Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/ddff53-d6aa-4956-ba60-b43665e5dad6/1/dpYjuLN_yMV0XVdcCe_Ezqi22gk.mft
File: dpYjuLN_yMV0XVdcCe_Ezqi22gk.mft (raw, json)
Hash identifier: f+LkQq8fkwP+ZQI1Jc25mVbvxP4Amxo/plfdhvyPlOs=
Subject key identifier: D4:43:E9:0E:89:EB:41:45:1E:48:94:37:E4:16:B6:3F:C0:36:3A:9C
Authority key identifier: 76:96:23:B8:B3:7F:C8:C5:74:5D:57:5C:09:EF:C4:CE:A8:B6:DA:09
Certificate issuer: /CN=769623b8b37fc8c5745d575c09efc4cea8b6da09
Certificate serial: 019923A033832C2D93313F0244E63E8D56D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dpYjuLN_yMV0XVdcCe_Ezqi22gk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/ddff53-d6aa-4956-ba60-b43665e5dad6/1/dpYjuLN_yMV0XVdcCe_Ezqi22gk.mft
Manifest number: 0DA9
Signing time: Sun 07 Sep 2025 10:02:05 +0000
Manifest this update: Sun 07 Sep 2025 10:02:05 +0000
Manifest next update: Mon 08 Sep 2025 10:02:05 +0000
Files and hashes: 1: dpYjuLN_yMV0XVdcCe_Ezqi22gk.crl (hash: F6r/bjqmlikKG10igG4K88xtMitv0KOyMNEzj/XZjMM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/ddff53-d6aa-4956-ba60-b43665e5dad6/1/dpYjuLN_yMV0XVdcCe_Ezqi22gk.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/ddff53-d6aa-4956-ba60-b43665e5dad6/1/dpYjuLN_yMV0XVdcCe_Ezqi22gk.mft
rsync://rpki.ripe.net/repository/DEFAULT/dpYjuLN_yMV0XVdcCe_Ezqi22gk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:33:83:2c:2d:93:31:3f:02:44:e6:3e:8d:56:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=769623b8b37fc8c5745d575c09efc4cea8b6da09
Validity
Not Before: Sep 7 10:02:05 2025 GMT
Not After : Sep 8 10:02:05 2025 GMT
Subject: CN=d443e90e89eb41451e489437e416b63fc0363a9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:cf:02:9c:9f:a9:43:b6:71:b0:02:8d:8e:73:
85:b4:39:13:ec:cb:d4:2a:9b:ad:de:69:43:66:cc:
23:85:d7:a0:18:fa:2a:db:e8:8b:fb:9b:bc:f4:1e:
64:e7:d4:de:1b:6a:d8:87:db:fe:fa:4f:eb:dc:a8:
e6:3a:0a:20:53:f5:de:7d:19:b5:eb:64:33:91:e8:
3e:c2:7e:66:25:0f:3a:56:e6:70:8b:9f:87:57:0d:
98:10:a0:43:09:1c:6e:a1:f7:8c:93:59:09:8d:e3:
84:38:69:fe:80:df:e5:55:07:5a:68:50:21:85:8e:
ee:91:4d:26:26:78:55:c9:95:3c:5a:09:43:f4:a6:
d4:8e:25:f3:f5:43:88:ab:22:7c:82:df:6c:5e:aa:
dc:26:0c:b1:87:07:69:1b:a2:c8:3d:5d:d8:9f:c9:
72:3d:4c:f2:bc:c8:2c:db:4c:8a:6b:3c:47:92:db:
7f:9d:4c:49:70:34:75:a5:a3:92:35:37:82:d1:eb:
1a:3a:08:05:8b:37:04:41:a1:d4:0d:29:36:15:c5:
06:20:90:45:a8:2b:1e:06:5e:74:99:4f:78:8a:44:
68:92:f7:ce:b5:9c:91:15:02:45:23:dd:d2:4d:34:
d2:6b:65:98:28:e7:f0:b8:48:60:af:ba:e8:1c:3f:
bb:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:43:E9:0E:89:EB:41:45:1E:48:94:37:E4:16:B6:3F:C0:36:3A:9C
X509v3 Authority Key Identifier:
keyid:76:96:23:B8:B3:7F:C8:C5:74:5D:57:5C:09:EF:C4:CE:A8:B6:DA:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dpYjuLN_yMV0XVdcCe_Ezqi22gk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/ddff53-d6aa-4956-ba60-b43665e5dad6/1/dpYjuLN_yMV0XVdcCe_Ezqi22gk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/ddff53-d6aa-4956-ba60-b43665e5dad6/1/dpYjuLN_yMV0XVdcCe_Ezqi22gk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:90:fa:df:fe:44:00:a1:26:b6:2f:00:b6:eb:c3:25:c3:99:
bc:d6:af:9f:17:de:e0:1b:24:9e:2b:4b:f4:e2:08:d5:72:13:
3d:36:6b:b9:36:8a:db:22:94:35:9e:2b:67:97:1e:a0:4b:15:
ee:5a:e8:6f:0a:f9:e1:27:a8:d3:e1:02:98:c0:4c:e6:43:42:
03:ad:6c:1c:02:63:aa:ed:dc:c9:d3:47:26:e1:97:de:b1:cc:
4b:ad:bc:93:4e:73:80:15:d6:22:dd:97:d4:17:92:15:e7:29:
73:75:69:cb:3a:81:ae:a2:53:3c:87:73:c4:1f:ba:f4:3a:0f:
a5:b1:c9:7e:58:7c:86:90:49:3f:ab:05:4c:68:cc:22:9a:a8:
e0:7f:14:39:b0:66:6a:c7:a1:5e:38:a2:cc:8d:53:86:59:a5:
f7:c2:3a:f5:65:48:09:df:5c:47:8b:d0:58:98:19:56:34:17:
13:45:17:3b:67:f6:7d:ad:18:99:db:fe:0b:f9:47:e3:1c:87:
48:ac:4e:89:22:f6:02:76:5b:9a:0f:75:62:f2:8c:77:d5:a9:
f2:75:c0:1e:ac:ba:10:ae:36:ca:49:37:fc:0e:45:79:17:18:
4e:c3:49:a3:80:53:10:f9:fd:ac:17:b6:e7:d6:59:30:d9:c8:
de:ee:9a:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:31:38 2025 by rpki-client