Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/299959-12f4-4fe7-9f30-99e76c2739fb/1/dnmIT2MwtlBg7cQcysDlRtOApQQ.mft
File: dnmIT2MwtlBg7cQcysDlRtOApQQ.mft (raw, json)
Hash identifier: ClfwSdpaOvC7oFWcRhJhM9EuB5H2TavyA2ltPt6c2xk=
Subject key identifier: 9B:71:83:3F:0C:22:1C:C7:A1:07:EE:95:CE:7F:99:AA:F3:CE:52:15
Authority key identifier: 76:79:88:4F:63:30:B6:50:60:ED:C4:1C:CA:C0:E5:46:D3:80:A5:04
Certificate issuer: /CN=7679884f6330b65060edc41ccac0e546d380a504
Certificate serial: 0199FAA167E017A035C07EFB2447AA0C8998
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dnmIT2MwtlBg7cQcysDlRtOApQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/299959-12f4-4fe7-9f30-99e76c2739fb/1/dnmIT2MwtlBg7cQcysDlRtOApQQ.mft
Manifest number: 94
Signing time: Sun 19 Oct 2025 04:01:45 +0000
Manifest this update: Sun 19 Oct 2025 04:01:45 +0000
Manifest next update: Mon 20 Oct 2025 04:01:45 +0000
Files and hashes: 1: dnmIT2MwtlBg7cQcysDlRtOApQQ.crl (hash: swf7AW4g4TkCKskDuLcSNDDG9SHsu3QvEhyMNPbTrjc=)
2: pqKjRcHlDiTELm_P0k88IdYl64A.roa (hash: uOigO0BbOXYSDcxSVpkhh97Q9VqPSwLH4vkq9m1CYjE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/299959-12f4-4fe7-9f30-99e76c2739fb/1/dnmIT2MwtlBg7cQcysDlRtOApQQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/299959-12f4-4fe7-9f30-99e76c2739fb/1/dnmIT2MwtlBg7cQcysDlRtOApQQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/dnmIT2MwtlBg7cQcysDlRtOApQQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 04:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:a1:67:e0:17:a0:35:c0:7e:fb:24:47:aa:0c:89:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7679884f6330b65060edc41ccac0e546d380a504
Validity
Not Before: Oct 19 04:01:45 2025 GMT
Not After : Oct 20 04:01:45 2025 GMT
Subject: CN=9b71833f0c221cc7a107ee95ce7f99aaf3ce5215
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:24:71:87:41:3c:cc:13:42:ae:25:32:b8:04:
df:5c:30:47:d8:07:23:75:ba:fb:74:c6:dc:08:3e:
0b:81:e0:75:90:de:f8:ac:99:ce:30:be:fc:9f:c7:
85:96:c3:ef:eb:36:72:c3:a3:2c:1c:97:d3:85:29:
d4:21:66:dd:50:c5:a5:f8:bd:f6:e5:03:5a:37:0c:
6f:d0:45:23:e9:ac:cb:ca:3c:35:ba:4f:46:7d:bd:
14:1a:cd:90:70:13:28:18:97:0d:72:0c:03:45:cb:
05:7a:ab:3c:f3:7e:4a:78:63:f0:3b:91:d9:ee:b3:
4e:5d:dc:f2:91:ad:eb:e5:be:91:41:8e:38:2f:fd:
62:2f:3a:dd:d5:7e:5f:61:39:1a:cd:e8:1e:5b:f2:
98:b5:83:62:e9:95:e2:e9:f2:54:b3:5f:54:95:75:
4c:d6:63:84:72:e6:f8:37:da:ec:ca:e4:2e:7a:32:
1f:53:63:e7:3a:5a:15:33:f0:ab:7b:5a:ec:37:5a:
85:d5:64:d1:65:09:6f:c5:3f:35:70:32:d0:62:df:
97:e7:6b:df:24:0c:44:c3:47:3b:8a:01:42:35:5e:
a7:50:b6:87:aa:c8:bb:bf:03:48:c9:ad:60:b6:29:
dd:6e:e2:43:55:2b:c2:92:97:ae:55:c9:37:19:3d:
9f:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:71:83:3F:0C:22:1C:C7:A1:07:EE:95:CE:7F:99:AA:F3:CE:52:15
X509v3 Authority Key Identifier:
keyid:76:79:88:4F:63:30:B6:50:60:ED:C4:1C:CA:C0:E5:46:D3:80:A5:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dnmIT2MwtlBg7cQcysDlRtOApQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/299959-12f4-4fe7-9f30-99e76c2739fb/1/dnmIT2MwtlBg7cQcysDlRtOApQQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/299959-12f4-4fe7-9f30-99e76c2739fb/1/dnmIT2MwtlBg7cQcysDlRtOApQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:91:a3:0f:35:99:42:c7:07:33:dd:39:d4:ee:1b:65:7a:ca:
17:e7:c9:59:a1:f3:91:19:7f:19:d7:a1:d7:3c:36:66:07:61:
00:6f:53:e7:87:8d:1f:fc:29:3a:35:08:54:a8:00:c8:e0:48:
77:53:54:10:b4:8b:58:0e:41:c0:ff:5e:bc:10:9e:f6:8f:bf:
28:7d:a9:6c:d1:48:75:ee:bd:9b:c0:c5:1e:2d:d7:74:41:7c:
c8:10:a0:ae:ca:e1:07:b0:fa:43:63:48:4b:7b:86:bf:c1:28:
ee:d8:e0:d8:6b:3a:81:da:f2:78:e3:46:0d:e1:d3:f2:e2:ba:
5d:04:49:cb:2b:34:c5:c5:41:39:c0:86:39:f0:82:26:5e:00:
83:2d:6c:cd:e3:38:72:97:91:cd:05:50:de:b2:16:4c:d0:f3:
d4:32:53:a7:55:1e:2e:02:2f:1a:a2:bf:0a:a2:cd:50:d0:77:
20:d8:2f:04:a6:c0:75:a8:91:50:11:21:a0:ae:a1:17:25:d5:
99:d7:83:9b:7d:7b:53:8b:dc:b0:2e:b3:9e:20:1f:cc:d7:90:
1a:8b:b5:9c:2d:7f:77:78:9e:6f:7e:7e:3f:bd:b9:9d:fc:3a:
4b:97:e4:09:6d:36:5d:2c:33:31:27:84:eb:f4:0c:74:77:13:
9f:e8:23:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:05:05 2025 by rpki-client