Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/0467dc-ccf3-4331-957c-158606318525/1/dYOxUbdLsu2w9c5rbpux4MPQrRs.mft
File: dYOxUbdLsu2w9c5rbpux4MPQrRs.mft (raw, json)
Hash identifier: pKjj8NDAJpQW3jGGwCbV/op7arNpmCFpj7EOExuu47Q=
Subject key identifier: 2D:22:F4:10:1D:33:84:92:2B:00:54:CA:ED:B4:9E:30:0D:C3:FE:84
Authority key identifier: 75:83:B1:51:B7:4B:B2:ED:B0:F5:CE:6B:6E:9B:B1:E0:C3:D0:AD:1B
Certificate issuer: /CN=7583b151b74bb2edb0f5ce6b6e9bb1e0c3d0ad1b
Certificate serial: 0199221EDF910D5ED7949AB442409B758963
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dYOxUbdLsu2w9c5rbpux4MPQrRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/0467dc-ccf3-4331-957c-158606318525/1/dYOxUbdLsu2w9c5rbpux4MPQrRs.mft
Manifest number: 166E
Signing time: Sun 07 Sep 2025 03:01:12 +0000
Manifest this update: Sun 07 Sep 2025 03:01:12 +0000
Manifest next update: Mon 08 Sep 2025 03:01:12 +0000
Files and hashes: 1: dYOxUbdLsu2w9c5rbpux4MPQrRs.crl (hash: Cm0HBdcZjSvdF37KwPLu89ZabKgXfgXltVJ+aXLCQGQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/0467dc-ccf3-4331-957c-158606318525/1/dYOxUbdLsu2w9c5rbpux4MPQrRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/0467dc-ccf3-4331-957c-158606318525/1/dYOxUbdLsu2w9c5rbpux4MPQrRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/dYOxUbdLsu2w9c5rbpux4MPQrRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:df:91:0d:5e:d7:94:9a:b4:42:40:9b:75:89:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7583b151b74bb2edb0f5ce6b6e9bb1e0c3d0ad1b
Validity
Not Before: Sep 7 03:01:12 2025 GMT
Not After : Sep 8 03:01:12 2025 GMT
Subject: CN=2d22f4101d3384922b0054caedb49e300dc3fe84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:27:76:2c:59:1b:34:93:27:d0:5f:61:c8:6e:
18:c6:7e:12:50:9c:53:63:6e:a9:cc:ad:96:ae:92:
f7:42:51:21:a1:c6:96:15:66:8b:8c:eb:09:24:d4:
85:94:b1:5f:a9:99:ab:b9:9e:2d:04:27:d7:81:90:
f6:ab:ec:98:1d:15:b5:64:5d:7a:e4:36:9c:1a:b1:
d9:74:31:82:55:26:6d:de:64:2a:a0:4a:2e:26:26:
a7:bf:7e:39:51:79:19:80:65:58:3b:0a:1d:c6:f0:
4e:83:67:80:66:db:c5:de:2b:41:ca:28:d1:6a:f1:
73:dd:b7:43:14:a0:56:bc:7f:17:01:e9:14:c3:61:
2d:b8:ea:ce:0a:b8:94:f3:8a:22:19:39:66:23:d7:
a6:d1:b6:d8:c4:5c:0d:ed:37:8c:66:b5:a2:d6:23:
1b:f7:22:9c:f4:ca:38:0b:d3:b7:8e:ad:10:8d:dc:
7a:20:67:d3:bf:bc:0a:80:eb:32:be:a0:2d:e8:ae:
a2:96:92:f9:01:d3:90:b8:c7:39:9c:14:48:a9:23:
66:51:2a:61:85:2e:bc:21:2e:b0:e5:d4:a2:83:c7:
8e:c6:ae:9d:77:f5:50:fa:61:aa:a5:77:8a:a1:35:
7b:99:77:0e:9d:12:2f:77:7b:2a:40:42:5a:c1:8d:
1f:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:22:F4:10:1D:33:84:92:2B:00:54:CA:ED:B4:9E:30:0D:C3:FE:84
X509v3 Authority Key Identifier:
keyid:75:83:B1:51:B7:4B:B2:ED:B0:F5:CE:6B:6E:9B:B1:E0:C3:D0:AD:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dYOxUbdLsu2w9c5rbpux4MPQrRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/0467dc-ccf3-4331-957c-158606318525/1/dYOxUbdLsu2w9c5rbpux4MPQrRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/0467dc-ccf3-4331-957c-158606318525/1/dYOxUbdLsu2w9c5rbpux4MPQrRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:b9:71:f2:bd:3f:03:c6:e5:73:df:0f:0f:f2:53:03:71:f9:
94:71:1d:bc:c9:5c:1b:d3:a1:76:42:79:c4:fa:e3:a1:c9:ed:
3a:7e:d9:fb:46:46:e5:42:32:db:fe:17:29:88:29:27:44:40:
d2:1a:2f:26:78:d7:b4:a1:08:da:dc:ca:ae:34:53:e9:9b:5f:
60:3b:e9:64:b4:9c:f6:2b:7a:04:48:87:55:7f:57:7b:02:dc:
cb:33:3e:58:65:e1:98:26:dd:69:e8:b5:bf:50:8f:ea:86:3f:
4e:2e:49:e6:11:b5:e0:71:49:54:a2:ff:d9:87:8c:99:b1:c6:
de:ed:eb:68:50:f5:85:e4:7c:a5:c2:ff:43:82:2c:16:0f:0c:
e4:57:25:c1:96:38:69:fb:60:77:a1:8d:36:4b:b2:52:30:65:
69:d6:b6:0a:09:b9:38:7d:df:c7:ad:3e:de:a2:12:7c:bf:85:
ae:5c:6a:a3:d1:1f:0e:bb:4f:2c:18:ec:25:b3:6d:ad:ad:2a:
ba:c5:00:1b:68:8b:6c:98:31:76:42:03:7a:36:4d:60:8c:c7:
16:da:13:9a:5f:84:e4:71:0a:08:bc:96:36:a0:3a:58:fd:e0:
1a:b7:19:a9:0a:30:47:4f:a1:b1:cd:de:5b:f0:77:21:73:a5:
40:9f:ce:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:22:17 2025 by rpki-client