Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/353282-53e2-46a2-8fc4-41d49a8ffc81/1/DZ40sUlHfVXvC1lipeXgDN-1hIk.mft
File: DZ40sUlHfVXvC1lipeXgDN-1hIk.mft (raw, json)
Hash identifier: 5YULOluLKmERlSOedo8e91Kd+6wX5YK7gV2t2KaD3VQ=
Subject key identifier: 04:10:B3:D6:D8:58:A6:EC:4F:C6:1C:22:D6:AB:CE:A8:A9:34:C6:A3
Authority key identifier: 0D:9E:34:B1:49:47:7D:55:EF:0B:59:62:A5:E5:E0:0C:DF:B5:84:89
Certificate issuer: /CN=0d9e34b149477d55ef0b5962a5e5e00cdfb58489
Certificate serial: 019933127106747578C8EBEF7281B7687832
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DZ40sUlHfVXvC1lipeXgDN-1hIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/353282-53e2-46a2-8fc4-41d49a8ffc81/1/DZ40sUlHfVXvC1lipeXgDN-1hIk.mft
Manifest number: 13B6
Signing time: Wed 10 Sep 2025 10:01:10 +0000
Manifest this update: Wed 10 Sep 2025 10:01:10 +0000
Manifest next update: Thu 11 Sep 2025 10:01:10 +0000
Files and hashes: 1: DZ40sUlHfVXvC1lipeXgDN-1hIk.crl (hash: aHZbJQRvpvcIMhVsk4VjHy8Ua03l+/1ar/FeRHH4s2g=)
2: WGiFR-bGPm6J5ZNuq_i5kJB6Nzw.roa (hash: 74v2TFsnggZrqZFnVMwJ7ZEDqgCLlK+dkXL3Ua1EXV4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/353282-53e2-46a2-8fc4-41d49a8ffc81/1/DZ40sUlHfVXvC1lipeXgDN-1hIk.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/353282-53e2-46a2-8fc4-41d49a8ffc81/1/DZ40sUlHfVXvC1lipeXgDN-1hIk.mft
rsync://rpki.ripe.net/repository/DEFAULT/DZ40sUlHfVXvC1lipeXgDN-1hIk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 10:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:33:12:71:06:74:75:78:c8:eb:ef:72:81:b7:68:78:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d9e34b149477d55ef0b5962a5e5e00cdfb58489
Validity
Not Before: Sep 10 10:01:10 2025 GMT
Not After : Sep 11 10:01:10 2025 GMT
Subject: CN=0410b3d6d858a6ec4fc61c22d6abcea8a934c6a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:6c:ee:79:5d:ba:71:ee:1f:9a:e9:fe:77:e0:
72:e3:ea:42:eb:bf:2d:ae:2c:30:ea:56:e0:fb:51:
a2:cb:05:1e:97:3f:80:4c:55:22:bc:60:e3:ad:3e:
2b:7b:f7:ca:ab:73:08:10:f3:68:2f:84:8c:e8:26:
3c:e7:11:2b:f4:65:8a:7a:7c:f2:b9:e4:ad:17:78:
c9:5e:39:cf:b0:02:70:67:14:2f:8e:7d:41:06:09:
0e:2e:f4:e8:04:d8:11:49:e1:56:f0:ae:38:cb:54:
d2:fa:a6:ab:e6:7d:34:ff:e5:a8:17:18:f2:b1:83:
52:7b:50:e5:4c:98:85:ff:d0:25:33:db:46:c1:10:
b1:35:75:55:c2:f5:11:ba:6a:61:73:2b:ff:51:84:
e6:a6:e9:87:67:f7:5d:14:32:e1:fe:17:21:72:11:
15:8a:92:0d:cc:b8:76:c6:49:fa:92:89:b2:53:f5:
95:94:38:11:27:6b:62:d1:e7:6d:df:4e:14:52:7d:
da:e4:d5:63:fe:e2:7d:f2:49:77:50:02:21:f1:9d:
73:7d:dd:60:43:85:8a:47:9a:42:9d:06:1c:61:e1:
d3:f8:ae:06:8e:97:5c:63:31:d4:65:0d:80:05:54:
43:4b:86:2b:5c:ff:b5:e7:3c:aa:94:cd:19:8f:62:
94:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:10:B3:D6:D8:58:A6:EC:4F:C6:1C:22:D6:AB:CE:A8:A9:34:C6:A3
X509v3 Authority Key Identifier:
keyid:0D:9E:34:B1:49:47:7D:55:EF:0B:59:62:A5:E5:E0:0C:DF:B5:84:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DZ40sUlHfVXvC1lipeXgDN-1hIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/353282-53e2-46a2-8fc4-41d49a8ffc81/1/DZ40sUlHfVXvC1lipeXgDN-1hIk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/353282-53e2-46a2-8fc4-41d49a8ffc81/1/DZ40sUlHfVXvC1lipeXgDN-1hIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:aa:c3:64:ef:26:b5:7c:2f:54:2c:ca:c7:eb:0e:85:a4:81:
93:9a:de:71:37:c7:59:f1:81:a0:e0:dd:f7:3f:50:65:0b:e7:
a5:16:3a:5e:3c:bd:6a:c8:5b:a7:7a:06:a0:01:b9:27:53:7b:
db:f2:20:b0:0a:41:d2:11:d7:ca:b1:47:2b:43:09:01:78:2c:
a3:02:93:d6:fd:30:f7:e2:0c:aa:11:73:a2:84:ad:d9:4d:c8:
3c:51:cb:a0:43:4f:57:43:c1:7f:60:77:31:68:d8:45:84:1c:
77:af:33:e3:66:89:7e:d8:30:92:04:ba:34:07:e3:95:15:5d:
ff:8a:11:6b:21:c6:f8:d6:04:0d:25:10:47:a8:bd:47:9c:e7:
ea:32:42:fa:a0:7a:54:9d:8d:66:b7:83:8d:22:f8:b7:9a:9c:
39:a0:b1:5a:5a:50:40:05:12:c6:17:fa:f1:71:5f:d1:57:87:
7d:3b:e4:75:d9:e2:46:ca:35:52:4c:20:ec:fa:27:4a:30:5b:
16:7f:f4:c6:5d:7d:00:5e:74:44:99:3c:6e:e0:3d:85:88:9a:
30:b3:13:dd:c8:de:f3:6a:b2:79:e6:b1:c3:7e:20:5d:a7:20:
d6:e7:ef:86:f4:77:9b:a8:c1:7f:52:2a:44:32:44:a5:99:52:
6c:23:80:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 15:41:01 2025 by rpki-client