Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/cea161-cb5c-4e41-b836-d80077e12b5d/1/D0nEmnXPbiSMm1HHBU2y-Nnc7cs.mft
File: D0nEmnXPbiSMm1HHBU2y-Nnc7cs.mft (raw, json)
Hash identifier: B7wLwJ6CgvYbP2662wWwC/BQ9SSmTOW3JX6uIuhUjvM=
Subject key identifier: BA:DD:A4:1C:25:77:7F:2A:5F:C8:C5:C1:10:61:58:B5:FE:EE:66:23
Authority key identifier: 0F:49:C4:9A:75:CF:6E:24:8C:9B:51:C7:05:4D:B2:F8:D9:DC:ED:CB
Certificate issuer: /CN=0f49c49a75cf6e248c9b51c7054db2f8d9dcedcb
Certificate serial: 019921B0927421D46287B556EA63004D746C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D0nEmnXPbiSMm1HHBU2y-Nnc7cs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/cea161-cb5c-4e41-b836-d80077e12b5d/1/D0nEmnXPbiSMm1HHBU2y-Nnc7cs.mft
Manifest number: 0B7C
Signing time: Sun 07 Sep 2025 01:00:43 +0000
Manifest this update: Sun 07 Sep 2025 01:00:43 +0000
Manifest next update: Mon 08 Sep 2025 01:00:43 +0000
Files and hashes: 1: D0nEmnXPbiSMm1HHBU2y-Nnc7cs.crl (hash: sry0w7Sr7hmMC3Vm+oQ6z99J9XEGECV1jmx7XgfrrtI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/cea161-cb5c-4e41-b836-d80077e12b5d/1/D0nEmnXPbiSMm1HHBU2y-Nnc7cs.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/cea161-cb5c-4e41-b836-d80077e12b5d/1/D0nEmnXPbiSMm1HHBU2y-Nnc7cs.mft
rsync://rpki.ripe.net/repository/DEFAULT/D0nEmnXPbiSMm1HHBU2y-Nnc7cs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b0:92:74:21:d4:62:87:b5:56:ea:63:00:4d:74:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f49c49a75cf6e248c9b51c7054db2f8d9dcedcb
Validity
Not Before: Sep 7 01:00:43 2025 GMT
Not After : Sep 8 01:00:43 2025 GMT
Subject: CN=badda41c25777f2a5fc8c5c1106158b5feee6623
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:b3:44:cd:d9:73:f7:77:97:c9:eb:2f:b3:36:
9e:72:41:78:16:73:93:60:3f:76:6c:6b:d0:52:41:
87:b8:50:f8:e1:d2:4d:88:4b:bd:9c:23:d1:aa:09:
a0:43:cd:dd:1c:61:88:0d:08:90:e7:66:3c:75:a7:
c8:fe:5f:96:59:2e:49:87:3c:ff:f9:ea:cf:7f:82:
3d:bd:b1:51:31:f3:55:b4:c5:6f:38:79:0f:aa:58:
68:44:c1:97:4a:95:b9:a1:43:01:42:0d:98:1a:e6:
7c:21:fa:98:14:9c:8b:9d:67:55:eb:67:f9:c6:82:
e7:87:bd:2c:d9:43:76:11:ce:6e:0b:01:fd:ea:d6:
3f:df:cb:c7:84:3c:e9:ea:79:b7:50:f8:db:03:e3:
17:f7:3a:29:99:e0:5a:d2:e2:20:c0:ab:52:20:61:
3e:2d:f4:7b:56:fa:bb:aa:27:37:91:19:5a:61:3f:
e9:52:0f:d8:78:4f:8e:49:5f:13:ff:89:60:6f:51:
19:45:1a:7c:7a:f6:76:bf:2d:28:05:0f:5e:a2:9b:
0b:a7:92:c0:85:5c:63:30:15:b2:69:7a:c7:ba:c8:
f1:57:33:68:ca:2d:d1:1b:b6:c7:c1:53:9d:67:6b:
79:06:f3:7c:9b:b8:a9:41:79:44:5a:95:dc:06:26:
72:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:DD:A4:1C:25:77:7F:2A:5F:C8:C5:C1:10:61:58:B5:FE:EE:66:23
X509v3 Authority Key Identifier:
keyid:0F:49:C4:9A:75:CF:6E:24:8C:9B:51:C7:05:4D:B2:F8:D9:DC:ED:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D0nEmnXPbiSMm1HHBU2y-Nnc7cs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/cea161-cb5c-4e41-b836-d80077e12b5d/1/D0nEmnXPbiSMm1HHBU2y-Nnc7cs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/cea161-cb5c-4e41-b836-d80077e12b5d/1/D0nEmnXPbiSMm1HHBU2y-Nnc7cs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:17:d5:5e:bc:bd:d5:9c:3e:dd:d0:3b:84:82:16:14:8b:72:
39:64:d4:46:27:af:73:94:b6:d3:9b:9e:7b:b9:32:0b:e1:60:
f6:dc:c4:c4:42:08:be:ee:1f:95:90:ae:79:75:d2:6b:4c:5e:
8c:15:b6:19:bb:18:b9:0b:62:ad:9a:4a:87:30:ee:bd:bc:3d:
98:8f:1d:3a:ab:b5:d7:f9:b3:98:77:d0:7d:c1:23:c7:54:80:
6f:06:c8:4f:a9:ed:2f:90:ca:be:f4:99:db:4c:cd:f4:7f:80:
84:3c:56:ad:3f:26:bb:3f:e7:53:df:fc:20:92:8c:73:ed:df:
c1:f7:3c:3b:03:b1:8a:55:06:2c:36:13:2e:be:58:fe:d2:17:
88:82:2e:98:41:aa:9f:75:e1:4b:43:ec:22:b9:17:80:78:ee:
6f:4a:41:27:4f:51:e9:6e:4b:32:bc:9e:66:e3:1e:b4:6d:68:
4d:ff:e0:15:9b:dc:ee:95:4e:a1:02:f5:ed:c7:c9:c8:a2:47:
ce:6a:19:8f:84:99:6b:05:cf:66:88:30:11:2c:57:22:4c:29:
73:60:2c:ae:31:94:aa:6f:e0:e6:34:04:ae:39:01:9f:e2:fd:
30:65:54:d4:2d:a7:49:4f:33:cc:d2:7b:1b:47:71:e3:ee:a0:
05:63:1a:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:04:31 2025 by rpki-client