Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6a1baa-5f8f-420a-90c4-665a69cb8900/1/DibUX9VpIdNGnRnEdXLydfnVUkI.mft
File: DibUX9VpIdNGnRnEdXLydfnVUkI.mft (raw, json)
Hash identifier: rYa+oaI3efLrWf3gF1s2Ci3FQaMhV21U0v9xJi/NT7o=
Subject key identifier: 40:BC:50:D6:63:F3:B7:3B:E8:E5:45:16:27:3E:AF:89:35:2A:D0:49
Authority key identifier: 0E:26:D4:5F:D5:69:21:D3:46:9D:19:C4:75:72:F2:75:F9:D5:52:42
Certificate issuer: /CN=0e26d45fd56921d3469d19c47572f275f9d55242
Certificate serial: 01991763BE1800EECC7AF41BD53995BDE78B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DibUX9VpIdNGnRnEdXLydfnVUkI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6a1baa-5f8f-420a-90c4-665a69cb8900/1/DibUX9VpIdNGnRnEdXLydfnVUkI.mft
Manifest number: 08B9
Signing time: Fri 05 Sep 2025 01:00:36 +0000
Manifest this update: Fri 05 Sep 2025 01:00:36 +0000
Manifest next update: Sat 06 Sep 2025 01:00:36 +0000
Files and hashes: 1: DibUX9VpIdNGnRnEdXLydfnVUkI.crl (hash: TNq3dbL0wKxLzZ8jaogKlLXiGyL8c2SJo2+X6mksBz0=)
2: xY4E3yQDPueuZRFyGHMpuwD_2xI.roa (hash: JFOzMGNC8f6WUb/Ik4daKoB04MNWXOUy7eceKB/AaN8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/6a1baa-5f8f-420a-90c4-665a69cb8900/1/DibUX9VpIdNGnRnEdXLydfnVUkI.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/6a1baa-5f8f-420a-90c4-665a69cb8900/1/DibUX9VpIdNGnRnEdXLydfnVUkI.mft
rsync://rpki.ripe.net/repository/DEFAULT/DibUX9VpIdNGnRnEdXLydfnVUkI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Sep 2025 19:46:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:17:63:be:18:00:ee:cc:7a:f4:1b:d5:39:95:bd:e7:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e26d45fd56921d3469d19c47572f275f9d55242
Validity
Not Before: Sep 5 01:00:36 2025 GMT
Not After : Sep 6 01:00:36 2025 GMT
Subject: CN=40bc50d663f3b73be8e54516273eaf89352ad049
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:55:2b:e2:7c:6c:39:f3:43:67:84:28:5b:72:
ff:74:d5:11:d8:9b:14:c2:2b:ad:c4:1a:cd:1f:9a:
d1:0e:68:27:a3:d6:20:11:27:0f:0b:46:9a:d5:93:
fb:f1:f5:3c:ab:3c:56:5e:6f:28:99:2c:f6:45:ad:
ca:30:ac:ef:ec:2e:fb:23:50:a5:a1:3e:90:14:34:
cb:4f:47:35:cf:87:89:a2:26:2a:99:13:57:c9:70:
20:93:b1:b0:3d:c8:55:65:33:ce:84:e1:bd:fc:94:
8a:61:79:62:b0:12:3c:ba:fe:0f:b0:cd:e5:9c:14:
8e:53:96:9d:8e:c2:f8:62:44:1a:48:79:7a:fb:f4:
8f:cc:fd:1b:ab:de:0f:92:ee:64:25:fa:dd:32:26:
99:ec:b1:5a:1a:00:cf:98:81:61:e9:09:b8:29:f3:
2b:13:a5:5d:b2:1f:85:7d:96:89:27:59:ac:e3:49:
89:84:08:c1:8a:32:c6:4e:e5:22:ba:1e:ae:5f:1c:
10:a2:c1:9f:55:52:3a:88:96:c7:fa:f8:14:c1:0e:
f8:2c:84:a5:97:5b:49:12:4e:2c:77:0f:a0:05:4a:
29:29:2b:ad:37:53:da:36:0b:74:34:ed:f1:9e:a1:
2a:3f:35:73:2f:16:d3:b3:9a:d4:c1:16:d3:38:c2:
5f:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:BC:50:D6:63:F3:B7:3B:E8:E5:45:16:27:3E:AF:89:35:2A:D0:49
X509v3 Authority Key Identifier:
keyid:0E:26:D4:5F:D5:69:21:D3:46:9D:19:C4:75:72:F2:75:F9:D5:52:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DibUX9VpIdNGnRnEdXLydfnVUkI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6a1baa-5f8f-420a-90c4-665a69cb8900/1/DibUX9VpIdNGnRnEdXLydfnVUkI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6a1baa-5f8f-420a-90c4-665a69cb8900/1/DibUX9VpIdNGnRnEdXLydfnVUkI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:62:0c:62:6a:c4:30:fa:a9:36:f2:9e:81:85:87:e7:e4:1f:
8e:d7:22:23:b6:6b:84:98:ba:9a:07:60:64:a2:b2:53:fa:25:
95:7a:e5:77:1b:ae:92:46:03:9c:93:5e:c7:dc:c1:3d:0b:da:
df:c4:1f:bc:b6:5d:b0:b1:b4:5e:96:ce:c2:56:e3:2a:8f:28:
6b:e6:e1:fb:7e:42:72:25:46:d7:f8:80:b6:d2:cb:35:ac:ce:
66:4f:2f:2d:1c:47:e8:12:f1:24:e5:05:dd:ad:a4:98:f4:2a:
14:41:e0:d1:6b:a0:28:1f:1d:b7:bb:5a:84:1d:6a:76:f5:71:
62:91:2c:90:fe:c6:d2:2d:ca:03:07:a1:55:2d:70:04:6b:65:
f6:a1:ab:5c:68:35:c1:45:0a:a3:6c:b5:07:9c:ec:20:8d:05:
c1:57:36:3a:b3:fc:27:a4:07:91:5d:2a:fa:6d:e4:02:58:61:
8a:af:89:68:66:66:65:c7:37:fd:eb:5a:42:0f:0c:a5:27:dc:
d4:5c:09:d7:ad:1f:fa:a7:d1:e0:ca:ad:fc:df:3f:e8:1e:b6:
b5:b2:72:54:46:47:d3:c2:99:bf:df:fe:9b:ff:04:4f:6e:5a:
32:31:b6:ef:b5:fe:4d:11:4a:e6:27:11:74:a3:57:69:e9:8e:
df:78:b6:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 04:27:59 2025 by rpki-client