Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/b79777-4a04-4dab-a1dc-25374494ceee/1/DNLKvrHXJOekjdYemn4MUKTpv1A.mft
File: DNLKvrHXJOekjdYemn4MUKTpv1A.mft (raw, json)
Hash identifier: tFmcjKH3dxXp56etycDSkohL3P+55PdnYSrQX2ydBiM=
Subject key identifier: 5F:F2:62:54:1D:2E:AA:F9:14:43:EC:29:79:EA:23:C2:11:25:FB:37
Authority key identifier: 0C:D2:CA:BE:B1:D7:24:E7:A4:8D:D6:1E:9A:7E:0C:50:A4:E9:BF:50
Certificate issuer: /CN=0cd2cabeb1d724e7a48dd61e9a7e0c50a4e9bf50
Certificate serial: 019922555AB05C9D1A2B66A43E60E39A1330
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DNLKvrHXJOekjdYemn4MUKTpv1A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/b79777-4a04-4dab-a1dc-25374494ceee/1/DNLKvrHXJOekjdYemn4MUKTpv1A.mft
Manifest number: 0741
Signing time: Sun 07 Sep 2025 04:00:42 +0000
Manifest this update: Sun 07 Sep 2025 04:00:42 +0000
Manifest next update: Mon 08 Sep 2025 04:00:42 +0000
Files and hashes: 1: DNLKvrHXJOekjdYemn4MUKTpv1A.crl (hash: 8Ofp1jq/UtHnzfI5h8o+6UrYop4t3msosRb0y04FmVM=)
2: gFGZ2BFs8uwMqzE5e-fa-6VVCNI.roa (hash: RsuEdz61HYwgHfhCVbH78Gqegx1PGZpeCp/nCDSO5do=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/b79777-4a04-4dab-a1dc-25374494ceee/1/DNLKvrHXJOekjdYemn4MUKTpv1A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/b79777-4a04-4dab-a1dc-25374494ceee/1/DNLKvrHXJOekjdYemn4MUKTpv1A.mft
rsync://rpki.ripe.net/repository/DEFAULT/DNLKvrHXJOekjdYemn4MUKTpv1A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:5a:b0:5c:9d:1a:2b:66:a4:3e:60:e3:9a:13:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cd2cabeb1d724e7a48dd61e9a7e0c50a4e9bf50
Validity
Not Before: Sep 7 04:00:42 2025 GMT
Not After : Sep 8 04:00:42 2025 GMT
Subject: CN=5ff262541d2eaaf91443ec2979ea23c21125fb37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d1:88:75:ce:d9:70:e9:61:28:a7:21:cd:09:
8a:a7:d1:29:c8:07:08:b3:57:b9:03:3a:06:78:26:
da:8c:76:3a:5e:05:47:e4:44:16:06:f5:63:b1:9d:
9d:7b:5c:59:35:3c:8d:03:7c:c0:2d:bf:de:d6:99:
39:17:e8:ff:69:01:ce:bf:41:ae:19:3d:bc:e1:7d:
29:9f:bb:81:88:71:f3:57:b0:3a:8d:9c:83:55:b7:
3c:86:b4:cd:a5:b8:1d:32:45:b1:0e:0f:fd:6d:0e:
f6:2e:33:aa:d1:23:d6:8f:25:4b:e2:02:7f:d0:6a:
16:eb:0d:3d:c9:65:8c:8f:b4:ca:85:30:60:8c:52:
8e:a0:b0:97:46:51:ff:95:79:90:ec:00:d9:74:5e:
b6:a5:d5:d5:93:27:60:a4:63:11:1f:e6:e4:6a:7d:
e0:39:19:fc:57:f2:87:3c:f4:f3:b8:af:b8:19:a3:
de:57:ca:87:d5:98:74:44:d9:8f:7a:b7:c1:d8:ee:
2a:61:dd:f2:d4:c6:33:85:1c:8c:6f:8c:73:83:5c:
7b:f4:fc:2c:b5:96:33:c0:8a:6d:72:72:94:b6:fc:
0f:7e:f5:ef:87:c2:d0:6f:07:e4:ce:16:26:98:2c:
2f:60:a9:3f:05:09:93:bb:9c:59:9f:88:d4:03:13:
38:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:F2:62:54:1D:2E:AA:F9:14:43:EC:29:79:EA:23:C2:11:25:FB:37
X509v3 Authority Key Identifier:
keyid:0C:D2:CA:BE:B1:D7:24:E7:A4:8D:D6:1E:9A:7E:0C:50:A4:E9:BF:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DNLKvrHXJOekjdYemn4MUKTpv1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b79777-4a04-4dab-a1dc-25374494ceee/1/DNLKvrHXJOekjdYemn4MUKTpv1A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b79777-4a04-4dab-a1dc-25374494ceee/1/DNLKvrHXJOekjdYemn4MUKTpv1A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:38:b9:ec:c9:eb:33:1d:05:5c:c1:02:54:6f:76:09:88:19:
cf:ee:50:06:ec:52:5c:e5:dc:86:33:db:9c:e5:c8:44:7a:42:
1a:ab:83:07:72:10:c9:53:e1:8d:6f:ac:19:42:b8:41:ec:b7:
b0:76:f5:41:ef:e5:4a:3c:c0:ef:4d:7e:88:30:b6:07:54:e4:
90:3b:45:3a:47:3a:8d:a8:a5:64:c6:40:90:c1:3a:fc:1c:2a:
19:62:16:f4:80:67:4b:a5:0a:33:c2:84:83:cb:75:4a:43:29:
9a:88:07:cf:fe:0d:3a:ec:9c:17:21:df:17:e5:bd:4e:f4:c0:
29:5e:7c:5a:16:34:6e:85:32:b8:99:51:6e:45:91:a3:39:01:
54:a6:71:00:53:1f:91:de:15:93:1a:d8:c3:15:cc:4b:d1:d3:
9b:b8:17:14:b2:44:85:92:00:a6:74:83:57:65:61:03:8d:ba:
07:5e:6a:ed:61:f4:e8:48:99:b5:9e:6b:fe:18:db:e0:65:b7:
3a:cb:f0:7b:da:b1:17:9e:c4:8b:b3:0f:7b:f4:00:eb:99:4d:
de:c8:a4:ea:cf:03:08:10:19:e2:33:bd:5b:46:94:e8:5b:4d:
f7:e5:83:88:25:23:b1:d0:80:c6:8e:88:a7:a8:2b:04:25:04:
6c:dd:97:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:43:39 2025 by rpki-client