Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/299959-12f4-4fe7-9f30-99e76c2739fb/1/dnmIT2MwtlBg7cQcysDlRtOApQQ.mft
File: dnmIT2MwtlBg7cQcysDlRtOApQQ.mft (raw, json)
Hash identifier: ipLaw3yLqOd+L8hEcSDKl45Pj3migUyYw/hJGF+Z34g=
Subject key identifier: 5E:F4:5D:48:32:08:C8:AF:38:82:B5:D7:4F:56:1B:CA:AF:2E:E6:E0
Authority key identifier: 76:79:88:4F:63:30:B6:50:60:ED:C4:1C:CA:C0:E5:46:D3:80:A5:04
Certificate issuer: /CN=7679884f6330b65060edc41ccac0e546d380a504
Certificate serial: 01992255ECC000B44CF6E2091E517F96C21E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dnmIT2MwtlBg7cQcysDlRtOApQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/299959-12f4-4fe7-9f30-99e76c2739fb/1/dnmIT2MwtlBg7cQcysDlRtOApQQ.mft
Manifest number: 24
Signing time: Sun 07 Sep 2025 04:01:20 +0000
Manifest this update: Sun 07 Sep 2025 04:01:20 +0000
Manifest next update: Mon 08 Sep 2025 04:01:20 +0000
Files and hashes: 1: dnmIT2MwtlBg7cQcysDlRtOApQQ.crl (hash: gp4/OrgRkGhNbhh4H+n23x183scf6oMi3CN1DTjBDO4=)
2: pqKjRcHlDiTELm_P0k88IdYl64A.roa (hash: uOigO0BbOXYSDcxSVpkhh97Q9VqPSwLH4vkq9m1CYjE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/299959-12f4-4fe7-9f30-99e76c2739fb/1/dnmIT2MwtlBg7cQcysDlRtOApQQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/299959-12f4-4fe7-9f30-99e76c2739fb/1/dnmIT2MwtlBg7cQcysDlRtOApQQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/dnmIT2MwtlBg7cQcysDlRtOApQQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:ec:c0:00:b4:4c:f6:e2:09:1e:51:7f:96:c2:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7679884f6330b65060edc41ccac0e546d380a504
Validity
Not Before: Sep 7 04:01:20 2025 GMT
Not After : Sep 8 04:01:20 2025 GMT
Subject: CN=5ef45d483208c8af3882b5d74f561bcaaf2ee6e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:96:79:fe:e1:57:d6:b0:d2:a7:21:da:cc:69:
3b:c5:35:09:f2:d7:86:f6:a2:4e:36:3e:ed:ff:6b:
5e:82:f5:64:4b:c0:1c:45:63:c9:8a:a1:61:2c:e8:
ed:60:56:1f:7b:44:b7:a1:77:ff:dc:75:23:4d:7f:
77:01:0f:a4:04:a0:02:85:39:4b:9b:12:29:a6:9d:
1e:42:34:7a:89:df:b2:44:6e:18:9b:7f:93:56:a1:
1b:5b:99:77:af:75:2d:b6:82:00:82:17:8d:17:ed:
5d:0b:ce:72:39:07:03:91:4a:37:17:b5:88:77:46:
bd:1f:41:c5:00:24:68:24:bf:a8:20:bc:41:39:68:
c4:7d:b3:3f:53:ae:cb:c4:dd:74:43:f3:ad:2c:68:
78:7f:f7:9a:f6:c6:f6:f0:85:b5:01:fe:94:a4:51:
01:ca:09:fc:a9:47:98:80:3b:81:71:c5:53:88:40:
77:f6:84:5e:88:f3:ad:a3:29:c6:5d:9d:fa:49:60:
0b:63:7a:84:78:ff:50:cb:a5:de:9e:87:ac:6c:0c:
5b:9b:1a:b3:72:3c:c9:74:d1:eb:b1:02:fd:bf:81:
98:30:be:af:0f:51:af:20:40:e6:b5:38:ed:64:38:
b6:18:54:9f:14:fa:82:d0:4c:0a:b0:9c:9e:98:77:
d6:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:F4:5D:48:32:08:C8:AF:38:82:B5:D7:4F:56:1B:CA:AF:2E:E6:E0
X509v3 Authority Key Identifier:
keyid:76:79:88:4F:63:30:B6:50:60:ED:C4:1C:CA:C0:E5:46:D3:80:A5:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dnmIT2MwtlBg7cQcysDlRtOApQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/299959-12f4-4fe7-9f30-99e76c2739fb/1/dnmIT2MwtlBg7cQcysDlRtOApQQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/299959-12f4-4fe7-9f30-99e76c2739fb/1/dnmIT2MwtlBg7cQcysDlRtOApQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:4c:fc:e6:b8:b6:4c:bb:89:20:4a:b1:be:dc:09:4b:f9:7c:
8f:54:02:f0:7d:34:6b:b2:27:7c:e6:1e:dc:b7:d8:d1:52:a9:
87:2d:39:45:e3:22:05:24:35:21:4a:8f:d0:2d:37:e9:67:5b:
34:75:9b:ab:34:8e:46:e0:2a:6d:10:f2:c8:cf:26:fe:20:ef:
39:db:8c:10:53:1a:34:f8:ac:69:d1:9f:6d:cf:43:ea:b2:47:
23:ec:ab:67:51:4b:6c:fd:39:f8:39:59:4b:68:4b:7b:42:df:
6a:4d:c0:72:71:03:25:f0:1a:48:bb:5b:66:87:c8:7b:24:c3:
0b:c2:6d:a2:e9:0c:80:73:3e:21:f9:f9:c7:dc:92:f8:3c:da:
18:77:6f:25:e8:53:31:ea:dc:03:a8:35:81:ee:c5:4d:1f:37:
c8:c8:05:38:7b:61:70:2b:e2:39:04:72:0b:ef:c5:80:6a:ef:
ad:d8:e9:d6:9a:14:81:88:64:a2:dd:64:ed:be:b9:75:f7:77:
fe:36:9e:cd:e9:6b:f2:86:59:d5:33:f1:87:83:db:6b:47:12:
b6:61:2e:bd:bd:d2:7c:c8:71:fb:e6:56:1e:3d:ca:38:cd:7a:
06:08:19:d6:7f:c0:4a:a3:78:74:52:cd:57:7e:9b:fc:f7:0e:
58:cd:63:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:16:15 2025 by rpki-client