Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/cf720e-4d33-4db1-86e9-fc2ec4bb5967/1/DhcO6FnpH0lz3kpXKxutLzpdGCU.mft
File: DhcO6FnpH0lz3kpXKxutLzpdGCU.mft (raw, json)
Hash identifier: aS8Ic37QicuiqF/BPYS2LnuUHprwVuRadjAvzj9KNGU=
Subject key identifier: 8A:CA:60:37:C2:BE:C0:E4:85:6E:58:91:F4:89:43:A7:08:65:63:F4
Authority key identifier: 0E:17:0E:E8:59:E9:1F:49:73:DE:4A:57:2B:1B:AD:2F:3A:5D:18:25
Certificate issuer: /CN=0e170ee859e91f4973de4a572b1bad2f3a5d1825
Certificate serial: 0199228CD98DF307A4CA930C3C84D2E694A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DhcO6FnpH0lz3kpXKxutLzpdGCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/cf720e-4d33-4db1-86e9-fc2ec4bb5967/1/DhcO6FnpH0lz3kpXKxutLzpdGCU.mft
Manifest number: 1671
Signing time: Sun 07 Sep 2025 05:01:19 +0000
Manifest this update: Sun 07 Sep 2025 05:01:19 +0000
Manifest next update: Mon 08 Sep 2025 05:01:19 +0000
Files and hashes: 1: DhcO6FnpH0lz3kpXKxutLzpdGCU.crl (hash: T6NcBm/VgJMLKsi4GoD2bTPc+u4LPJXRVoc24+wozN0=)
2: ULOFbzP3h9-3w0H4Yx7Si28ClYo.roa (hash: d25VIffAJQDV7vgvStWkaS/C+7kyYqCn7zctEo0yqWU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/cf720e-4d33-4db1-86e9-fc2ec4bb5967/1/DhcO6FnpH0lz3kpXKxutLzpdGCU.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/cf720e-4d33-4db1-86e9-fc2ec4bb5967/1/DhcO6FnpH0lz3kpXKxutLzpdGCU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DhcO6FnpH0lz3kpXKxutLzpdGCU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:d9:8d:f3:07:a4:ca:93:0c:3c:84:d2:e6:94:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e170ee859e91f4973de4a572b1bad2f3a5d1825
Validity
Not Before: Sep 7 05:01:19 2025 GMT
Not After : Sep 8 05:01:19 2025 GMT
Subject: CN=8aca6037c2bec0e4856e5891f48943a7086563f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:33:be:9c:7e:a0:f3:9e:55:d5:94:af:a9:66:
13:55:61:ef:2d:bb:f3:ed:45:ef:03:31:40:3f:df:
b3:08:59:ea:ab:fd:06:d8:5e:9e:9a:94:8e:d8:cb:
91:5e:39:dc:b8:2c:24:d6:da:36:c3:57:93:4a:a8:
47:b6:71:a8:18:14:6f:0d:bd:3e:aa:f6:4a:25:13:
35:17:d1:18:d0:aa:45:5c:e4:74:7b:a7:fe:8b:85:
27:28:8c:21:a0:2c:69:ba:51:9f:47:2d:df:cf:f7:
68:70:e0:49:9a:1c:63:1b:e2:c3:92:d8:5d:63:f5:
9d:5e:35:29:f0:81:53:1a:88:29:10:52:a6:88:d0:
5f:ba:49:b1:6d:e3:80:8f:57:50:e3:50:48:4a:dd:
a2:0a:66:ee:45:98:6c:3a:ae:ac:ba:2c:37:5c:c0:
52:5b:a7:33:1f:48:60:a9:66:54:95:b0:80:8c:39:
f0:3a:e2:27:03:fd:e7:38:ff:f3:6c:bc:cd:7b:7c:
e0:3e:6e:a8:b7:76:06:bb:1f:8e:e7:c8:29:15:12:
50:05:32:60:a9:43:98:6c:0a:83:42:99:bd:03:cf:
7d:2d:47:34:cb:32:47:cd:e1:60:a0:80:9a:7d:74:
f7:06:9d:b5:03:3b:5e:a3:7e:ab:f0:66:de:f9:c4:
c0:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:CA:60:37:C2:BE:C0:E4:85:6E:58:91:F4:89:43:A7:08:65:63:F4
X509v3 Authority Key Identifier:
keyid:0E:17:0E:E8:59:E9:1F:49:73:DE:4A:57:2B:1B:AD:2F:3A:5D:18:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DhcO6FnpH0lz3kpXKxutLzpdGCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/cf720e-4d33-4db1-86e9-fc2ec4bb5967/1/DhcO6FnpH0lz3kpXKxutLzpdGCU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/cf720e-4d33-4db1-86e9-fc2ec4bb5967/1/DhcO6FnpH0lz3kpXKxutLzpdGCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:92:71:94:85:35:a8:28:32:f0:cc:2e:dd:0e:eb:18:55:8a:
db:e2:2f:f7:27:2b:4f:1e:55:ee:94:ad:06:4e:6c:a5:79:9e:
9f:5e:95:52:2b:b1:f2:df:b5:1f:77:64:87:d4:8e:c9:6b:61:
a6:82:03:f4:76:b5:62:96:75:4f:78:5c:39:d8:ff:cf:06:1f:
af:1e:dc:bd:37:02:5f:de:ea:07:4b:b7:0a:9c:21:8c:b1:74:
b1:f4:5f:b7:d5:48:bb:df:f0:e1:6b:77:2b:76:03:9d:a2:a4:
28:b1:a6:b6:37:31:2a:30:c1:6e:63:a9:8f:13:5c:05:7e:ab:
c4:e2:9c:78:af:c6:85:02:66:4c:8c:f4:eb:2d:90:4a:bf:90:
8d:b9:10:6a:96:e7:c9:c0:09:ad:21:e5:86:3f:95:89:47:2b:
f0:91:cc:1f:a9:5e:da:bc:e0:17:12:2f:5a:e8:d2:33:f2:bc:
3f:2a:e5:34:b2:77:a2:a1:f5:4b:3a:22:74:a9:95:b1:7e:38:
c7:94:b2:db:d0:55:5a:8f:bc:9e:88:1a:d3:a2:8e:a7:e5:c7:
26:f7:71:9b:5f:c3:1b:d6:c3:e7:65:0b:56:0e:90:64:c0:59:
db:76:f5:4e:9c:f9:a1:2f:74:78:ce:5f:d5:0e:16:80:c1:e1:
92:5a:2e:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:33:07 2025 by rpki-client