648/1/dDWQyYyt2-4a14ldOC1Q9f28SK0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/9a99c5-0713-4b76-b8f2-01adc1015648/1/dDWQyYyt2-4a14ldOC1Q9f28SK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:fa:27:0b:ed:4b:9f:58:2f:88:7d:b4:9f:3f:06:65:67:58:
52:bd:f3:a0:38:fa:c9:dd:cd:5f:d8:ab:8d:f7:4c:e7:8d:29:
8e:94:dd:93:db:c7:29:ea:b4:3f:46:f8:e9:a1:8f:37:84:b1:
b7:ee:5a:84:d2:57:a1:26:ba:85:f0:3a:c9:4c:a7:83:3d:59:
45:59:00:a9:bb:f3:cf:08:74:a8:4d:38:3e:6f:b2:ed:2b:b3:
c8:f1:ca:2f:af:ad:f0:e5:9d:cd:00:8d:f8:75:c7:f6:71:9a:
f8:cc:ca:62:45:c9:f6:03:02:dc:8f:a3:ad:ee:79:86:0e:ba:
30:5f:ce:f2:5d:8c:59:1e:a3:42:29:86:ba:75:e4:89:4d:a1:
96:1a:5c:eb:82:22:58:a6:e9:ef:27:59:bc:fd:c4:d4:8b:d5:
c5:7a:1d:7a:2e:42:a6:9c:57:5a:ce:b6:bc:01:78:87:ff:f2:
ad:be:07:7c:6f:be:ea:fb:5b:ab:b4:d5:9b:15:98:3f:13:01:
bb:15:45:56:95:69:15:41:fc:64:8b:57:5d:26:31:f9:6b:54:
5a:a4:a6:da:fd:6d:0d:b4:b1:6b:9b:3e:29:1a:ef:0c:95:7e:
d5:df:83:c8:69:12:31:a9:e3:14:10:30:8a:d9:dd:94:fa:4e:
60:51:8e:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:30:48 2025 by rpki-client