Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/92332f-03e0-4116-b6f3-c82f424b6d0d/1/DNpch0NU2Dgm5DwlNbduINW2GwU.mft
File: DNpch0NU2Dgm5DwlNbduINW2GwU.mft (raw, json)
Hash identifier: zbfYsAQzmwwEAoLKW3kpV+vjjfeO50c9dgWzhthlWUk=
Subject key identifier: 02:89:B5:CC:96:A6:EE:71:B2:8B:34:45:7E:BB:5F:1B:DD:20:DE:72
Authority key identifier: 0C:DA:5C:87:43:54:D8:38:26:E4:3C:25:35:B7:6E:20:D5:B6:1B:05
Certificate issuer: /CN=0cda5c874354d83826e43c2535b76e20d5b61b05
Certificate serial: 0199350169ABCFC2CFE1E3720EC59C134483
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DNpch0NU2Dgm5DwlNbduINW2GwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/92332f-03e0-4116-b6f3-c82f424b6d0d/1/DNpch0NU2Dgm5DwlNbduINW2GwU.mft
Manifest number: 1686
Signing time: Wed 10 Sep 2025 19:01:48 +0000
Manifest this update: Wed 10 Sep 2025 19:01:48 +0000
Manifest next update: Thu 11 Sep 2025 19:01:48 +0000
Files and hashes: 1: 32CQUiCUfdquX7Jbo_dmPVa4RAU.roa (hash: FAfiLPwl0dHpiVR3Uys5QcBsWLGjmkF+BWAYhU6veIk=)
2: DNpch0NU2Dgm5DwlNbduINW2GwU.crl (hash: HEEqvgnYk37P0aOK06sVNmwbUZv0brfCm7gZovxZExo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/92332f-03e0-4116-b6f3-c82f424b6d0d/1/DNpch0NU2Dgm5DwlNbduINW2GwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/92332f-03e0-4116-b6f3-c82f424b6d0d/1/DNpch0NU2Dgm5DwlNbduINW2GwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DNpch0NU2Dgm5DwlNbduINW2GwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 19:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:35:01:69:ab:cf:c2:cf:e1:e3:72:0e:c5:9c:13:44:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cda5c874354d83826e43c2535b76e20d5b61b05
Validity
Not Before: Sep 10 19:01:48 2025 GMT
Not After : Sep 11 19:01:48 2025 GMT
Subject: CN=0289b5cc96a6ee71b28b34457ebb5f1bdd20de72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:d1:2e:a0:fe:0c:8c:a7:b1:8f:a4:c7:20:34:
e8:1f:5d:2c:b4:27:92:ab:7f:a7:45:fe:53:ca:17:
3b:6c:50:3f:c2:bc:a5:9b:27:01:7b:72:28:44:89:
96:0d:17:a1:0c:f8:46:c7:da:41:30:bb:5f:70:f8:
1b:be:2a:9e:44:e2:40:41:f3:8d:8e:54:a0:34:a2:
66:4e:d8:50:ad:b0:44:90:24:2e:09:3d:ee:41:37:
d2:27:a9:b7:7c:d1:39:6e:11:e6:b0:5a:b2:0e:e9:
be:34:69:09:7e:0b:85:6f:f7:94:07:ee:61:9d:db:
ce:02:3c:ab:9e:3f:f8:2e:d5:1e:8e:03:41:72:47:
c1:19:b2:7b:bc:38:50:b4:87:ae:11:25:e3:d1:d5:
8c:24:b6:9f:1a:eb:4e:64:e9:f7:11:58:72:dd:fa:
88:18:f1:4c:96:ef:00:18:95:f9:3a:4c:34:42:b8:
ec:6d:dd:3b:65:e0:2b:bb:f2:94:9a:ca:e7:12:31:
66:f3:5e:63:0b:8a:52:86:33:36:b4:8f:5b:ec:09:
a2:c6:44:d6:6c:cf:a6:50:97:e2:83:ad:93:51:da:
35:34:50:be:d3:26:07:06:fd:70:1a:ef:32:fd:cc:
1a:57:63:ba:44:4a:de:15:38:40:3b:d0:9f:68:5a:
fe:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:89:B5:CC:96:A6:EE:71:B2:8B:34:45:7E:BB:5F:1B:DD:20:DE:72
X509v3 Authority Key Identifier:
keyid:0C:DA:5C:87:43:54:D8:38:26:E4:3C:25:35:B7:6E:20:D5:B6:1B:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DNpch0NU2Dgm5DwlNbduINW2GwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/92332f-03e0-4116-b6f3-c82f424b6d0d/1/DNpch0NU2Dgm5DwlNbduINW2GwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/92332f-03e0-4116-b6f3-c82f424b6d0d/1/DNpch0NU2Dgm5DwlNbduINW2GwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:c6:c4:35:01:ad:02:ee:14:79:54:c1:7b:45:b0:df:71:5d:
89:ce:74:91:8c:22:18:44:e5:0f:ab:7a:29:fc:81:42:53:52:
e2:8e:47:40:61:e0:07:e3:cb:4d:3e:8b:c5:72:d8:ba:e0:8a:
67:fe:af:89:cb:01:85:3e:3b:d2:6e:f0:a1:51:61:7d:c9:53:
5d:4c:e6:20:5a:46:4d:d3:5e:38:d3:69:6b:3a:69:de:72:b5:
bf:34:c5:b9:a9:27:a7:b1:ef:0f:14:6f:9d:b3:0d:99:2e:33:
ca:9b:ce:e8:04:84:48:b6:d6:fb:54:fd:f6:f2:f8:67:09:78:
56:20:96:3e:a8:8e:fd:fc:56:9f:be:01:d3:51:72:67:d8:8a:
df:22:14:d5:4c:c9:cd:93:c3:90:69:9b:58:01:5a:fe:d6:0e:
1d:47:d8:91:e6:c9:d1:e2:ba:54:03:23:86:f6:3f:48:b2:fa:
5c:0d:46:6d:b0:90:9f:88:8b:ab:55:2b:24:c4:78:83:12:0e:
dc:f7:ce:2c:e3:c6:85:5f:6f:23:ff:74:63:4e:5c:09:de:75:
06:66:c2:70:8d:6c:f3:b0:8c:e2:f8:da:81:ea:6c:e6:9f:d9:
c7:f7:8d:d9:b8:6d:9e:76:c3:c5:04:4f:93:b6:bc:42:47:25:
9c:fe:e9:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 01:13:25 2025 by rpki-client