Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/cea161-cb5c-4e41-b836-d80077e12b5d/1/D0nEmnXPbiSMm1HHBU2y-Nnc7cs.mft
File: D0nEmnXPbiSMm1HHBU2y-Nnc7cs.mft (raw, json)
Hash identifier: sjIzfKA0smgbyf+HTM6d5phZcFXyDx6qVCOU9WbffTw=
Subject key identifier: 1D:37:25:10:43:9C:63:F1:24:E6:C7:07:4C:1D:B6:17:3E:24:5F:EB
Authority key identifier: 0F:49:C4:9A:75:CF:6E:24:8C:9B:51:C7:05:4D:B2:F8:D9:DC:ED:CB
Certificate issuer: /CN=0f49c49a75cf6e248c9b51c7054db2f8d9dcedcb
Certificate serial: 0198D47280DA04BB00224D59F7749B195103
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D0nEmnXPbiSMm1HHBU2y-Nnc7cs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/cea161-cb5c-4e41-b836-d80077e12b5d/1/D0nEmnXPbiSMm1HHBU2y-Nnc7cs.mft
Manifest number: 0B54
Signing time: Sat 23 Aug 2025 01:02:10 +0000
Manifest this update: Sat 23 Aug 2025 01:02:10 +0000
Manifest next update: Sun 24 Aug 2025 01:02:10 +0000
Files and hashes: 1: D0nEmnXPbiSMm1HHBU2y-Nnc7cs.crl (hash: V59o8RiaNwi/3xmW48wcwoDPh5KhUAWiWcekD1+84jk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/cea161-cb5c-4e41-b836-d80077e12b5d/1/D0nEmnXPbiSMm1HHBU2y-Nnc7cs.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/cea161-cb5c-4e41-b836-d80077e12b5d/1/D0nEmnXPbiSMm1HHBU2y-Nnc7cs.mft
rsync://rpki.ripe.net/repository/DEFAULT/D0nEmnXPbiSMm1HHBU2y-Nnc7cs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:80:da:04:bb:00:22:4d:59:f7:74:9b:19:51:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f49c49a75cf6e248c9b51c7054db2f8d9dcedcb
Validity
Not Before: Aug 23 01:02:10 2025 GMT
Not After : Aug 24 01:02:10 2025 GMT
Subject: CN=1d372510439c63f124e6c7074c1db6173e245feb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:16:e9:93:8b:5e:d9:50:a7:9f:9f:28:f3:0a:
ff:2e:41:c6:d7:c7:10:dc:52:11:2d:fa:6e:80:a2:
22:00:4a:57:6b:f0:61:c7:2b:f6:4f:af:30:53:33:
0f:a8:73:7b:32:88:19:78:c3:53:eb:0d:d1:1f:ad:
be:9d:ff:be:af:60:ff:5e:e6:73:5e:d0:9d:3d:ea:
d3:18:60:dd:2d:63:9a:47:d1:fb:5c:0d:fa:76:9e:
1d:d1:e0:a3:c6:47:8f:ab:d5:a7:fc:f3:a8:02:73:
9d:d0:83:01:12:8f:59:d4:b3:42:7f:0a:5d:6b:e4:
77:d1:18:01:ed:0f:c6:ec:00:4d:4f:0b:7c:f7:5b:
83:e6:89:04:65:89:fe:3c:d3:2b:94:06:1b:2b:59:
3d:99:2d:c6:44:24:b9:5e:32:7f:0a:ff:82:4a:47:
a3:59:e6:02:32:fc:0c:53:77:d5:8c:c0:3d:ba:e9:
b2:ed:5f:86:63:83:97:e2:3b:3e:19:e3:89:26:b7:
5e:e9:b1:7a:e9:9b:32:60:36:6b:74:e4:c7:37:c1:
53:b8:fa:07:11:64:a5:5c:88:b3:ef:63:dc:f6:6f:
03:0e:80:bb:ae:f0:1b:e5:b9:12:52:2d:4c:da:b6:
3d:d4:54:12:8b:ba:04:2d:6f:5d:2a:64:f9:d3:53:
9b:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:37:25:10:43:9C:63:F1:24:E6:C7:07:4C:1D:B6:17:3E:24:5F:EB
X509v3 Authority Key Identifier:
keyid:0F:49:C4:9A:75:CF:6E:24:8C:9B:51:C7:05:4D:B2:F8:D9:DC:ED:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D0nEmnXPbiSMm1HHBU2y-Nnc7cs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/cea161-cb5c-4e41-b836-d80077e12b5d/1/D0nEmnXPbiSMm1HHBU2y-Nnc7cs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/cea161-cb5c-4e41-b836-d80077e12b5d/1/D0nEmnXPbiSMm1HHBU2y-Nnc7cs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:2a:99:65:f1:39:a6:9a:c2:38:80:49:da:c4:ee:97:9f:d4:
62:65:8c:e4:08:43:65:53:64:4d:e8:65:cc:1d:60:6a:dc:5f:
5d:86:97:05:c3:9f:b1:00:2a:c7:a2:33:23:b3:bf:3e:5d:4f:
82:04:db:e5:3f:79:0f:df:fd:e8:d0:4f:d1:91:53:90:c6:3b:
09:cb:86:5e:49:45:3c:c6:37:5a:ec:86:5f:10:29:8f:65:cc:
be:b7:91:13:28:5b:5b:bd:64:a2:ea:95:bb:99:9c:c4:8b:41:
f1:c9:7c:c1:81:9b:bc:e5:f2:9a:ca:0b:95:fa:05:89:ec:63:
c3:fa:98:36:c1:38:29:dc:ca:22:e3:59:9d:07:02:fc:47:54:
45:bf:6c:ef:ca:74:f4:19:68:5b:7e:96:4a:50:3e:67:74:07:
41:10:d3:6f:16:a5:5c:6d:82:50:cc:db:b2:b2:95:f1:3b:b3:
24:0c:4c:8b:72:5f:6f:f8:f6:57:59:42:a4:ca:3e:29:30:26:
cc:5f:bb:ed:67:ed:ed:ae:96:8a:5f:41:cd:6b:08:38:dd:13:
b6:6e:83:fe:d6:af:77:76:ec:84:f7:2c:4b:96:f8:7a:75:c6:
38:b0:91:ff:66:11:e0:97:c5:ae:94:cf:8b:3c:fb:b7:1b:f1:
5a:c6:b0:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:46:45 2025 by rpki-client