Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/8978cb-1a27-4f24-b552-336293734507/1/dPZ1oWeYFnk9WzCtLyU_VsjiRFw.mft
File: dPZ1oWeYFnk9WzCtLyU_VsjiRFw.mft (raw, json)
Hash identifier: wsHVeSZyBO4jnNmPtIQUV93mzQLlDvOzz4KTaL6kBD0=
Subject key identifier: E4:AD:5A:CB:F4:F3:AD:1C:9E:BB:AE:BB:91:0F:AC:14:EA:49:2B:A3
Authority key identifier: 74:F6:75:A1:67:98:16:79:3D:5B:30:AD:2F:25:3F:56:C8:E2:44:5C
Certificate issuer: /CN=74f675a1679816793d5b30ad2f253f56c8e2445c
Certificate serial: 019922FA405E95481BBD504D526D44597A45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dPZ1oWeYFnk9WzCtLyU_VsjiRFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/8978cb-1a27-4f24-b552-336293734507/1/dPZ1oWeYFnk9WzCtLyU_VsjiRFw.mft
Manifest number: 166D
Signing time: Sun 07 Sep 2025 07:00:49 +0000
Manifest this update: Sun 07 Sep 2025 07:00:49 +0000
Manifest next update: Mon 08 Sep 2025 07:00:49 +0000
Files and hashes: 1: dPZ1oWeYFnk9WzCtLyU_VsjiRFw.crl (hash: w7usfkN2JmkMQVPbXDlbdnKdAGtBHwaIn/3pFvu370Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/8978cb-1a27-4f24-b552-336293734507/1/dPZ1oWeYFnk9WzCtLyU_VsjiRFw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/8978cb-1a27-4f24-b552-336293734507/1/dPZ1oWeYFnk9WzCtLyU_VsjiRFw.mft
rsync://rpki.ripe.net/repository/DEFAULT/dPZ1oWeYFnk9WzCtLyU_VsjiRFw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:40:5e:95:48:1b:bd:50:4d:52:6d:44:59:7a:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74f675a1679816793d5b30ad2f253f56c8e2445c
Validity
Not Before: Sep 7 07:00:49 2025 GMT
Not After : Sep 8 07:00:49 2025 GMT
Subject: CN=e4ad5acbf4f3ad1c9ebbaebb910fac14ea492ba3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:60:4b:92:58:56:c7:52:fc:89:da:18:89:99:
e8:42:32:20:6f:4e:32:5d:84:9e:61:00:53:21:47:
75:a8:e5:27:d6:38:fc:62:18:ee:25:18:28:e2:28:
9b:00:9c:3f:53:ae:e5:7b:0f:72:dd:e4:73:42:11:
02:35:eb:37:a5:b3:cc:2f:3b:d5:1c:13:9b:87:1a:
e4:74:c9:7f:12:83:73:32:7c:5c:4f:73:06:bd:76:
4f:87:ee:b3:01:ef:b2:75:c3:32:68:2e:05:0f:2f:
06:8c:4c:f7:7c:67:23:fa:cf:00:47:12:87:f3:33:
fd:47:d0:3f:c1:4c:47:32:4e:ee:78:b0:d5:b9:a0:
66:41:62:b3:76:c0:eb:d7:07:c5:b5:23:4a:9d:d4:
fb:31:dc:89:48:e4:28:e5:af:03:1f:da:bf:3a:4c:
20:20:5d:34:7f:1f:6a:bd:53:ea:ae:50:2e:c9:c6:
c0:d4:77:7a:29:b4:13:8f:f6:cd:d2:2d:ca:25:f5:
25:f7:63:cb:aa:30:c8:e2:30:13:53:fa:ac:e5:57:
ae:7b:7f:cd:c7:4f:2c:23:ea:4c:ef:69:61:9e:9b:
f9:21:a2:35:17:8a:81:8f:e0:6d:97:b5:b6:d6:93:
d2:88:4f:42:6c:25:bf:95:ac:1a:35:9d:02:2a:38:
98:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:AD:5A:CB:F4:F3:AD:1C:9E:BB:AE:BB:91:0F:AC:14:EA:49:2B:A3
X509v3 Authority Key Identifier:
keyid:74:F6:75:A1:67:98:16:79:3D:5B:30:AD:2F:25:3F:56:C8:E2:44:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dPZ1oWeYFnk9WzCtLyU_VsjiRFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8978cb-1a27-4f24-b552-336293734507/1/dPZ1oWeYFnk9WzCtLyU_VsjiRFw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8978cb-1a27-4f24-b552-336293734507/1/dPZ1oWeYFnk9WzCtLyU_VsjiRFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:3e:78:7f:1c:7c:24:cc:10:33:30:fe:92:b2:df:3a:07:57:
d2:9f:5d:2a:ad:6a:1d:23:f9:f2:91:45:b7:45:e7:1a:67:c9:
be:92:f2:b6:5d:df:f4:44:ba:ff:28:6b:be:0d:b2:5e:4c:43:
e6:9c:77:eb:e5:9c:b0:0d:24:10:80:55:91:43:a8:1d:25:02:
1d:c3:67:cf:d1:7c:52:38:1d:4e:61:93:cc:92:ac:d1:7b:01:
c3:24:bc:f8:d5:5e:fe:39:fd:bc:04:26:f3:9b:4c:ee:7d:75:
ad:10:c0:0c:9d:8b:25:24:6b:49:a2:58:51:46:10:0b:d3:09:
51:78:c4:77:0c:fa:44:87:f1:17:91:fd:f7:6c:88:66:6b:0b:
5a:7a:03:32:fb:2d:ff:dc:81:22:f8:aa:8b:0b:fe:55:c1:b6:
2c:60:7d:75:11:fa:fa:92:f2:7f:06:5a:93:a1:96:e2:f2:97:
48:72:75:b3:fe:d3:af:ed:38:ef:9a:83:26:8c:66:8d:b9:02:
c3:d6:61:78:16:a2:f1:59:29:25:fc:33:33:84:09:b8:2a:79:
98:a6:4d:77:8f:25:03:f2:23:ce:c0:47:26:7b:84:7b:85:8e:
cd:26:6f:06:18:41:a5:5f:0a:34:37:b4:a6:67:a3:de:80:df:
a6:a5:58:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:10:25 2025 by rpki-client