Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/96282f-5a29-4fdd-adf9-d210838a46e6/1/DSXP1Saq1ypMj0cz-soPTbf592c.mft
File: DSXP1Saq1ypMj0cz-soPTbf592c.mft (raw, json)
Hash identifier: BOL2QGUdUspca2CTl28BWJrShJZCswkY4fIjeZ9kmz0=
Subject key identifier: 45:8D:EE:43:A9:C9:5D:72:FA:9A:8E:AA:25:F4:A7:55:C3:83:7D:B7
Authority key identifier: 0D:25:CF:D5:26:AA:D7:2A:4C:8F:47:33:FA:CA:0F:4D:B7:F9:F7:67
Certificate issuer: /CN=0d25cfd526aad72a4c8f4733faca0f4db7f9f767
Certificate serial: 01991764A8EDBC07F8A3999D54B8EC12A957
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DSXP1Saq1ypMj0cz-soPTbf592c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/96282f-5a29-4fdd-adf9-d210838a46e6/1/DSXP1Saq1ypMj0cz-soPTbf592c.mft
Manifest number: 26
Signing time: Fri 05 Sep 2025 01:01:36 +0000
Manifest this update: Fri 05 Sep 2025 01:01:36 +0000
Manifest next update: Sat 06 Sep 2025 01:01:36 +0000
Files and hashes: 1: DSXP1Saq1ypMj0cz-soPTbf592c.crl (hash: csTP2yw1kmAtaNd+IT8I2iabobREPHC7ORd8vCsxJPg=)
2: zQtGsgzqOK-0hoW-F87Yx5VVUg0.roa (hash: PEtW7YagTcXDXA2f9YO+bwyb8k/56XuZ1pNjFIGkhUk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/96282f-5a29-4fdd-adf9-d210838a46e6/1/DSXP1Saq1ypMj0cz-soPTbf592c.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/96282f-5a29-4fdd-adf9-d210838a46e6/1/DSXP1Saq1ypMj0cz-soPTbf592c.mft
rsync://rpki.ripe.net/repository/DEFAULT/DSXP1Saq1ypMj0cz-soPTbf592c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:17:64:a8:ed:bc:07:f8:a3:99:9d:54:b8:ec:12:a9:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d25cfd526aad72a4c8f4733faca0f4db7f9f767
Validity
Not Before: Sep 5 01:01:36 2025 GMT
Not After : Sep 6 01:01:36 2025 GMT
Subject: CN=458dee43a9c95d72fa9a8eaa25f4a755c3837db7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:3c:43:47:bc:01:1b:3a:ab:b1:5a:72:67:76:
3b:c9:60:82:c6:8c:ac:36:a0:0a:6d:42:2f:02:d3:
85:79:82:5d:4b:0f:97:68:12:d3:18:61:a6:b2:36:
cf:8b:c9:19:19:2e:e4:51:81:09:7b:64:25:9c:84:
87:34:93:b1:b0:18:b0:8c:5d:ae:18:46:83:49:47:
6d:c8:88:12:2a:4d:ce:92:23:c2:70:4b:66:de:7c:
58:8c:9c:93:af:55:d8:d0:53:0a:e1:c1:93:68:42:
51:41:8f:d4:d3:ed:b5:48:a9:e0:f4:1b:08:88:8d:
19:00:58:4c:80:1d:4f:3d:1e:a7:fd:d2:ea:c2:1b:
3d:2f:cb:90:c9:bc:a4:91:6a:0b:ac:d3:32:67:28:
ef:da:7b:52:a0:eb:87:cc:c5:42:16:51:9e:b4:8b:
4b:ae:fb:33:c0:77:cf:92:12:27:8e:a5:c6:8a:11:
1b:8f:37:3f:98:a2:ca:fb:86:46:a0:dc:c8:44:cc:
45:bc:69:8d:1b:02:32:19:4f:33:82:01:d0:82:75:
7e:ad:0d:ae:62:46:4f:4f:c2:e8:01:ea:9c:bb:6a:
7f:29:be:c1:99:8d:b6:11:42:79:e3:b0:2b:b0:d4:
fd:62:e6:44:db:d9:97:5c:9c:d6:5f:25:b3:6c:99:
a2:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:8D:EE:43:A9:C9:5D:72:FA:9A:8E:AA:25:F4:A7:55:C3:83:7D:B7
X509v3 Authority Key Identifier:
keyid:0D:25:CF:D5:26:AA:D7:2A:4C:8F:47:33:FA:CA:0F:4D:B7:F9:F7:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DSXP1Saq1ypMj0cz-soPTbf592c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/96282f-5a29-4fdd-adf9-d210838a46e6/1/DSXP1Saq1ypMj0cz-soPTbf592c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/96282f-5a29-4fdd-adf9-d210838a46e6/1/DSXP1Saq1ypMj0cz-soPTbf592c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d2:23:7e:d1:bd:18:a8:63:95:c0:ee:99:9d:c4:07:e1:74:7c:
df:b5:6f:cc:75:cb:4d:9a:03:eb:7e:70:e8:12:fe:e2:8b:40:
b6:02:b1:60:03:33:7c:a5:3a:29:b7:8f:09:d2:69:24:a0:22:
e9:d5:59:4b:8c:1e:6e:a8:b0:db:8b:b8:70:e8:e4:af:a7:89:
1c:11:7c:2b:2d:b1:5a:41:89:c8:36:ab:4f:4b:3b:ef:e3:94:
09:ad:1c:43:fa:ca:df:b5:2b:0e:c0:67:a2:2e:a4:c4:3c:51:
a2:d5:f6:db:6e:31:6c:7c:39:66:47:6e:49:5a:97:5c:dc:6f:
5a:56:12:92:11:be:61:74:89:1d:2e:00:6b:62:5b:ad:46:a0:
8c:2c:a2:12:78:88:8e:09:f7:77:84:0b:60:c7:f2:c4:ab:f2:
73:ba:82:47:03:af:2a:4b:93:4b:97:5f:d1:a8:11:ba:93:6a:
3c:86:1a:b8:3c:cf:f2:ce:22:94:e3:29:e0:20:64:95:d4:08:
6b:e8:16:33:cd:c9:63:a5:84:c9:fe:ca:af:67:9d:70:40:b7:
69:e3:a0:9d:50:67:03:dd:fa:76:3c:88:ff:bf:ef:e3:d5:2f:
97:88:9d:6b:c7:54:30:aa:38:b8:40:de:7a:08:20:45:56:27:
76:b9:43:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 06:05:23 2025 by rpki-client