Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/bd1b8f-d065-4cc7-9a1f-45ab3f520f00/1/DZxWoYyYei0aLnBEt-MbMhv3rBY.mft
File: DZxWoYyYei0aLnBEt-MbMhv3rBY.mft (raw, json)
Hash identifier: uANPr1nFTY2sOm30EH68IOrPT+jiEgJhZP+RkDEKQ2g=
Subject key identifier: 53:25:35:09:83:EE:71:48:9C:EE:2A:8B:B8:EA:D5:6B:FF:56:ED:5F
Authority key identifier: 0D:9C:56:A1:8C:98:7A:2D:1A:2E:70:44:B7:E3:1B:32:1B:F7:AC:16
Certificate issuer: /CN=0d9c56a18c987a2d1a2e7044b7e31b321bf7ac16
Certificate serial: 0199239F3D9FB680F7BC055466536B35E518
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DZxWoYyYei0aLnBEt-MbMhv3rBY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/bd1b8f-d065-4cc7-9a1f-45ab3f520f00/1/DZxWoYyYei0aLnBEt-MbMhv3rBY.mft
Manifest number: 0803
Signing time: Sun 07 Sep 2025 10:01:02 +0000
Manifest this update: Sun 07 Sep 2025 10:01:02 +0000
Manifest next update: Mon 08 Sep 2025 10:01:02 +0000
Files and hashes: 1: DZxWoYyYei0aLnBEt-MbMhv3rBY.crl (hash: KvAAwKGywPD0W1Loy7GvMXZGhnEijMvFEbeQSBsYQpI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/bd1b8f-d065-4cc7-9a1f-45ab3f520f00/1/DZxWoYyYei0aLnBEt-MbMhv3rBY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/bd1b8f-d065-4cc7-9a1f-45ab3f520f00/1/DZxWoYyYei0aLnBEt-MbMhv3rBY.mft
rsync://rpki.ripe.net/repository/DEFAULT/DZxWoYyYei0aLnBEt-MbMhv3rBY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9f:3d:9f:b6:80:f7:bc:05:54:66:53:6b:35:e5:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d9c56a18c987a2d1a2e7044b7e31b321bf7ac16
Validity
Not Before: Sep 7 10:01:02 2025 GMT
Not After : Sep 8 10:01:02 2025 GMT
Subject: CN=5325350983ee71489cee2a8bb8ead56bff56ed5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:fd:e1:df:af:e3:88:9b:bd:80:41:2f:e4:43:
70:a8:5c:dd:2d:3b:2e:56:d3:85:e1:63:af:e3:d0:
57:ce:14:14:94:cc:5c:78:8f:3d:12:46:de:88:10:
88:7d:63:7a:ca:8d:68:9d:58:ea:1b:d1:61:8b:75:
f4:cc:9c:95:26:72:5e:fa:a9:32:ba:b0:9f:d7:a4:
74:bf:07:8e:82:44:67:05:2b:50:38:2a:1f:52:e7:
fc:69:8f:1a:85:01:03:1a:e6:3f:71:7d:81:1c:dc:
ec:2c:d9:70:0e:cc:74:95:8c:46:51:57:ad:cc:9d:
f0:c3:19:74:fa:e7:46:03:b8:fb:d7:5b:fc:dd:79:
10:66:7d:04:f1:59:83:6a:f6:34:c0:bb:d9:28:51:
9f:14:83:06:35:0e:5d:d1:ed:c1:d0:fc:7f:f9:14:
6f:1b:d5:af:07:90:0b:0c:1b:43:38:1b:d8:01:fb:
74:4a:dd:ce:73:d5:3c:dc:d4:ca:16:75:7d:93:26:
1f:a8:4e:3b:47:9f:d4:91:00:b6:80:cd:9a:d2:56:
81:94:db:a9:24:6e:cb:f2:f5:8e:9c:d2:a2:03:ca:
f4:23:6a:37:78:c8:c4:c7:03:20:c1:c6:f9:ef:75:
25:76:70:cd:41:c3:c8:2d:06:ce:69:9b:a5:f9:52:
d8:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:25:35:09:83:EE:71:48:9C:EE:2A:8B:B8:EA:D5:6B:FF:56:ED:5F
X509v3 Authority Key Identifier:
keyid:0D:9C:56:A1:8C:98:7A:2D:1A:2E:70:44:B7:E3:1B:32:1B:F7:AC:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DZxWoYyYei0aLnBEt-MbMhv3rBY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/bd1b8f-d065-4cc7-9a1f-45ab3f520f00/1/DZxWoYyYei0aLnBEt-MbMhv3rBY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/bd1b8f-d065-4cc7-9a1f-45ab3f520f00/1/DZxWoYyYei0aLnBEt-MbMhv3rBY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:7d:3b:fa:12:46:12:99:82:18:5d:ed:68:51:41:fb:98:a3:
e5:1a:f3:97:d5:2f:e3:9b:84:5e:e9:c7:0b:c6:74:a1:6a:ea:
ab:66:1f:55:7a:52:80:19:9a:79:1f:d2:ee:29:91:76:94:e2:
aa:a6:4e:a9:3d:f9:c1:bf:f2:9a:ca:7b:75:5e:6c:27:02:92:
28:a4:93:d5:16:f3:fd:99:f4:e8:b6:28:60:bd:6c:6e:26:bc:
9e:d2:e6:44:ce:3d:cd:c2:00:58:18:e3:f2:38:0a:96:45:f6:
c8:8c:f7:fb:a4:c2:63:86:fc:12:79:92:a9:40:12:3a:cc:a2:
51:1c:fd:8f:a7:e8:7b:10:32:7b:62:b0:0c:8b:77:94:b9:8f:
b1:1a:b8:91:77:44:3e:3a:82:a3:47:45:e4:c4:92:cd:6c:ad:
cb:ec:44:58:4f:27:d8:12:68:ce:0a:53:3f:47:b6:fb:2a:ef:
48:8a:6f:14:9f:39:fc:7e:1b:ed:fe:d0:05:78:29:f2:97:aa:
56:73:57:ba:cc:4e:31:91:b7:8b:d6:97:a0:7e:ef:5d:c7:00:
40:d2:12:47:a7:64:c0:04:5c:70:72:e9:71:6f:06:a3:16:70:
6c:f7:c1:cc:1a:b0:b1:c5:96:1b:61:b7:6c:03:f7:a2:42:0f:
2f:eb:51:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:38:41 2025 by rpki-client