Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/72778b-c07f-49bb-9e1d-1f0b03544810/1/dQrGfFd2g13wkZmDEJYOg8I9ncY.mft
File: dQrGfFd2g13wkZmDEJYOg8I9ncY.mft (raw, json)
Hash identifier: zye6TqomjTeld7RFsIh+keS7jHeuuO0K5hFJK0F5hU8=
Subject key identifier: 0E:60:A8:03:00:0C:B5:1C:1C:AC:82:87:44:DA:15:A9:1E:68:AE:96
Authority key identifier: 75:0A:C6:7C:57:76:83:5D:F0:91:99:83:10:96:0E:83:C2:3D:9D:C6
Certificate issuer: /CN=750ac67c5776835df091998310960e83c23d9dc6
Certificate serial: 0199221EED841AE3885456174548B13EC345
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQrGfFd2g13wkZmDEJYOg8I9ncY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/72778b-c07f-49bb-9e1d-1f0b03544810/1/dQrGfFd2g13wkZmDEJYOg8I9ncY.mft
Manifest number: 0A5C
Signing time: Sun 07 Sep 2025 03:01:16 +0000
Manifest this update: Sun 07 Sep 2025 03:01:16 +0000
Manifest next update: Mon 08 Sep 2025 03:01:16 +0000
Files and hashes: 1: dQrGfFd2g13wkZmDEJYOg8I9ncY.crl (hash: jqNEK4TBrewUBK7Y3mm5aUJXxkFeNnvan1vuWYsxR+s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/72778b-c07f-49bb-9e1d-1f0b03544810/1/dQrGfFd2g13wkZmDEJYOg8I9ncY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/72778b-c07f-49bb-9e1d-1f0b03544810/1/dQrGfFd2g13wkZmDEJYOg8I9ncY.mft
rsync://rpki.ripe.net/repository/DEFAULT/dQrGfFd2g13wkZmDEJYOg8I9ncY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:ed:84:1a:e3:88:54:56:17:45:48:b1:3e:c3:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=750ac67c5776835df091998310960e83c23d9dc6
Validity
Not Before: Sep 7 03:01:16 2025 GMT
Not After : Sep 8 03:01:16 2025 GMT
Subject: CN=0e60a803000cb51c1cac828744da15a91e68ae96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b6:67:85:fd:01:c7:2b:0c:f5:f7:09:b6:1f:
63:14:9f:a6:e3:51:59:b4:66:6f:72:a1:ff:71:1a:
00:da:98:d9:e3:a2:e6:5e:ab:99:74:2a:b3:7b:ba:
f4:7d:68:17:77:08:ff:0d:29:b3:d0:b1:49:f3:21:
11:21:ad:ee:c9:7c:c3:c7:6e:c1:28:54:24:7b:01:
70:d2:e5:8b:35:b0:e3:17:6c:3d:73:ce:22:c9:39:
31:a0:30:1b:1b:20:7b:13:d0:04:d1:c2:af:10:99:
cd:83:82:7b:fc:0e:79:c0:33:8f:8a:91:8a:a0:9f:
3e:9a:4d:74:dd:f2:76:f9:87:2d:f8:a1:d0:62:10:
d7:c6:8e:7c:a8:48:71:c8:fb:32:cf:f8:9a:d9:92:
6a:53:e6:da:31:91:75:6b:9f:11:7b:0d:e5:05:2b:
c2:8e:ce:bb:d0:8b:40:dc:35:8b:f1:6d:b0:55:83:
ae:30:96:4d:52:cf:dd:af:95:76:89:11:f7:07:96:
4f:45:04:ec:7f:4b:05:0d:4b:e2:f2:43:19:b9:63:
6f:89:4a:c5:67:2b:ad:e0:da:00:76:6c:89:c4:66:
a5:1e:9e:6c:c4:1b:7a:b7:d8:cf:7e:0c:8d:b0:1b:
b2:d9:e6:94:f2:9f:72:6e:d8:7f:05:ea:64:e0:8e:
cd:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:60:A8:03:00:0C:B5:1C:1C:AC:82:87:44:DA:15:A9:1E:68:AE:96
X509v3 Authority Key Identifier:
keyid:75:0A:C6:7C:57:76:83:5D:F0:91:99:83:10:96:0E:83:C2:3D:9D:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQrGfFd2g13wkZmDEJYOg8I9ncY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/72778b-c07f-49bb-9e1d-1f0b03544810/1/dQrGfFd2g13wkZmDEJYOg8I9ncY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/72778b-c07f-49bb-9e1d-1f0b03544810/1/dQrGfFd2g13wkZmDEJYOg8I9ncY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:3c:d8:8b:34:d1:a7:29:90:a7:eb:68:2a:ce:cc:f5:3b:d1:
8f:66:33:45:b9:69:d4:d7:57:52:52:b7:97:0d:ac:14:09:74:
16:c9:fe:cd:54:6b:30:db:da:d4:66:dc:fc:21:7d:14:6e:8c:
b5:6c:1c:64:0e:52:68:f2:99:b9:df:39:ee:35:2e:2a:a1:5e:
35:47:73:f2:cf:14:0e:ec:d7:78:59:f6:64:77:a7:4c:ae:16:
0e:7b:5e:c8:a3:84:96:78:3d:3d:f4:ca:36:71:50:41:4d:44:
d2:fa:61:02:c4:dc:54:3d:1f:04:b5:75:89:b2:b7:e4:03:cd:
23:f5:89:87:a7:73:e8:d3:0c:db:31:ac:d1:19:35:8d:4a:e3:
b5:bb:c3:9e:f7:1c:65:ed:9d:51:cc:06:8c:3e:bd:00:6e:db:
cf:d9:8d:09:2f:b2:d9:9d:fb:f3:fc:c4:47:d9:d1:0d:f2:ba:
5b:dd:d2:1d:77:cf:20:8a:46:e2:36:d3:a9:5a:2f:ad:9a:03:
86:96:16:3b:29:00:1e:81:7a:8d:21:a9:20:44:58:63:75:fc:
87:6c:29:68:e7:2d:41:f2:d9:cb:0b:5c:f4:5b:61:45:4d:8e:
8b:5b:f0:70:13:01:dc:b0:9f:31:66:f1:6d:65:e5:56:c7:fc:
62:20:1c:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:53:27 2025 by rpki-client