Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/53be2f-e997-470d-93bf-41b5863ca8db/1/DhI9xSvlTkcrv-N18u1B5JqHg-c.mft
File: DhI9xSvlTkcrv-N18u1B5JqHg-c.mft (raw, json)
Hash identifier: BZOvi4jNxBCYUj+Q9XkImuSl+6vbJ54sIGSnF+2OpGo=
Subject key identifier: A1:2E:9E:E9:86:50:74:2D:02:DD:C3:8C:BB:3B:1F:1E:35:E7:11:3E
Authority key identifier: 0E:12:3D:C5:2B:E5:4E:47:2B:BF:E3:75:F2:ED:41:E4:9A:87:83:E7
Certificate issuer: /CN=0e123dc52be54e472bbfe375f2ed41e49a8783e7
Certificate serial: 019922C3542E1631CF4E380E0BD43DC71ABD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DhI9xSvlTkcrv-N18u1B5JqHg-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/53be2f-e997-470d-93bf-41b5863ca8db/1/DhI9xSvlTkcrv-N18u1B5JqHg-c.mft
Manifest number: 06A0
Signing time: Sun 07 Sep 2025 06:00:50 +0000
Manifest this update: Sun 07 Sep 2025 06:00:50 +0000
Manifest next update: Mon 08 Sep 2025 06:00:50 +0000
Files and hashes: 1: DhI9xSvlTkcrv-N18u1B5JqHg-c.crl (hash: oCzBS1LhDRDKQwvONPdLKrVwBte2W+v6mH/DCDanYKY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/53be2f-e997-470d-93bf-41b5863ca8db/1/DhI9xSvlTkcrv-N18u1B5JqHg-c.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/53be2f-e997-470d-93bf-41b5863ca8db/1/DhI9xSvlTkcrv-N18u1B5JqHg-c.mft
rsync://rpki.ripe.net/repository/DEFAULT/DhI9xSvlTkcrv-N18u1B5JqHg-c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:54:2e:16:31:cf:4e:38:0e:0b:d4:3d:c7:1a:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e123dc52be54e472bbfe375f2ed41e49a8783e7
Validity
Not Before: Sep 7 06:00:50 2025 GMT
Not After : Sep 8 06:00:50 2025 GMT
Subject: CN=a12e9ee98650742d02ddc38cbb3b1f1e35e7113e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:62:7c:7a:c1:b1:7e:8a:6a:75:0f:86:33:ba:
f0:82:0e:48:30:91:aa:73:46:64:51:0f:9d:c2:3c:
7a:3f:f8:90:7e:bd:c9:d0:70:78:c3:b8:b0:97:ae:
ac:da:ee:1c:49:40:6d:19:af:cb:68:66:a2:2c:a3:
e3:c3:35:e1:a1:78:ec:1a:bf:03:b8:55:8f:15:e7:
e0:23:1d:8e:0a:c0:e3:3f:6f:bc:35:94:d1:31:d4:
f7:cf:b2:c3:a7:21:4d:3b:ee:b6:15:f5:d8:2c:ea:
7d:79:84:3b:80:46:fa:79:2a:f7:f0:ec:a1:d2:72:
fd:2e:bb:67:72:b4:24:ad:11:93:65:a1:93:ca:97:
e9:67:0a:39:01:b2:67:1f:30:20:c8:d7:4c:4b:67:
16:25:d3:5c:6d:15:85:d1:eb:fc:e4:6a:30:aa:35:
2a:43:78:d9:31:20:0a:11:da:6c:65:56:ea:fd:80:
e1:67:75:85:0b:52:ce:5d:60:1d:30:f5:1b:ab:4d:
b4:62:4e:6d:b1:c0:ff:1e:3f:62:e5:b7:2b:31:8e:
1b:31:f6:6a:d0:4f:3c:87:4b:11:b7:4d:96:6f:8d:
e9:a3:22:ad:ac:39:3d:88:a7:8a:06:0a:fd:25:7a:
5f:c0:22:21:50:3e:30:e9:9e:7a:3b:51:12:64:5f:
36:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:2E:9E:E9:86:50:74:2D:02:DD:C3:8C:BB:3B:1F:1E:35:E7:11:3E
X509v3 Authority Key Identifier:
keyid:0E:12:3D:C5:2B:E5:4E:47:2B:BF:E3:75:F2:ED:41:E4:9A:87:83:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DhI9xSvlTkcrv-N18u1B5JqHg-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/53be2f-e997-470d-93bf-41b5863ca8db/1/DhI9xSvlTkcrv-N18u1B5JqHg-c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/53be2f-e997-470d-93bf-41b5863ca8db/1/DhI9xSvlTkcrv-N18u1B5JqHg-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:9f:4c:da:7d:bc:f7:96:70:21:be:f2:ff:27:72:76:44:88:
66:0f:01:c7:c0:0c:ca:c8:93:7f:ab:7e:4a:cb:d9:18:2a:a5:
0e:32:95:a8:f4:97:84:ba:18:7e:ee:7c:a4:0d:58:a8:27:2b:
87:1f:e2:80:b7:ad:a1:d0:63:18:20:01:e4:98:67:9b:bf:76:
7a:9c:a5:5f:95:bc:71:b0:0e:5e:30:f7:86:f3:9a:c8:5c:5b:
9c:45:86:f0:53:3f:1a:de:35:d1:a9:e7:8b:79:2c:4b:c3:94:
8c:97:bd:09:8f:48:8b:cb:a8:f5:74:e5:12:ff:04:33:cd:c0:
d8:eb:58:8c:a2:4f:9b:82:b5:06:d2:ae:2e:1e:38:61:b8:87:
1c:5d:45:d4:d3:39:dd:26:1c:25:77:ae:94:19:5b:05:fc:18:
de:b9:dd:96:82:11:8e:a1:f2:97:27:9c:a8:c7:a6:b7:da:3f:
11:94:50:57:f2:e1:58:ad:fc:1b:09:d6:24:cf:4f:01:6c:f3:
c5:b3:75:e1:88:61:06:62:40:8b:0a:56:76:9c:5c:78:59:dc:
38:80:5a:28:59:05:a4:7a:6f:13:af:3c:0c:f6:3c:fe:89:44:
07:2a:6c:21:48:91:d3:b2:25:d0:82:0e:7a:09:59:cd:05:05:
fe:4c:e8:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:22:09 2025 by rpki-client