Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/72e91a-014f-483a-a544-4e33427f734e/1/DrG9MNMZGofH0KRi5nkyQxYz3R4.mft
File: DrG9MNMZGofH0KRi5nkyQxYz3R4.mft (raw, json)
Hash identifier: SUUowMgPQCbkO2VIe2bSnEM8pNm6zijUhvHfWLi9Sbs=
Subject key identifier: 72:71:40:6E:FE:FD:AA:6C:D5:5B:16:77:07:EB:00:3C:5C:96:1B:D5
Authority key identifier: 0E:B1:BD:30:D3:19:1A:87:C7:D0:A4:62:E6:79:32:43:16:33:DD:1E
Certificate issuer: /CN=0eb1bd30d3191a87c7d0a462e67932431633dd1e
Certificate serial: 019933493B2A12F6DED861A7848DAC944FC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DrG9MNMZGofH0KRi5nkyQxYz3R4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/72e91a-014f-483a-a544-4e33427f734e/1/DrG9MNMZGofH0KRi5nkyQxYz3R4.mft
Manifest number: 0393
Signing time: Wed 10 Sep 2025 11:01:01 +0000
Manifest this update: Wed 10 Sep 2025 11:01:01 +0000
Manifest next update: Thu 11 Sep 2025 11:01:01 +0000
Files and hashes: 1: DrG9MNMZGofH0KRi5nkyQxYz3R4.crl (hash: WBVfZESFsGM8/zBb4CmEI7uDeLd6TGhoa7Y8w75v2aU=)
2: ogxxjz_eGLDn7LYpHHuvCo9x5ng.roa (hash: B2U5jkd3tbLDGtZHWekj2Yva7wWVjyZDFNXj9MRShj4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/72e91a-014f-483a-a544-4e33427f734e/1/DrG9MNMZGofH0KRi5nkyQxYz3R4.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/72e91a-014f-483a-a544-4e33427f734e/1/DrG9MNMZGofH0KRi5nkyQxYz3R4.mft
rsync://rpki.ripe.net/repository/DEFAULT/DrG9MNMZGofH0KRi5nkyQxYz3R4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 11:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:33:49:3b:2a:12:f6:de:d8:61:a7:84:8d:ac:94:4f:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0eb1bd30d3191a87c7d0a462e67932431633dd1e
Validity
Not Before: Sep 10 11:01:01 2025 GMT
Not After : Sep 11 11:01:01 2025 GMT
Subject: CN=7271406efefdaa6cd55b167707eb003c5c961bd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:42:92:76:1e:a2:f8:0d:45:3a:37:f4:15:9c:
48:0e:4e:7f:d7:4b:2e:04:04:ec:21:a9:91:3e:c2:
3b:c7:05:a8:82:12:64:69:8d:df:4a:56:8c:c6:fa:
42:29:6e:9b:5c:50:39:c3:8f:9c:4f:e6:4c:0a:eb:
6a:4b:65:7e:ae:3e:66:f6:b8:cd:af:20:78:f0:6f:
09:4c:fa:9a:b4:a6:d9:f1:4f:13:84:3f:6f:dd:bf:
48:d9:5b:d7:7c:fe:41:a5:be:32:7f:4a:70:43:91:
e8:46:db:cf:3e:0f:a6:78:c1:d3:1d:61:d1:c8:d5:
18:8b:49:8a:03:ff:54:62:31:03:d6:63:00:7f:9a:
15:29:76:50:a0:9e:d8:04:3c:ac:ed:c5:5e:18:6a:
53:4e:32:c4:6b:94:4b:b8:d7:7c:5f:9f:ad:51:ab:
c2:5a:53:7c:f4:94:3f:16:df:43:d9:2d:9b:fa:1c:
c4:0d:1e:5a:b1:cd:4d:b3:b1:93:41:a9:bb:7a:07:
32:33:93:81:72:32:25:6c:09:06:31:66:4e:1d:a8:
40:44:7b:aa:ff:53:47:59:1d:c6:39:5b:3e:08:9f:
52:d6:8c:76:23:72:19:79:d6:de:ea:fc:1d:5d:17:
49:11:48:79:89:fd:b3:52:ee:43:d5:6b:51:7a:50:
43:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:71:40:6E:FE:FD:AA:6C:D5:5B:16:77:07:EB:00:3C:5C:96:1B:D5
X509v3 Authority Key Identifier:
keyid:0E:B1:BD:30:D3:19:1A:87:C7:D0:A4:62:E6:79:32:43:16:33:DD:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DrG9MNMZGofH0KRi5nkyQxYz3R4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/72e91a-014f-483a-a544-4e33427f734e/1/DrG9MNMZGofH0KRi5nkyQxYz3R4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/72e91a-014f-483a-a544-4e33427f734e/1/DrG9MNMZGofH0KRi5nkyQxYz3R4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:fb:e5:02:4c:33:78:4b:3e:75:a3:79:c0:d1:08:4b:34:31:
8c:f2:e1:79:8b:fe:eb:12:a2:79:06:47:3f:ee:df:e2:95:1e:
39:d6:db:5a:da:0a:d9:fd:97:55:0e:b2:2e:9f:b6:c1:9b:0e:
e2:92:2f:9b:11:57:ab:93:11:03:48:c5:5d:f7:6a:eb:70:66:
dc:b7:73:9b:40:6e:e8:0e:13:4f:5e:87:10:17:da:16:89:6a:
cf:02:57:ec:71:17:df:16:39:77:0a:06:c1:95:e9:74:86:93:
4a:c2:2a:29:bc:fb:94:0f:2d:8f:69:ee:d3:91:6a:3a:03:f7:
15:70:80:86:c4:83:58:27:5b:d0:15:24:6e:36:13:58:6c:75:
6e:18:88:06:e5:df:a4:e2:49:67:c2:f2:db:60:76:06:d1:77:
a3:00:61:48:52:17:e5:4b:10:5d:de:af:fd:83:a6:d4:ea:53:
cb:9e:71:df:b1:7c:ae:00:99:84:da:8f:4d:b1:bb:3c:cc:dc:
a1:be:24:0c:4d:3c:96:36:e7:be:25:d4:94:45:35:71:3b:0b:
fd:ef:70:c4:97:87:f9:da:fe:33:1e:82:ab:7e:c0:e0:b7:4e:
e7:1f:1c:5a:18:2b:82:c1:7d:29:bd:46:b2:23:04:03:f2:29:
ce:b4:a2:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 14:20:46 2025 by rpki-client