Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/a9b91b-684e-4d78-aae9-c447b4193210/1/Dr8L3NkBYisW_9QUS1iIcHMixTQ.mft
File: Dr8L3NkBYisW_9QUS1iIcHMixTQ.mft (raw, json)
Hash identifier: Zyd25qKGfPNIc9OdlNoysClT5+ebKUZDVnVlbnIMkRI=
Subject key identifier: 0D:60:A0:A7:CB:4D:BA:D0:14:68:25:8D:BF:2C:BB:F9:44:D8:B8:E4
Authority key identifier: 0E:BF:0B:DC:D9:01:62:2B:16:FF:D4:14:4B:58:88:70:73:22:C5:34
Certificate issuer: /CN=0ebf0bdcd901622b16ffd4144b5888707322c534
Certificate serial: 0199228C72FB68B1551CAB0357105AF477CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dr8L3NkBYisW_9QUS1iIcHMixTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/a9b91b-684e-4d78-aae9-c447b4193210/1/Dr8L3NkBYisW_9QUS1iIcHMixTQ.mft
Manifest number: 1664
Signing time: Sun 07 Sep 2025 05:00:53 +0000
Manifest this update: Sun 07 Sep 2025 05:00:53 +0000
Manifest next update: Mon 08 Sep 2025 05:00:53 +0000
Files and hashes: 1: Dr8L3NkBYisW_9QUS1iIcHMixTQ.crl (hash: pkn7q2i3b2Zum3vuD8UW4mAIIXnCh535vRVMSz0F4HY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/a9b91b-684e-4d78-aae9-c447b4193210/1/Dr8L3NkBYisW_9QUS1iIcHMixTQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/a9b91b-684e-4d78-aae9-c447b4193210/1/Dr8L3NkBYisW_9QUS1iIcHMixTQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dr8L3NkBYisW_9QUS1iIcHMixTQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:72:fb:68:b1:55:1c:ab:03:57:10:5a:f4:77:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ebf0bdcd901622b16ffd4144b5888707322c534
Validity
Not Before: Sep 7 05:00:53 2025 GMT
Not After : Sep 8 05:00:53 2025 GMT
Subject: CN=0d60a0a7cb4dbad01468258dbf2cbbf944d8b8e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a3:0a:2e:73:2c:b2:31:ad:44:17:e5:35:ae:
1c:57:0c:5a:d3:6f:2b:1a:30:f7:81:dd:4b:7a:22:
bf:c4:09:79:51:29:0a:d7:e6:42:c6:6d:7e:e5:a4:
6b:91:63:0f:23:57:5f:68:9a:a5:77:ed:88:2c:9d:
ab:f1:c5:bb:80:e4:0c:06:99:11:86:c2:67:98:93:
b5:8c:1c:e1:e7:fa:47:49:ba:cd:6c:05:64:91:6f:
ac:a9:a2:d9:d9:b5:a7:23:e4:48:d9:56:5b:33:75:
dd:fd:3b:da:ba:de:86:d8:a8:ee:51:0f:8d:14:f1:
de:9e:fd:6b:ef:bb:03:80:cb:d5:2f:b0:37:81:2b:
31:ca:86:2b:f7:da:b3:fa:d2:53:b6:d1:cf:9a:f4:
9a:53:a0:75:1d:20:a2:f1:df:a2:52:3f:b5:54:30:
1e:83:0e:0a:81:ea:bb:ae:79:86:5c:3a:bb:a8:53:
89:fb:13:fe:29:b7:bc:e2:d0:b7:45:6b:15:70:8f:
22:8c:ae:12:b3:69:4a:70:48:6a:18:03:74:c4:9f:
65:49:2e:d0:99:2c:04:05:32:99:66:71:31:bf:cc:
3a:c7:f4:43:da:f2:1a:b2:75:64:07:4b:6f:8c:08:
5a:d1:39:31:e8:78:eb:25:35:ce:fe:4f:b9:d7:73:
32:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:60:A0:A7:CB:4D:BA:D0:14:68:25:8D:BF:2C:BB:F9:44:D8:B8:E4
X509v3 Authority Key Identifier:
keyid:0E:BF:0B:DC:D9:01:62:2B:16:FF:D4:14:4B:58:88:70:73:22:C5:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dr8L3NkBYisW_9QUS1iIcHMixTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/a9b91b-684e-4d78-aae9-c447b4193210/1/Dr8L3NkBYisW_9QUS1iIcHMixTQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/a9b91b-684e-4d78-aae9-c447b4193210/1/Dr8L3NkBYisW_9QUS1iIcHMixTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:bc:7e:25:3e:a2:9a:4b:aa:01:60:30:3d:b6:7a:a9:81:06:
b2:e7:82:cb:f3:30:ff:b7:f3:00:10:26:de:3e:ba:2f:0f:e4:
15:c4:80:c1:42:da:a1:24:af:23:48:d3:4e:23:96:dd:65:bf:
9e:33:3e:c4:4d:f1:ae:f4:8f:8e:77:45:75:6a:e1:a0:6c:4e:
57:90:e2:59:e0:7f:e3:1b:39:fd:cd:ef:8d:66:c1:04:5d:73:
d7:07:79:a9:7d:3b:9c:6b:1b:09:16:ef:5e:ed:50:88:c6:ad:
1a:56:90:6e:58:dd:57:78:7b:da:d5:c1:0f:97:2f:20:98:9b:
aa:9d:d4:59:a1:73:7a:fd:4e:7e:88:4d:d9:49:d8:5e:d4:a1:
e6:3f:5c:a2:25:13:ab:47:ac:22:42:ff:51:36:5e:31:f8:2c:
bb:b3:a1:34:01:1b:05:96:8d:ec:ce:4f:3d:c8:9f:0f:c5:2b:
dc:df:84:dd:b3:d2:05:ad:4f:0a:83:e3:78:aa:cb:d7:8e:b0:
75:3f:d7:e8:4d:9f:ef:0c:45:6e:d7:05:06:1a:f3:32:c1:a6:
bb:d8:de:92:97:35:84:cb:18:fb:bf:ae:67:8e:99:48:14:9c:
dc:ca:eb:6e:8b:c1:44:25:2f:f8:2f:b0:5c:6f:1e:0c:76:d9:
72:b8:df:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:01:47 2025 by rpki-client