Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/7b1e42-468f-41e7-a9e7-0a2a8c6c95da/1/dJFafoze18DuIhnnMMGYy7eLxfI.mft
File: dJFafoze18DuIhnnMMGYy7eLxfI.mft (raw, json)
Hash identifier: +fNcifCKLaFJ8V0lZX2oMTSEwEyz9CKxmSM5UPVJM6Y=
Subject key identifier: 7E:40:3E:5F:D4:0C:86:96:CA:33:B9:22:5A:91:5A:27:FB:30:45:D5
Authority key identifier: 74:91:5A:7E:8C:DE:D7:C0:EE:22:19:E7:30:C1:98:CB:B7:8B:C5:F2
Certificate issuer: /CN=74915a7e8cded7c0ee2219e730c198cbb78bc5f2
Certificate serial: 019921E7CCF7EA2A7415ED40B57AE0E18E76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJFafoze18DuIhnnMMGYy7eLxfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/7b1e42-468f-41e7-a9e7-0a2a8c6c95da/1/dJFafoze18DuIhnnMMGYy7eLxfI.mft
Manifest number: 01D3
Signing time: Sun 07 Sep 2025 02:01:03 +0000
Manifest this update: Sun 07 Sep 2025 02:01:03 +0000
Manifest next update: Mon 08 Sep 2025 02:01:03 +0000
Files and hashes: 1: dJFafoze18DuIhnnMMGYy7eLxfI.crl (hash: tXdXR9N6wgJmvftrY6tzl91/CzyRpObm05e1T/sz3wI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/7b1e42-468f-41e7-a9e7-0a2a8c6c95da/1/dJFafoze18DuIhnnMMGYy7eLxfI.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/7b1e42-468f-41e7-a9e7-0a2a8c6c95da/1/dJFafoze18DuIhnnMMGYy7eLxfI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJFafoze18DuIhnnMMGYy7eLxfI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 02:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:e7:cc:f7:ea:2a:74:15:ed:40:b5:7a:e0:e1:8e:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74915a7e8cded7c0ee2219e730c198cbb78bc5f2
Validity
Not Before: Sep 7 02:01:03 2025 GMT
Not After : Sep 8 02:01:03 2025 GMT
Subject: CN=7e403e5fd40c8696ca33b9225a915a27fb3045d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:3d:13:87:a0:9d:f2:64:a6:d0:a2:9a:d1:8b:
b5:05:8f:76:0b:ce:0f:3f:f0:1d:ff:c7:92:d7:f5:
39:91:ab:fd:2d:c7:8f:56:ff:5d:e7:5e:f3:43:dd:
3e:24:1d:cf:5c:42:d5:50:bb:a5:0d:48:32:4e:97:
25:00:16:0b:da:b3:b3:ec:22:60:5f:cf:ec:07:ad:
98:37:39:36:4f:d1:bb:7b:e4:06:8f:af:d1:45:d8:
1e:e0:14:f0:42:f4:fb:9b:9f:79:59:8f:c0:cd:22:
16:e5:22:c7:44:25:b0:ae:cb:f2:9b:ca:0b:b0:39:
2e:5e:78:df:c6:73:35:1e:7a:dc:8f:3f:15:60:e2:
3c:4e:25:86:7f:bf:73:56:a9:11:0b:15:d1:14:43:
cc:4f:a7:05:31:e9:d9:ea:e9:d0:96:a1:12:91:0f:
9b:02:22:84:08:b6:8d:69:0a:61:65:52:f2:e9:ba:
4b:79:0f:9b:48:ec:9d:16:1b:1c:5e:49:f0:8a:33:
2a:49:d4:aa:4b:18:1b:09:1a:5c:28:81:e9:b9:29:
e0:57:c3:56:8e:cf:49:10:d8:95:ac:1b:a3:64:71:
ba:dd:f1:8e:0b:f3:07:fb:a5:2f:9f:ac:e5:55:30:
9e:0b:f3:c6:06:6a:1b:11:37:94:5e:e3:61:0c:68:
d4:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:40:3E:5F:D4:0C:86:96:CA:33:B9:22:5A:91:5A:27:FB:30:45:D5
X509v3 Authority Key Identifier:
keyid:74:91:5A:7E:8C:DE:D7:C0:EE:22:19:E7:30:C1:98:CB:B7:8B:C5:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJFafoze18DuIhnnMMGYy7eLxfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7b1e42-468f-41e7-a9e7-0a2a8c6c95da/1/dJFafoze18DuIhnnMMGYy7eLxfI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7b1e42-468f-41e7-a9e7-0a2a8c6c95da/1/dJFafoze18DuIhnnMMGYy7eLxfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:0f:ce:4c:1a:7c:11:3f:2c:d7:b9:04:6b:30:45:e9:1d:46:
fb:b5:60:cc:01:b4:93:eb:05:79:7b:7a:94:9d:eb:4b:3c:71:
72:dd:3a:9a:ea:1d:02:82:df:c5:da:82:91:a9:8a:1e:9a:85:
08:bc:ff:e3:68:0a:8c:31:2e:89:2d:05:f8:b5:d7:8b:5b:a6:
79:a0:ea:b8:ac:41:1a:2d:c6:b7:8d:87:95:34:1a:c4:52:58:
e8:dd:5a:5d:5c:3e:bb:60:25:b9:cd:01:a5:7e:b8:bc:fd:5e:
62:d9:44:28:36:50:20:cf:0e:e2:45:6c:02:e1:57:64:0b:4e:
7a:fa:e8:bb:70:56:5a:10:cb:9a:71:1f:e6:45:53:ba:9a:e7:
33:a4:9e:a6:14:b4:3e:d5:2d:49:7c:81:a1:2a:62:21:7d:b1:
39:8c:ea:63:b3:0a:ae:e5:b0:47:4e:26:75:e3:4f:ef:2b:d8:
4d:b0:3f:2b:77:53:96:61:20:f4:ec:af:8d:96:60:35:f0:0c:
e6:49:fb:c9:38:d7:b1:88:d2:09:97:3f:93:5d:8a:cd:cc:75:
4f:ba:5a:2c:cf:04:f7:17:82:ea:5a:93:2d:da:8c:df:c6:be:
21:25:9e:95:72:2f:6c:45:7a:1d:c6:4f:bb:98:50:0e:e9:5e:
ba:3c:31:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:05:49 2025 by rpki-client