Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/fb147f-04ee-48f0-807d-fe3db5253eb0/1/DtlRtDq5cf2S62PsJqWyJu0Tx1I.mft
File: DtlRtDq5cf2S62PsJqWyJu0Tx1I.mft (raw, json)
Hash identifier: nT5Mi+i8Fx/gioA7kn6nF2qV0g3jM5130Zx2psUoBV0=
Subject key identifier: 45:43:60:5B:E9:30:15:DC:36:74:A5:73:15:9C:43:7F:9C:23:11:A6
Authority key identifier: 0E:D9:51:B4:3A:B9:71:FD:92:EB:63:EC:26:A5:B2:26:ED:13:C7:52
Certificate issuer: /CN=0ed951b43ab971fd92eb63ec26a5b226ed13c752
Certificate serial: 0199239F3ECA6EBD878AC8D81E759DB4B5E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DtlRtDq5cf2S62PsJqWyJu0Tx1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/fb147f-04ee-48f0-807d-fe3db5253eb0/1/DtlRtDq5cf2S62PsJqWyJu0Tx1I.mft
Manifest number: 0453
Signing time: Sun 07 Sep 2025 10:01:02 +0000
Manifest this update: Sun 07 Sep 2025 10:01:02 +0000
Manifest next update: Mon 08 Sep 2025 10:01:02 +0000
Files and hashes: 1: DtlRtDq5cf2S62PsJqWyJu0Tx1I.crl (hash: 2RRv4W2X4t6DdAgSaa19BQJ+Sf0eT4o/BLL1469TbGM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/fb147f-04ee-48f0-807d-fe3db5253eb0/1/DtlRtDq5cf2S62PsJqWyJu0Tx1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/fb147f-04ee-48f0-807d-fe3db5253eb0/1/DtlRtDq5cf2S62PsJqWyJu0Tx1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/DtlRtDq5cf2S62PsJqWyJu0Tx1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9f:3e:ca:6e:bd:87:8a:c8:d8:1e:75:9d:b4:b5:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ed951b43ab971fd92eb63ec26a5b226ed13c752
Validity
Not Before: Sep 7 10:01:02 2025 GMT
Not After : Sep 8 10:01:02 2025 GMT
Subject: CN=4543605be93015dc3674a573159c437f9c2311a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b3:dd:57:62:bb:89:30:46:0d:b1:51:60:68:
79:2b:de:01:ba:fe:09:e3:d0:8b:fd:cb:0c:05:fb:
3d:6e:8e:48:64:d4:ab:c8:0f:94:5a:2e:bf:e2:87:
2d:3f:db:84:a9:ac:dc:ee:5b:4b:c0:2d:c7:44:0e:
0d:6f:fd:58:66:36:ef:c8:dd:8b:a9:59:c6:19:33:
dd:ac:e5:41:62:ab:98:f5:b7:5e:8e:be:92:9d:a9:
b9:14:f7:f4:0f:74:82:37:b2:06:6f:3f:f6:08:f5:
94:3a:56:ef:3f:9d:45:78:ab:88:42:47:76:fe:1c:
65:e3:54:bd:40:37:61:c8:e6:be:0d:ea:f9:f7:d3:
68:b5:ef:d3:b7:53:c3:22:87:b8:a6:60:b3:89:06:
15:ef:23:4d:27:8e:0a:e0:93:3e:58:e3:ab:9a:b6:
60:64:07:27:75:63:3f:33:a5:c0:1d:b1:96:3d:c9:
00:c0:09:2b:17:5b:1e:4b:0f:b7:16:7f:60:d2:f0:
7b:d3:23:4e:e7:bf:31:bd:49:0b:4a:36:02:a1:9b:
59:e5:e7:92:6c:26:08:f2:ee:b6:b0:ed:a7:ca:24:
43:91:fd:81:91:09:4a:fb:82:d1:54:4a:09:60:be:
40:67:0c:3b:de:7f:af:f7:03:6a:46:2a:1f:e9:be:
9d:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:43:60:5B:E9:30:15:DC:36:74:A5:73:15:9C:43:7F:9C:23:11:A6
X509v3 Authority Key Identifier:
keyid:0E:D9:51:B4:3A:B9:71:FD:92:EB:63:EC:26:A5:B2:26:ED:13:C7:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DtlRtDq5cf2S62PsJqWyJu0Tx1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/fb147f-04ee-48f0-807d-fe3db5253eb0/1/DtlRtDq5cf2S62PsJqWyJu0Tx1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/fb147f-04ee-48f0-807d-fe3db5253eb0/1/DtlRtDq5cf2S62PsJqWyJu0Tx1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:79:36:2c:ab:4a:35:dd:d8:3c:58:cd:df:4f:7a:0e:79:bd:
2f:25:c8:2a:d3:32:b5:59:f1:b8:8e:30:73:e7:ce:74:06:6c:
1a:75:70:b5:7c:bd:1d:09:af:ac:5c:67:58:6c:71:e2:54:45:
7b:62:e0:66:9e:10:ee:52:da:32:cb:f5:1c:28:a0:fe:d6:d6:
ab:50:e6:2d:49:8d:e8:27:11:ed:ee:03:7b:d4:98:80:5c:ab:
bf:20:ce:4b:1e:56:6a:13:be:5d:75:d3:b9:22:a2:47:68:65:
a5:80:7c:85:18:d5:53:20:80:48:d7:e8:9b:29:be:e4:eb:13:
7e:99:89:fa:1d:6d:d7:10:ad:d6:ed:4e:f8:5d:b2:76:2f:8c:
89:85:9c:4c:e3:07:8c:25:26:b6:e1:c6:88:dc:47:28:08:94:
e1:29:d5:4f:3e:55:ee:46:f8:3b:e1:68:29:7a:4e:09:04:54:
a3:d6:d8:53:a6:e9:5f:18:07:31:95:18:1f:4e:58:89:34:bb:
70:50:3a:ed:fe:6e:64:7e:2a:0c:b5:06:d7:53:36:90:92:4b:
96:3b:18:b6:49:1d:1e:99:fc:49:c2:fc:df:b1:d7:3b:17:77:
88:46:b5:57:7b:74:84:50:12:ae:da:09:40:f9:2a:37:47:c1:
6b:85:95:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:07:32 2025 by rpki-client