Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/9137ff-2063-4675-8de7-cfd3ff9fdf7b/1/DspuBsaCS9G4ERg-Dhf6GUltJhw.mft
File: DspuBsaCS9G4ERg-Dhf6GUltJhw.mft (raw, json)
Hash identifier: 9g9t+aRqHc8KFECJ8PNJIhknz1oVP2BjHRsT8FBpM2o=
Subject key identifier: 76:98:54:6B:93:3F:22:9B:AF:C2:20:D5:65:FE:2A:E2:EB:0F:DA:50
Authority key identifier: 0E:CA:6E:06:C6:82:4B:D1:B8:11:18:3E:0E:17:FA:19:49:6D:26:1C
Certificate issuer: /CN=0eca6e06c6824bd1b811183e0e17fa19496d261c
Certificate serial: 019965B67ECC014F978FABA4C425F70F88EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DspuBsaCS9G4ERg-Dhf6GUltJhw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/9137ff-2063-4675-8de7-cfd3ff9fdf7b/1/DspuBsaCS9G4ERg-Dhf6GUltJhw.mft
Manifest number: 0E87
Signing time: Sat 20 Sep 2025 06:01:22 +0000
Manifest this update: Sat 20 Sep 2025 06:01:22 +0000
Manifest next update: Sun 21 Sep 2025 06:01:22 +0000
Files and hashes: 1: DspuBsaCS9G4ERg-Dhf6GUltJhw.crl (hash: /wt0bAfa5EGgJDRcxzvzl0ckwIFWET3xTMrhoRchsqk=)
2: NfxOkyabvxkDjJyXjcgpTv_relY.roa (hash: gFCHNUeKHs4QF0iUA6YO68TkrbI25pBG+SYBY+DhWPg=)
3: x5OcpBtDjdmsNegcpqKRcYGfe4I.roa (hash: tztbQVf1Csx2bxGYr7VD6e2RtMD/c7biQ+Jk1Ftm9xk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/9137ff-2063-4675-8de7-cfd3ff9fdf7b/1/DspuBsaCS9G4ERg-Dhf6GUltJhw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/9137ff-2063-4675-8de7-cfd3ff9fdf7b/1/DspuBsaCS9G4ERg-Dhf6GUltJhw.mft
rsync://rpki.ripe.net/repository/DEFAULT/DspuBsaCS9G4ERg-Dhf6GUltJhw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Sep 2025 00:54:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:65:b6:7e:cc:01:4f:97:8f:ab:a4:c4:25:f7:0f:88:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0eca6e06c6824bd1b811183e0e17fa19496d261c
Validity
Not Before: Sep 20 06:01:22 2025 GMT
Not After : Sep 21 06:01:22 2025 GMT
Subject: CN=7698546b933f229bafc220d565fe2ae2eb0fda50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:5b:2e:3d:f7:ed:12:20:9e:9b:3d:83:b0:23:
17:27:62:15:d3:3d:71:bb:7d:1a:8e:c1:e9:f2:0a:
c7:47:52:86:71:b7:8a:2a:73:13:0a:fd:e7:71:c7:
37:17:ac:07:65:f3:dc:94:35:8f:fd:ab:93:f2:12:
1d:77:28:34:29:c9:92:18:36:7f:83:f9:02:1c:23:
11:da:74:d5:fe:b3:5a:6b:d9:ba:30:fb:03:2a:ac:
82:4c:fe:a2:39:c5:e0:04:fe:ef:d4:c2:38:54:aa:
e4:d4:e3:a4:c1:a8:2c:a6:16:e1:c7:67:4d:86:b1:
a5:9f:64:1e:85:69:2d:da:62:0b:91:1c:8d:0e:3e:
59:06:5e:e7:d6:e6:be:dd:2c:8b:71:74:4f:22:16:
df:3e:9e:5f:ca:f9:38:09:9b:a9:eb:36:f9:69:bc:
f0:65:b9:50:e8:05:80:f1:b7:bd:c8:d0:dd:c9:85:
03:bb:26:e5:da:74:ea:f6:35:0e:dd:90:9d:ba:12:
2e:95:b6:87:01:d0:64:46:f6:aa:13:8b:dc:28:8a:
e6:de:cc:8d:c3:fb:46:24:4b:12:36:c4:ec:69:4a:
5d:35:69:23:9c:b1:9a:0e:61:77:ec:fa:d6:1c:d7:
6b:25:b1:61:1a:4b:02:7b:fd:3c:61:15:ac:c8:f9:
e5:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:98:54:6B:93:3F:22:9B:AF:C2:20:D5:65:FE:2A:E2:EB:0F:DA:50
X509v3 Authority Key Identifier:
keyid:0E:CA:6E:06:C6:82:4B:D1:B8:11:18:3E:0E:17:FA:19:49:6D:26:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DspuBsaCS9G4ERg-Dhf6GUltJhw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/9137ff-2063-4675-8de7-cfd3ff9fdf7b/1/DspuBsaCS9G4ERg-Dhf6GUltJhw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/9137ff-2063-4675-8de7-cfd3ff9fdf7b/1/DspuBsaCS9G4ERg-Dhf6GUltJhw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:0e:24:64:fb:a1:fd:34:7a:1c:a8:d2:d2:74:05:19:ba:10:
76:11:ad:ec:56:18:d4:2a:65:c3:23:da:c5:9c:bc:d3:fa:68:
a4:bd:e7:98:59:3f:3b:38:aa:1a:7c:72:09:af:fb:e2:ce:d7:
9b:0e:16:dc:c5:58:15:23:d0:90:29:84:7f:06:4c:4e:15:5b:
ea:25:a7:2b:18:b4:44:8d:03:87:82:3c:a4:7a:c7:ba:b3:0f:
02:0c:84:d0:a9:14:c0:1a:e2:69:37:4f:59:37:86:16:aa:d8:
15:0f:c1:a6:0e:0e:55:ce:34:36:9d:14:8b:be:78:61:83:83:
83:99:a1:3f:82:37:1d:b8:8a:35:0a:26:11:50:a0:1e:24:db:
bb:e4:cc:20:1a:f8:02:f7:f9:59:93:a2:f5:4e:27:5a:06:ee:
6c:a7:98:16:76:60:72:2a:2b:79:70:7a:99:a8:59:b5:6a:35:
95:a1:2b:3d:fd:f1:3d:22:46:bc:20:2a:5a:37:29:ff:2f:7a:
e3:24:27:67:85:ce:41:f7:c1:41:89:04:df:5d:a4:1b:91:ac:
e3:d7:c7:5f:02:59:10:e9:6a:eb:89:ef:a3:83:e5:3e:46:08:
59:b5:0c:38:2d:fe:59:f9:45:1d:e3:7f:b6:44:63:ab:4e:0d:
29:33:df:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 20 09:03:13 2025 by rpki-client