Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/101dba-64eb-4267-b075-c02f775fbf3f/1/dXJV3ckKTQ-C-yZ0RpPtfJhtios.mft
File: dXJV3ckKTQ-C-yZ0RpPtfJhtios.mft (raw, json)
Hash identifier: rlEr3GS8MYJW1zxlVZ9YiQ+O0ffEYi2Le8qBCMdCbcQ=
Subject key identifier: 3D:FE:5D:48:C2:88:97:57:C4:E0:5D:D3:1E:DB:D7:46:AD:18:9E:25
Authority key identifier: 75:72:55:DD:C9:0A:4D:0F:82:FB:26:74:46:93:ED:7C:98:6D:8A:8B
Certificate issuer: /CN=757255ddc90a4d0f82fb26744693ed7c986d8a8b
Certificate serial: 019922FAA011598388768A816F25F2D032A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dXJV3ckKTQ-C-yZ0RpPtfJhtios.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/101dba-64eb-4267-b075-c02f775fbf3f/1/dXJV3ckKTQ-C-yZ0RpPtfJhtios.mft
Manifest number: 166D
Signing time: Sun 07 Sep 2025 07:01:14 +0000
Manifest this update: Sun 07 Sep 2025 07:01:14 +0000
Manifest next update: Mon 08 Sep 2025 07:01:14 +0000
Files and hashes: 1: dXJV3ckKTQ-C-yZ0RpPtfJhtios.crl (hash: 8Rxn/cyytUb7o78ukJ0Lgogbvla+13wdJ9TpCLAGU7k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/101dba-64eb-4267-b075-c02f775fbf3f/1/dXJV3ckKTQ-C-yZ0RpPtfJhtios.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/101dba-64eb-4267-b075-c02f775fbf3f/1/dXJV3ckKTQ-C-yZ0RpPtfJhtios.mft
rsync://rpki.ripe.net/repository/DEFAULT/dXJV3ckKTQ-C-yZ0RpPtfJhtios.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:a0:11:59:83:88:76:8a:81:6f:25:f2:d0:32:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=757255ddc90a4d0f82fb26744693ed7c986d8a8b
Validity
Not Before: Sep 7 07:01:14 2025 GMT
Not After : Sep 8 07:01:14 2025 GMT
Subject: CN=3dfe5d48c2889757c4e05dd31edbd746ad189e25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e9:66:ba:3a:47:cf:4d:e6:63:d8:8e:09:75:
3b:ae:01:29:ae:d0:60:12:5a:3b:16:62:86:26:ca:
ff:65:76:26:af:20:31:29:3b:e8:7d:66:f6:01:94:
39:3b:9f:0b:15:a8:8a:95:0a:b0:b5:31:2c:bb:90:
15:ff:67:24:dc:1e:80:f3:01:7f:76:e8:c6:1b:a1:
26:f2:e2:cf:dd:b5:64:09:aa:e8:42:08:f5:7d:54:
ef:aa:e4:2f:b9:55:10:92:ef:2c:13:60:d4:c6:84:
4e:24:78:e6:ba:0d:97:58:d4:83:6b:e2:96:d5:0b:
db:d7:0f:25:46:c1:33:cb:1a:de:91:57:bd:5f:ba:
ca:74:13:01:83:d9:4c:bf:1e:fb:9b:35:68:6f:98:
38:ed:c9:6f:e4:75:59:b7:54:e8:ce:ab:03:00:99:
c8:11:3e:43:da:cf:7d:a8:2e:36:40:40:db:df:2a:
45:be:6f:33:8e:16:61:07:59:a4:be:7c:1a:e1:1c:
50:6c:c9:5f:17:57:2d:63:b0:54:c2:6d:de:79:38:
f4:7d:a2:72:68:42:89:f5:93:11:5c:90:e1:97:4e:
28:28:ac:8a:a9:1a:0f:53:01:7b:cc:8a:e7:94:53:
72:bc:15:8f:cf:88:67:87:3a:dd:da:df:e2:dd:cf:
db:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:FE:5D:48:C2:88:97:57:C4:E0:5D:D3:1E:DB:D7:46:AD:18:9E:25
X509v3 Authority Key Identifier:
keyid:75:72:55:DD:C9:0A:4D:0F:82:FB:26:74:46:93:ED:7C:98:6D:8A:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dXJV3ckKTQ-C-yZ0RpPtfJhtios.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/101dba-64eb-4267-b075-c02f775fbf3f/1/dXJV3ckKTQ-C-yZ0RpPtfJhtios.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/101dba-64eb-4267-b075-c02f775fbf3f/1/dXJV3ckKTQ-C-yZ0RpPtfJhtios.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:f2:34:03:11:12:c3:e1:71:f2:d9:cc:3d:f7:6d:63:d7:7f:
ef:b3:d7:dc:1e:31:d0:22:f9:d9:f1:1b:3c:eb:44:6b:d0:d7:
73:bf:5e:57:b4:09:63:07:be:5a:b4:c8:ca:5a:d4:94:f7:2d:
13:d9:af:5b:11:15:63:8d:0a:8c:bf:67:ea:8e:f5:f2:e5:88:
80:c6:b6:b2:1e:54:74:87:c8:84:03:a4:8c:f8:11:68:9b:62:
55:83:40:16:56:10:5a:13:ec:26:d2:e0:ba:36:9e:48:60:3b:
a0:5c:df:0c:e0:a6:b0:19:e2:82:cc:48:ed:0b:2f:4f:e2:30:
86:dc:74:f2:dc:b9:46:05:73:9a:6a:c5:e5:38:65:aa:c6:58:
53:bc:46:cb:2b:12:88:3c:67:63:0c:c1:5b:91:e8:2a:2c:42:
78:50:3d:d8:20:54:a7:dc:06:91:6b:30:c9:b3:fa:ee:0c:40:
f8:21:69:f7:dd:39:f3:ca:41:4d:f8:0f:8b:9a:f0:c1:71:9e:
dc:45:45:48:bb:ec:18:c9:d2:7b:ce:c5:5d:62:c4:df:46:9e:
4b:f4:23:fd:c0:12:1b:06:77:e2:e1:9f:0e:e6:c7:77:4f:23:
96:40:41:60:15:17:4e:b1:50:46:15:2b:76:9d:b1:46:8f:bd:
65:00:28:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:21:44 2025 by rpki-client