Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/4c8208-ba30-4716-a6c8-84f3524626bd/1/DlbJ5Y2Wrx5BMNciQiEZKywTKlw.mft
File: DlbJ5Y2Wrx5BMNciQiEZKywTKlw.mft (raw, json)
Hash identifier: i1Cs6XLenHvTtt3UBSs5lrN1XHSrML3zQVC7hDkuC+8=
Subject key identifier: B4:54:49:49:5E:5D:6F:9B:3B:C3:AB:D9:22:81:51:ED:91:7F:66:A7
Authority key identifier: 0E:56:C9:E5:8D:96:AF:1E:41:30:D7:22:42:21:19:2B:2C:13:2A:5C
Certificate issuer: /CN=0e56c9e58d96af1e4130d7224221192b2c132a5c
Certificate serial: 019923A0848D1BEF9769D82E667F5CB86212
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DlbJ5Y2Wrx5BMNciQiEZKywTKlw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/4c8208-ba30-4716-a6c8-84f3524626bd/1/DlbJ5Y2Wrx5BMNciQiEZKywTKlw.mft
Manifest number: 1603
Signing time: Sun 07 Sep 2025 10:02:26 +0000
Manifest this update: Sun 07 Sep 2025 10:02:26 +0000
Manifest next update: Mon 08 Sep 2025 10:02:26 +0000
Files and hashes: 1: DlbJ5Y2Wrx5BMNciQiEZKywTKlw.crl (hash: NAYkDFkLtDBe085LsKZRMDc+eNywjFevyzRTQWgf14s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/4c8208-ba30-4716-a6c8-84f3524626bd/1/DlbJ5Y2Wrx5BMNciQiEZKywTKlw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/4c8208-ba30-4716-a6c8-84f3524626bd/1/DlbJ5Y2Wrx5BMNciQiEZKywTKlw.mft
rsync://rpki.ripe.net/repository/DEFAULT/DlbJ5Y2Wrx5BMNciQiEZKywTKlw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:84:8d:1b:ef:97:69:d8:2e:66:7f:5c:b8:62:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e56c9e58d96af1e4130d7224221192b2c132a5c
Validity
Not Before: Sep 7 10:02:26 2025 GMT
Not After : Sep 8 10:02:26 2025 GMT
Subject: CN=b45449495e5d6f9b3bc3abd9228151ed917f66a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:89:e1:b1:9d:63:e1:da:1c:2c:fd:ec:68:54:
4d:bf:30:ce:71:8c:88:3f:fa:3f:ce:ba:c4:43:88:
10:bc:9e:7a:3e:56:b6:9b:1d:06:b3:cc:0f:a3:50:
de:be:64:00:d8:7a:9e:08:f5:81:00:db:0a:a8:e8:
a0:89:e4:ba:34:72:02:c1:ef:5f:01:c5:7f:f6:c8:
f3:09:91:38:94:47:f9:ae:3a:40:0c:65:9e:0a:28:
0e:56:0a:00:0b:fd:e8:e3:ec:45:d2:97:fc:5c:9b:
ec:20:28:ca:fa:06:d9:89:df:64:25:8d:8a:0a:f2:
35:b4:55:59:35:a1:fb:2c:c6:7d:65:3a:54:e5:e7:
0a:c1:70:3c:5f:60:89:fe:64:fa:72:a9:af:48:3d:
aa:76:07:85:10:42:ed:99:6c:c1:cd:f8:7c:c8:f9:
ff:3f:46:21:e3:5d:53:0f:6f:5e:3c:aa:a5:f2:66:
c5:69:c8:e1:3f:a1:ff:7c:2d:1e:fb:7d:e8:f0:88:
9f:17:6b:1f:3b:e9:bc:49:e4:a6:a3:9c:45:89:4c:
f3:f7:aa:98:67:48:3b:37:e7:85:a6:30:ac:04:e9:
32:f0:8c:a7:9c:52:94:0f:14:4e:9a:48:f7:77:f7:
cb:e0:53:c6:e6:74:dc:49:9c:3c:02:c0:e8:2a:9b:
d3:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:54:49:49:5E:5D:6F:9B:3B:C3:AB:D9:22:81:51:ED:91:7F:66:A7
X509v3 Authority Key Identifier:
keyid:0E:56:C9:E5:8D:96:AF:1E:41:30:D7:22:42:21:19:2B:2C:13:2A:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DlbJ5Y2Wrx5BMNciQiEZKywTKlw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4c8208-ba30-4716-a6c8-84f3524626bd/1/DlbJ5Y2Wrx5BMNciQiEZKywTKlw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4c8208-ba30-4716-a6c8-84f3524626bd/1/DlbJ5Y2Wrx5BMNciQiEZKywTKlw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:7b:30:64:2b:55:80:da:00:47:d0:13:1a:8e:89:16:f0:de:
17:59:e4:02:3e:24:0b:03:52:41:6d:40:6e:76:c2:33:7a:95:
2c:a6:e5:4f:2f:6e:1b:57:84:0e:ca:07:dd:2e:28:9a:60:2b:
6a:2b:52:bb:12:a6:23:6c:d5:da:48:84:5a:98:5f:b3:80:4c:
c4:b6:6a:bc:6c:55:00:33:7f:b5:8b:77:09:83:fe:04:09:31:
29:03:dd:07:ff:00:28:b4:ec:65:3c:7d:39:f4:97:9a:3e:aa:
24:da:f0:c3:d8:8c:08:75:7f:cd:46:b7:7d:ea:44:7a:70:05:
79:e9:85:b9:a3:3c:5b:78:4c:41:87:45:2f:67:9d:5d:50:94:
87:23:ec:6e:d6:89:dd:f4:24:88:81:5c:e4:4b:1c:ce:ff:36:
73:83:da:68:82:b3:d1:02:da:02:6a:8c:e7:f0:12:7d:bc:fc:
82:48:48:83:dd:74:b6:38:58:5d:8d:b8:33:79:4b:10:1b:fa:
83:1c:5f:b9:7d:7a:e9:e1:cc:c7:10:16:f1:30:56:63:04:3c:
fc:60:52:4c:5a:e0:00:8d:89:65:89:83:2b:6b:d1:c2:48:c1:
2f:16:84:de:33:a1:88:89:23:b7:26:73:fc:a4:ce:25:04:52:
32:67:f3:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:20:48 2025 by rpki-client