Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/425c24-bfe0-4790-b250-d4c66f4f3b6e/1/DXhL2WpEvDYdEzRNVMi8Uf9nqAI.mft
File: DXhL2WpEvDYdEzRNVMi8Uf9nqAI.mft (raw, json)
Hash identifier: /L446wEgyGH6wnehgJlaczC4WXhFoVZJYFMSZUAhUCE=
Subject key identifier: 79:21:2F:D8:69:79:D9:33:D2:D2:1B:1D:D3:80:B4:06:28:DD:97:BB
Authority key identifier: 0D:78:4B:D9:6A:44:BC:36:1D:13:34:4D:54:C8:BC:51:FF:67:A8:02
Certificate issuer: /CN=0d784bd96a44bc361d13344d54c8bc51ff67a802
Certificate serial: 019923317141FAB1A843405A39C3C87F96FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXhL2WpEvDYdEzRNVMi8Uf9nqAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/425c24-bfe0-4790-b250-d4c66f4f3b6e/1/DXhL2WpEvDYdEzRNVMi8Uf9nqAI.mft
Manifest number: 0DD5
Signing time: Sun 07 Sep 2025 08:01:06 +0000
Manifest this update: Sun 07 Sep 2025 08:01:06 +0000
Manifest next update: Mon 08 Sep 2025 08:01:06 +0000
Files and hashes: 1: DXhL2WpEvDYdEzRNVMi8Uf9nqAI.crl (hash: LfTyfcnlf/oO0is9ZwkY5AXwRW6gCdVDl/FVr8OckvU=)
2: zo9Y2aPXtg0v5rw18Mi_WOQc36Y.roa (hash: v9STSvD6P0pmUA0gxCp1HPZofea00hykboqUh1BCCCs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/425c24-bfe0-4790-b250-d4c66f4f3b6e/1/DXhL2WpEvDYdEzRNVMi8Uf9nqAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/425c24-bfe0-4790-b250-d4c66f4f3b6e/1/DXhL2WpEvDYdEzRNVMi8Uf9nqAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/DXhL2WpEvDYdEzRNVMi8Uf9nqAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:31:71:41:fa:b1:a8:43:40:5a:39:c3:c8:7f:96:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d784bd96a44bc361d13344d54c8bc51ff67a802
Validity
Not Before: Sep 7 08:01:06 2025 GMT
Not After : Sep 8 08:01:06 2025 GMT
Subject: CN=79212fd86979d933d2d21b1dd380b40628dd97bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:f1:56:26:b6:2c:16:fd:43:f7:f7:31:0e:e7:
9f:5d:79:72:2e:7e:9a:25:e9:67:5a:85:cb:45:05:
5f:76:e3:8d:ed:46:27:7e:56:df:04:af:04:28:cd:
c2:71:a3:c6:d2:e9:5c:0c:c1:27:3a:f3:40:0c:34:
90:9a:19:ef:bd:09:0f:2e:5e:a0:d8:75:9e:aa:2c:
ce:e3:3c:15:c2:13:69:4a:97:66:bc:b5:e0:9d:5d:
45:91:02:46:a7:ae:f0:e0:b6:40:ff:81:34:92:64:
f5:e2:41:c8:37:72:09:13:8d:4d:fa:43:39:e3:4e:
54:54:4a:e7:e4:32:38:98:b7:64:18:d8:8c:e2:4b:
01:10:a1:fa:e1:ba:7a:92:d1:32:75:fd:4c:2a:b4:
1d:c3:a2:f6:72:9a:34:cd:90:47:c5:c2:cc:d2:ef:
12:b3:59:4d:be:8c:04:9f:3f:af:8d:96:c8:e2:b7:
f1:2b:b2:3e:30:0b:a5:14:fe:30:4c:ef:f5:67:d2:
83:bd:6c:14:0c:29:02:63:c3:64:da:60:fe:b1:1c:
66:98:4c:36:9f:8a:24:5b:c6:6c:78:a2:e4:a9:4e:
6e:aa:87:91:dc:b9:4d:65:12:d5:98:b9:b2:6a:d7:
64:61:21:97:70:e0:e1:07:be:a0:e9:4a:89:4d:36:
ea:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:21:2F:D8:69:79:D9:33:D2:D2:1B:1D:D3:80:B4:06:28:DD:97:BB
X509v3 Authority Key Identifier:
keyid:0D:78:4B:D9:6A:44:BC:36:1D:13:34:4D:54:C8:BC:51:FF:67:A8:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXhL2WpEvDYdEzRNVMi8Uf9nqAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/425c24-bfe0-4790-b250-d4c66f4f3b6e/1/DXhL2WpEvDYdEzRNVMi8Uf9nqAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/425c24-bfe0-4790-b250-d4c66f4f3b6e/1/DXhL2WpEvDYdEzRNVMi8Uf9nqAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:6d:f1:f1:98:05:0c:14:9b:f8:aa:5d:2e:5e:b2:a1:25:ca:
c3:78:ab:2e:a3:fa:04:d9:8a:0e:d9:d2:47:79:1a:a6:a7:79:
74:02:44:ea:88:1b:86:32:8d:8d:a5:64:47:13:37:22:7b:f7:
a9:74:9c:4d:62:1e:18:f4:da:ab:ef:4f:7b:ae:01:a1:e8:e5:
80:ac:de:a6:de:3a:b9:1b:5a:74:c4:73:22:ea:ea:7a:7a:69:
cb:c2:c8:de:3c:86:bc:46:11:e7:41:63:ba:23:c6:d9:58:69:
69:de:ca:f6:ce:15:71:b1:c5:5b:c0:02:ec:60:9d:a8:5d:5a:
fc:37:25:7c:97:8d:56:2f:14:81:0f:e3:71:fd:0c:58:ff:80:
bf:74:7c:09:63:d7:c5:cd:b8:10:8e:65:f6:ac:cb:b1:8d:d2:
a5:55:f1:c6:9a:a4:35:3b:33:36:a3:b4:ba:f9:ba:cf:5b:17:
ab:4c:fa:1c:bd:68:7b:3c:70:a8:c2:fc:45:f9:ab:7c:af:a5:
17:43:48:10:04:a9:0d:76:10:da:21:85:69:05:08:78:f8:f9:
1b:ed:67:70:0d:33:05:c3:6e:39:e7:89:b9:7d:4b:c5:29:10:
54:c2:f8:2e:76:e0:03:a1:52:4a:d5:90:c9:12:08:6b:5d:1c:
6e:62:ff:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:31:22 2025 by rpki-client