Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/36d70c-58f0-45bb-a8f1-77eeab28be26/1/DgXmzqSzk0XOKQLJeh26vLRtKjs.mft
File: DgXmzqSzk0XOKQLJeh26vLRtKjs.mft (raw, json)
Hash identifier: qrtlu7fiNmPdmZ68X8LL0yyjmZROy00bjvsNp06LySs=
Subject key identifier: BA:7D:F8:39:11:D3:C7:F7:AE:B5:4D:69:E2:FF:A0:7A:7E:1D:CA:61
Authority key identifier: 0E:05:E6:CE:A4:B3:93:45:CE:29:02:C9:7A:1D:BA:BC:B4:6D:2A:3B
Certificate issuer: /CN=0e05e6cea4b39345ce2902c97a1dbabcb46d2a3b
Certificate serial: 019922C31A332B853DA9B1E797A8714DC62F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DgXmzqSzk0XOKQLJeh26vLRtKjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/36d70c-58f0-45bb-a8f1-77eeab28be26/1/DgXmzqSzk0XOKQLJeh26vLRtKjs.mft
Manifest number: 1602
Signing time: Sun 07 Sep 2025 06:00:35 +0000
Manifest this update: Sun 07 Sep 2025 06:00:35 +0000
Manifest next update: Mon 08 Sep 2025 06:00:35 +0000
Files and hashes: 1: DgXmzqSzk0XOKQLJeh26vLRtKjs.crl (hash: obSNs89acdMPCz97ggTTynxU0M+jmYQLeViyOMCdTW4=)
2: ShuJCzTETjuD4IZyp5iTy1w6Ut8.roa (hash: fk95k0odtKaBXDPO6LkbFL/8lMCWYiJ12TM7p4C2lgU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/36d70c-58f0-45bb-a8f1-77eeab28be26/1/DgXmzqSzk0XOKQLJeh26vLRtKjs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/36d70c-58f0-45bb-a8f1-77eeab28be26/1/DgXmzqSzk0XOKQLJeh26vLRtKjs.mft
rsync://rpki.ripe.net/repository/DEFAULT/DgXmzqSzk0XOKQLJeh26vLRtKjs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:1a:33:2b:85:3d:a9:b1:e7:97:a8:71:4d:c6:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e05e6cea4b39345ce2902c97a1dbabcb46d2a3b
Validity
Not Before: Sep 7 06:00:35 2025 GMT
Not After : Sep 8 06:00:35 2025 GMT
Subject: CN=ba7df83911d3c7f7aeb54d69e2ffa07a7e1dca61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ea:86:87:3d:b3:ae:fc:44:b2:45:90:d5:d8:
c4:0b:e5:83:ee:0b:05:cb:40:d9:4f:86:c2:1c:04:
00:d0:15:81:7e:09:fc:e6:fe:b4:0c:71:2e:b9:bc:
44:d2:f0:39:77:b9:61:aa:60:08:c0:71:78:f4:6f:
b6:28:24:75:06:ff:b0:1c:ac:af:a6:c7:b1:07:3b:
6b:ee:d5:6e:4a:28:01:c1:60:de:07:bc:17:01:12:
f0:ec:5c:fa:87:5a:98:5e:5d:87:d7:e0:69:d0:3c:
27:3d:6a:0f:2e:e0:b9:94:76:33:93:a6:62:84:b5:
f6:48:a6:f9:55:c3:1a:2f:e6:42:e7:0c:16:c9:85:
ca:3c:0d:c8:77:da:39:ac:42:c8:23:de:0c:2a:eb:
c8:27:10:41:b6:4c:b3:89:61:9f:92:56:84:b3:2a:
79:d8:e6:c2:1e:f1:43:00:da:2e:f1:b0:1e:08:53:
79:5b:05:2b:54:69:b9:32:34:d0:77:e9:92:5d:8e:
cb:ca:ef:a8:98:36:34:5f:ae:7f:76:5d:92:1b:86:
48:99:86:81:54:26:fe:88:6b:77:39:14:c6:36:2e:
16:6e:76:c2:5a:01:ae:e8:05:18:ba:92:ea:f5:35:
bb:8c:02:d0:04:98:1b:5c:21:5e:80:17:74:c6:78:
f7:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:7D:F8:39:11:D3:C7:F7:AE:B5:4D:69:E2:FF:A0:7A:7E:1D:CA:61
X509v3 Authority Key Identifier:
keyid:0E:05:E6:CE:A4:B3:93:45:CE:29:02:C9:7A:1D:BA:BC:B4:6D:2A:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DgXmzqSzk0XOKQLJeh26vLRtKjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/36d70c-58f0-45bb-a8f1-77eeab28be26/1/DgXmzqSzk0XOKQLJeh26vLRtKjs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/36d70c-58f0-45bb-a8f1-77eeab28be26/1/DgXmzqSzk0XOKQLJeh26vLRtKjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:70:ed:b6:76:db:f7:69:59:fe:0b:94:af:93:c1:29:f0:b8:
dd:a1:e1:ff:db:8a:fd:7d:ae:7e:fe:78:78:08:42:88:47:0f:
4a:93:a3:bb:38:f8:8f:a3:f9:19:27:3e:e9:0a:2e:03:d6:50:
83:07:0d:f7:bb:94:43:62:b2:6e:63:d6:83:1a:14:bb:fc:bc:
f9:5f:d5:57:f9:27:9a:64:83:60:5f:7b:48:ba:ff:98:c7:7e:
6f:c2:54:aa:fd:41:87:bd:49:d2:88:b5:7a:73:40:a1:71:f7:
f0:44:8f:be:26:75:8d:b8:7c:fa:db:cc:c7:16:24:7d:5a:a7:
f5:b1:08:45:4a:08:da:a9:30:6a:e7:cc:b1:00:9a:19:6c:ea:
aa:fa:45:f1:77:71:d7:79:91:30:a2:dd:3d:44:e1:e2:55:ed:
6f:7a:d0:05:26:3c:a4:98:a2:af:d5:00:d2:bd:fc:62:9c:0f:
19:70:50:16:43:3b:18:bf:6c:68:0f:91:e4:a2:77:a5:24:2c:
04:fe:75:29:67:88:d6:fb:c6:c4:c1:9e:71:61:fa:ec:89:c1:
ce:d5:07:d8:85:a9:ec:c5:21:59:a8:e2:1a:7a:9c:2d:f3:a8:
bc:4e:e5:91:96:7b:9a:90:bf:f4:32:df:72:2f:b6:08:d6:b7:
bb:75:bb:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:16:19 2025 by rpki-client