Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/89fc51-d475-4eee-a970-930700ca617f/1/dC44IKB42kewo3Ti06ZtYmPB4j8.mft
File: dC44IKB42kewo3Ti06ZtYmPB4j8.mft (raw, json)
Hash identifier: BaX5mL/cV9aNQEIBTh73OubHdIoUG+cD2GLjkBUBUD4=
Subject key identifier: 7E:48:53:C4:00:DA:B6:58:63:31:2D:C4:61:50:E6:48:88:40:F0:0A
Authority key identifier: 74:2E:38:20:A0:78:DA:47:B0:A3:74:E2:D3:A6:6D:62:63:C1:E2:3F
Certificate issuer: /CN=742e3820a078da47b0a374e2d3a66d6263c1e23f
Certificate serial: 0199239EE2229ED4D9D1058605197B25B64A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dC44IKB42kewo3Ti06ZtYmPB4j8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/89fc51-d475-4eee-a970-930700ca617f/1/dC44IKB42kewo3Ti06ZtYmPB4j8.mft
Manifest number: 0F42
Signing time: Sun 07 Sep 2025 10:00:39 +0000
Manifest this update: Sun 07 Sep 2025 10:00:39 +0000
Manifest next update: Mon 08 Sep 2025 10:00:39 +0000
Files and hashes: 1: dC44IKB42kewo3Ti06ZtYmPB4j8.crl (hash: fWOIiXE2umOD5URVOh9a0r8nmeG6l+q86SfWPZ5it64=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/89fc51-d475-4eee-a970-930700ca617f/1/dC44IKB42kewo3Ti06ZtYmPB4j8.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/89fc51-d475-4eee-a970-930700ca617f/1/dC44IKB42kewo3Ti06ZtYmPB4j8.mft
rsync://rpki.ripe.net/repository/DEFAULT/dC44IKB42kewo3Ti06ZtYmPB4j8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9e:e2:22:9e:d4:d9:d1:05:86:05:19:7b:25:b6:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=742e3820a078da47b0a374e2d3a66d6263c1e23f
Validity
Not Before: Sep 7 10:00:39 2025 GMT
Not After : Sep 8 10:00:39 2025 GMT
Subject: CN=7e4853c400dab65863312dc46150e6488840f00a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:79:cf:7a:86:b4:d6:e1:7c:bf:c6:53:b4:2c:
e2:a9:c1:72:d8:91:1a:99:0e:e9:61:74:8d:b6:6c:
97:ff:9a:15:66:99:b0:a3:12:3f:d9:48:e1:e3:9b:
b4:82:1c:ce:19:8e:bc:34:5e:f4:4b:5a:95:31:de:
3e:35:05:e8:3b:87:f9:58:be:71:fa:8e:52:d2:8c:
f4:15:6b:a4:cc:c7:fb:09:53:d6:12:ef:ba:56:62:
34:72:19:3b:fb:cf:e5:7f:4f:2d:7e:87:32:43:e4:
dc:da:c4:15:0c:9a:5d:d4:39:30:98:ed:60:66:c1:
7c:d4:ea:ed:c4:17:5a:61:19:6e:6f:5b:64:2b:5c:
31:02:fd:d3:b4:03:80:10:f3:62:13:f8:b6:b7:27:
42:b9:c5:f0:45:cd:a2:06:b5:73:ff:c8:0f:55:84:
57:8e:34:be:af:11:48:88:d4:a5:7a:9f:4d:24:43:
b8:41:fa:a5:17:e7:48:77:58:f7:6c:d3:4f:14:c1:
8b:65:3b:15:7f:dc:e3:da:cd:5c:2d:88:6b:b2:42:
62:c2:dc:e4:b3:06:44:8e:88:a0:b7:cb:e9:ee:46:
e0:e0:13:97:a1:4f:98:eb:1b:5c:36:03:3d:f6:75:
7f:da:2f:d1:be:cb:a8:34:8f:21:37:db:34:64:cc:
b9:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:48:53:C4:00:DA:B6:58:63:31:2D:C4:61:50:E6:48:88:40:F0:0A
X509v3 Authority Key Identifier:
keyid:74:2E:38:20:A0:78:DA:47:B0:A3:74:E2:D3:A6:6D:62:63:C1:E2:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dC44IKB42kewo3Ti06ZtYmPB4j8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/89fc51-d475-4eee-a970-930700ca617f/1/dC44IKB42kewo3Ti06ZtYmPB4j8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/89fc51-d475-4eee-a970-930700ca617f/1/dC44IKB42kewo3Ti06ZtYmPB4j8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:10:40:d2:37:e5:df:2c:d7:66:49:c5:fb:ad:f3:fa:49:0c:
39:9a:e4:92:ab:58:e1:9c:eb:11:a2:b4:4c:5b:6c:be:08:e3:
7c:50:a7:24:3c:7f:f5:44:43:41:8a:37:8b:28:4d:65:89:a5:
b5:d4:d4:50:95:d2:6a:ea:59:e5:92:dd:99:2a:15:aa:78:61:
4e:6a:f0:e5:c9:01:de:0b:6d:11:1f:9c:47:48:68:63:f0:40:
03:7e:37:7d:90:a1:bf:dc:2a:c4:6f:5d:c2:13:58:52:c4:af:
ae:53:63:76:0b:49:70:85:22:4c:e9:55:1f:bb:d1:8c:14:fd:
10:a2:f1:16:db:23:4e:e5:63:30:5c:10:13:fc:f0:ad:71:a6:
17:91:a0:e4:60:86:d6:4d:d3:3f:90:1a:09:82:e3:38:48:26:
7e:fb:13:7f:b0:cb:c9:e5:a3:4e:5e:d1:0c:41:e6:99:b9:4a:
5e:00:8a:86:5f:1d:92:28:11:f2:b1:6d:4d:7a:87:e0:7b:24:
d6:ce:52:c7:7b:93:b3:30:e7:dc:6f:4f:90:ac:ad:4c:87:73:
00:5f:b8:c7:b1:e1:c6:7e:e9:8f:79:e5:27:60:15:ef:4a:f5:
d4:95:e2:ef:22:9b:df:7a:32:06:5d:e8:d5:70:dd:d6:c2:90:
f7:1b:b1:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:43:35 2025 by rpki-client