Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/921df1-fa7d-4307-b9c3-7ce8c9704cf0/1/DP4QWKMePBiUvPBkx-g3C7ps-OQ.mft
File: DP4QWKMePBiUvPBkx-g3C7ps-OQ.mft (raw, json)
Hash identifier: mycCTvSH00z/V+DCsZcGc0RvwvIxnTq8vY9wwrX0Wmg=
Subject key identifier: F5:4C:79:3C:D1:9E:4E:04:60:48:F6:57:25:31:4B:63:DF:C1:9E:D6
Authority key identifier: 0C:FE:10:58:A3:1E:3C:18:94:BC:F0:64:C7:E8:37:0B:BA:6C:F8:E4
Certificate issuer: /CN=0cfe1058a31e3c1894bcf064c7e8370bba6cf8e4
Certificate serial: 019921B0DF1E9572A4ACC5B38420D9187A32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DP4QWKMePBiUvPBkx-g3C7ps-OQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/921df1-fa7d-4307-b9c3-7ce8c9704cf0/1/DP4QWKMePBiUvPBkx-g3C7ps-OQ.mft
Manifest number: 0D56
Signing time: Sun 07 Sep 2025 01:01:03 +0000
Manifest this update: Sun 07 Sep 2025 01:01:03 +0000
Manifest next update: Mon 08 Sep 2025 01:01:03 +0000
Files and hashes: 1: DP4QWKMePBiUvPBkx-g3C7ps-OQ.crl (hash: ZJjp+KgBh1dghVj8l0llkvZwO/tzdqAr2VbIBqawqeM=)
2: UKqORdLzZXdOrDEcMxzidP1Tf04.roa (hash: 993OGeNZfndwd7HXQtjHB4WsdW/h/7CpCQberKrZGUc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/921df1-fa7d-4307-b9c3-7ce8c9704cf0/1/DP4QWKMePBiUvPBkx-g3C7ps-OQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/921df1-fa7d-4307-b9c3-7ce8c9704cf0/1/DP4QWKMePBiUvPBkx-g3C7ps-OQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/DP4QWKMePBiUvPBkx-g3C7ps-OQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b0:df:1e:95:72:a4:ac:c5:b3:84:20:d9:18:7a:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cfe1058a31e3c1894bcf064c7e8370bba6cf8e4
Validity
Not Before: Sep 7 01:01:03 2025 GMT
Not After : Sep 8 01:01:03 2025 GMT
Subject: CN=f54c793cd19e4e046048f65725314b63dfc19ed6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:63:ca:ab:f0:ab:4e:40:8e:23:59:ae:0d:49:
11:55:29:3a:00:b7:22:47:43:f1:01:e7:1f:ff:91:
20:a7:44:43:92:a8:df:12:89:aa:28:15:5d:ca:df:
47:28:8d:c8:02:39:7f:4b:17:76:13:37:4b:e8:10:
6b:a7:e8:13:4c:fa:12:64:db:ea:56:32:dc:18:03:
93:95:ea:d7:8b:26:dc:52:54:ea:b4:9f:35:94:c4:
6c:29:1f:f2:b7:3d:e1:fb:86:3f:ab:71:4b:cb:42:
b5:51:b8:ca:53:cb:3b:1d:25:0e:e0:5a:ab:5e:1f:
c9:dc:89:cb:b2:e3:29:a2:f1:44:47:2f:e4:01:68:
3d:5e:6e:31:c3:64:b4:01:96:35:58:91:e1:ff:85:
16:9e:1c:40:1e:01:f9:12:52:29:43:a2:60:97:5d:
5e:3f:4e:ba:fe:26:e2:50:f1:1c:85:33:ee:77:de:
14:6e:41:36:74:57:86:cf:6d:ff:c2:93:91:df:e9:
a1:de:a9:36:48:ee:cf:c5:e2:ea:ef:c5:00:22:6d:
2e:c5:c3:a0:77:30:1c:e8:10:ca:01:99:e5:4b:e6:
bc:16:26:49:3a:53:e0:22:35:8e:40:5b:53:04:4b:
7b:25:ee:e9:34:da:bd:bf:dd:8e:24:44:3b:24:08:
46:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:4C:79:3C:D1:9E:4E:04:60:48:F6:57:25:31:4B:63:DF:C1:9E:D6
X509v3 Authority Key Identifier:
keyid:0C:FE:10:58:A3:1E:3C:18:94:BC:F0:64:C7:E8:37:0B:BA:6C:F8:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DP4QWKMePBiUvPBkx-g3C7ps-OQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/921df1-fa7d-4307-b9c3-7ce8c9704cf0/1/DP4QWKMePBiUvPBkx-g3C7ps-OQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/921df1-fa7d-4307-b9c3-7ce8c9704cf0/1/DP4QWKMePBiUvPBkx-g3C7ps-OQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:12:98:3f:d0:01:2c:eb:af:ba:b9:55:5d:41:87:92:59:0e:
78:60:3e:3b:67:c5:5d:e7:ee:3f:32:9d:b7:44:03:7a:af:d6:
a8:0c:12:a7:e9:43:68:17:3e:21:bd:d8:6c:db:6b:36:81:1e:
e6:a2:74:1c:f5:59:c0:49:8e:04:60:9a:8b:24:69:23:da:b2:
0e:57:3f:ae:3b:2d:00:53:c3:b1:24:d9:28:bb:90:06:1a:ed:
98:93:21:ce:ab:75:8e:a9:af:01:0d:1d:d8:ab:cc:94:78:d8:
f0:96:61:ad:f9:c0:47:1d:cf:78:28:5f:45:81:89:55:73:ac:
9e:25:a2:ce:78:86:e4:d7:10:fc:93:f6:38:10:b8:bc:67:a6:
ba:fa:e0:c7:2d:2a:f0:21:c7:c2:ae:e1:3c:f4:06:0a:7d:2d:
ff:97:f1:c6:56:c7:ec:33:b8:bc:46:d9:a3:7e:17:e7:17:e5:
4d:e0:e6:1e:54:5c:6f:de:e5:63:ee:b6:cd:23:bf:5a:ae:33:
66:eb:58:87:5e:3a:eb:30:96:8c:73:b9:29:56:dc:bb:6f:88:
b2:7d:cd:3f:10:a0:ce:f0:a1:fc:d7:73:5d:9f:0a:ca:62:a6:
ce:d9:ab:d7:55:5d:5b:de:d0:2b:06:c0:d5:9d:f7:22:0e:68:
9d:b0:27:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:16:18 2025 by rpki-client