Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/9a6bc2-8e5f-4a6d-b206-27cb9dcd60fc/1/Dh-3D5C6LPBYwSBt6w73lzcCbpA.mft
File: Dh-3D5C6LPBYwSBt6w73lzcCbpA.mft (raw, json)
Hash identifier: H96Bj9T/ZKk0L9tq3iRXSEOYZqZugubL/RUKYxKroBY=
Subject key identifier: 88:47:79:98:FB:AC:7E:6C:6D:9B:1B:27:4A:30:37:E5:32:4C:FE:D3
Authority key identifier: 0E:1F:B7:0F:90:BA:2C:F0:58:C1:20:6D:EB:0E:F7:97:37:02:6E:90
Certificate issuer: /CN=0e1fb70f90ba2cf058c1206deb0ef79737026e90
Certificate serial: 0199228C24D60DF2295B00423E0249D01371
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dh-3D5C6LPBYwSBt6w73lzcCbpA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/9a6bc2-8e5f-4a6d-b206-27cb9dcd60fc/1/Dh-3D5C6LPBYwSBt6w73lzcCbpA.mft
Manifest number: 0756
Signing time: Sun 07 Sep 2025 05:00:33 +0000
Manifest this update: Sun 07 Sep 2025 05:00:33 +0000
Manifest next update: Mon 08 Sep 2025 05:00:33 +0000
Files and hashes: 1: Dh-3D5C6LPBYwSBt6w73lzcCbpA.crl (hash: LTLcf+QtGDwVwZyYRwpzkPUNawiU4v3XhSNGy3CCGig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/9a6bc2-8e5f-4a6d-b206-27cb9dcd60fc/1/Dh-3D5C6LPBYwSBt6w73lzcCbpA.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/9a6bc2-8e5f-4a6d-b206-27cb9dcd60fc/1/Dh-3D5C6LPBYwSBt6w73lzcCbpA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dh-3D5C6LPBYwSBt6w73lzcCbpA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:24:d6:0d:f2:29:5b:00:42:3e:02:49:d0:13:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e1fb70f90ba2cf058c1206deb0ef79737026e90
Validity
Not Before: Sep 7 05:00:33 2025 GMT
Not After : Sep 8 05:00:33 2025 GMT
Subject: CN=88477998fbac7e6c6d9b1b274a3037e5324cfed3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:64:a2:e6:49:8d:b6:c3:44:a4:0d:c9:32:86:
cb:06:13:bc:05:8d:5a:29:7c:d4:c0:25:3b:88:92:
4e:5c:3f:bc:bc:78:24:70:43:6a:23:9f:ea:8c:25:
59:44:79:b5:c6:c5:dd:e3:ef:7f:fa:fd:c3:70:1b:
9e:63:b1:b7:9c:04:7d:85:a5:2d:93:7d:4a:84:5f:
ab:9a:e5:41:cc:f9:58:f3:f7:ec:f8:31:33:49:ea:
56:91:30:a8:2f:1b:e0:c8:74:93:ba:98:d8:1e:05:
e5:74:21:84:21:bc:cc:69:4b:9a:ae:4e:88:36:04:
95:46:9c:9d:80:ca:4c:2e:97:22:b4:27:70:5c:98:
85:a7:07:f7:a1:90:1c:34:c4:53:13:a4:a4:61:60:
f9:af:19:28:db:94:00:31:82:f8:14:13:70:ae:ca:
5c:29:2a:02:15:aa:7f:89:da:78:1c:1d:79:12:7b:
13:0c:da:d9:5d:42:ff:84:c9:a9:c5:4a:f9:e9:1f:
a6:20:27:91:04:6e:b1:92:9a:29:34:8f:ff:69:b3:
45:cd:21:0c:cf:f4:be:3e:2c:98:67:ae:9a:b7:a4:
ed:1c:77:80:00:22:4d:6b:02:57:f3:4d:be:55:36:
eb:65:ea:3f:bb:0e:bb:cc:8f:4f:bc:44:b8:fb:51:
01:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:47:79:98:FB:AC:7E:6C:6D:9B:1B:27:4A:30:37:E5:32:4C:FE:D3
X509v3 Authority Key Identifier:
keyid:0E:1F:B7:0F:90:BA:2C:F0:58:C1:20:6D:EB:0E:F7:97:37:02:6E:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dh-3D5C6LPBYwSBt6w73lzcCbpA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/9a6bc2-8e5f-4a6d-b206-27cb9dcd60fc/1/Dh-3D5C6LPBYwSBt6w73lzcCbpA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/9a6bc2-8e5f-4a6d-b206-27cb9dcd60fc/1/Dh-3D5C6LPBYwSBt6w73lzcCbpA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:5c:ae:54:4c:ba:22:7b:4a:54:56:d0:05:a5:eb:de:bc:65:
73:2e:87:5a:4d:64:2b:a9:ec:cb:3a:8f:3d:9e:50:33:41:d9:
73:52:bc:6a:6d:9e:3e:bf:ee:5e:5f:32:f8:9b:9c:93:c1:36:
81:00:91:fd:99:0e:56:36:24:b9:a1:6d:48:fe:dc:a7:6d:31:
a4:3c:f7:92:8f:cc:96:7c:10:be:11:95:91:7d:73:be:72:15:
81:2a:7f:8d:ae:39:00:bc:8b:c1:d6:db:36:9e:89:ae:3b:75:
c5:7f:39:93:c5:25:8f:fb:8b:b2:c7:53:cc:18:1b:13:b2:7a:
61:a9:51:82:99:90:49:53:82:2b:9f:4b:b2:7b:25:fc:3d:5f:
42:33:84:54:11:d7:e5:b2:3b:66:a4:03:c8:f6:6f:bb:0f:a9:
63:fd:7a:6e:9c:94:db:47:91:c0:36:c9:ae:22:5b:4f:1b:02:
04:09:7e:42:bf:7e:b6:c8:60:ec:a0:9c:96:77:54:bf:76:8e:
61:2d:01:8e:7d:c2:c9:98:c0:08:6d:a3:a5:d9:a1:62:e8:79:
b0:89:4d:4a:de:b8:2a:6d:79:68:65:13:58:00:c4:da:66:82:
54:76:4d:1a:07:d7:99:97:0c:d4:f4:63:68:b5:6b:3f:1f:f8:
50:1f:e1:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:50:17 2025 by rpki-client