Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/ef54db-a565-4354-899a-083aa18a7629/1/dNYxjajSNXnE9zi26OVcxf8n5bE.mft
File: dNYxjajSNXnE9zi26OVcxf8n5bE.mft (raw, json)
Hash identifier: bVs0sAuzTA4/6MSuv3GquHWeE3iV9nksHfibeSTP39Y=
Subject key identifier: C9:79:48:D3:F7:BF:62:64:38:E7:97:E8:77:24:5C:AE:DC:25:F0:C7
Authority key identifier: 74:D6:31:8D:A8:D2:35:79:C4:F7:38:B6:E8:E5:5C:C5:FF:27:E5:B1
Certificate issuer: /CN=74d6318da8d23579c4f738b6e8e55cc5ff27e5b1
Certificate serial: 0199221ECFEACFA5BCEDB1502BEABEF504C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dNYxjajSNXnE9zi26OVcxf8n5bE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/ef54db-a565-4354-899a-083aa18a7629/1/dNYxjajSNXnE9zi26OVcxf8n5bE.mft
Manifest number: 0C71
Signing time: Sun 07 Sep 2025 03:01:08 +0000
Manifest this update: Sun 07 Sep 2025 03:01:08 +0000
Manifest next update: Mon 08 Sep 2025 03:01:08 +0000
Files and hashes: 1: dNYxjajSNXnE9zi26OVcxf8n5bE.crl (hash: iAsAteHPc0zr9ixlrIhidvOQX/LhqJEo19PrQdm9rtI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/ef54db-a565-4354-899a-083aa18a7629/1/dNYxjajSNXnE9zi26OVcxf8n5bE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/ef54db-a565-4354-899a-083aa18a7629/1/dNYxjajSNXnE9zi26OVcxf8n5bE.mft
rsync://rpki.ripe.net/repository/DEFAULT/dNYxjajSNXnE9zi26OVcxf8n5bE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:cf:ea:cf:a5:bc:ed:b1:50:2b:ea:be:f5:04:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74d6318da8d23579c4f738b6e8e55cc5ff27e5b1
Validity
Not Before: Sep 7 03:01:08 2025 GMT
Not After : Sep 8 03:01:08 2025 GMT
Subject: CN=c97948d3f7bf626438e797e877245caedc25f0c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:7f:68:ac:2a:35:96:e1:91:01:90:3d:9e:ba:
f3:a4:38:0f:f4:bd:7a:93:1f:f9:ae:67:77:ba:8d:
36:b4:4c:e0:f8:36:74:8f:90:fc:8a:83:12:46:7e:
44:2c:82:70:6c:55:6a:aa:2c:ac:cf:ed:f2:e5:c7:
fe:58:4e:ea:bb:4f:52:3e:a0:db:69:68:6c:ac:e5:
30:c9:5d:3a:9b:ad:ac:85:b0:fe:1d:ff:cf:57:31:
22:28:3f:85:fc:b7:7f:b3:17:0d:f1:fe:37:be:1c:
f8:e1:44:d5:04:c7:db:15:bd:3c:e3:3b:7c:8c:90:
2c:fc:e0:b9:0f:dc:32:83:b8:80:7a:58:08:d2:ab:
5a:d1:7b:ef:ac:69:7e:7f:34:d3:39:32:6f:90:31:
b1:fb:b2:21:69:43:91:be:f2:fb:b3:78:a8:78:cd:
60:b4:19:6b:5a:c8:e2:55:57:5b:bf:31:69:04:8b:
8f:cb:6e:56:7b:99:89:bc:bf:49:6e:99:1f:00:1f:
cd:31:ec:eb:d2:d5:03:e9:f6:31:c7:ec:47:69:ab:
16:80:b1:87:41:7c:3c:7f:df:fa:56:e7:3b:c0:13:
5c:fa:7f:a9:0f:68:e0:64:31:f1:db:4b:a3:56:18:
f4:a1:10:5f:74:ae:4a:ff:cb:a8:7a:34:12:41:24:
37:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:79:48:D3:F7:BF:62:64:38:E7:97:E8:77:24:5C:AE:DC:25:F0:C7
X509v3 Authority Key Identifier:
keyid:74:D6:31:8D:A8:D2:35:79:C4:F7:38:B6:E8:E5:5C:C5:FF:27:E5:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dNYxjajSNXnE9zi26OVcxf8n5bE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/ef54db-a565-4354-899a-083aa18a7629/1/dNYxjajSNXnE9zi26OVcxf8n5bE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/ef54db-a565-4354-899a-083aa18a7629/1/dNYxjajSNXnE9zi26OVcxf8n5bE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:7a:43:85:0a:96:8c:df:40:a2:a0:eb:91:6f:28:69:3d:2a:
ae:09:d4:fc:ad:14:0a:0c:be:c2:c4:d3:2c:4a:2c:f8:b8:eb:
a0:9d:54:51:88:bf:9f:26:a4:30:15:a9:5e:a3:37:bc:23:e8:
e6:b8:98:ae:3a:d2:c2:76:4b:85:8a:2c:c6:5d:f3:c3:09:80:
16:6d:23:67:ac:86:6a:d8:b8:08:a9:3d:9d:94:bc:66:09:74:
20:aa:2a:9c:d2:71:0f:a0:53:a3:c2:ca:70:dd:b5:f6:a8:c8:
ed:6d:f9:68:0c:33:91:cf:4f:6d:4b:ed:14:f1:02:64:2b:64:
a2:7a:c6:6d:41:57:0a:0d:8a:11:68:21:5c:06:99:94:07:fc:
89:af:52:ec:c2:81:ab:34:88:1e:e3:5c:4b:a4:63:9d:ca:53:
64:3b:69:92:b4:5e:9f:00:55:f7:c0:f3:83:9d:e4:d9:de:91:
c3:9e:85:49:0e:dd:a0:ea:c9:9c:de:ff:60:a4:39:31:6a:26:
a3:e3:39:07:c1:1f:78:fd:d4:f5:cb:49:d0:85:67:a2:60:ff:
25:6e:9c:42:90:f0:09:46:dd:f7:d2:eb:76:7f:63:f3:d5:55:
ee:bc:df:61:51:c8:02:a9:94:4a:d1:98:5f:99:6c:02:25:ac:
07:10:3e:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:13:48 2025 by rpki-client