
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/d22140-d961-4377-b8c6-3ef594e6c696/1/Dp4K_r9UpNIYr7rtVDB3G793d6k.mft
File: Dp4K_r9UpNIYr7rtVDB3G793d6k.mft (raw, json)
Hash identifier: 5e76DaoOjHTH+85rv0u9VmccxNoh27JAfO+cV+K90Rg=
Subject key identifier: 4A:3E:C8:57:9A:11:93:25:44:C6:0F:1C:0F:6A:02:39:C9:CD:B5:D8
Authority key identifier: 0E:9E:0A:FE:BF:54:A4:D2:18:AF:BA:ED:54:30:77:1B:BF:77:77:A9
Certificate issuer: /CN=0e9e0afebf54a4d218afbaed5430771bbf7777a9
Certificate serial: 0198D4E02599B47683A6D3C7AD9ED9D173BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dp4K_r9UpNIYr7rtVDB3G793d6k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/d22140-d961-4377-b8c6-3ef594e6c696/1/Dp4K_r9UpNIYr7rtVDB3G793d6k.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 03:01:56 +0000
Manifest this update: Sat 23 Aug 2025 03:01:56 +0000
Manifest next update: Sun 24 Aug 2025 03:01:56 +0000
Files and hashes: 1: Dp4K_r9UpNIYr7rtVDB3G793d6k.crl (hash: YT34u2HuukA+Sl7etmFUIknelQbAt64QY6UyzDPTNSw=)
2: RX3j6hG8jPHQlqgQDFsxWI9wjiU.roa (hash: iX9OHbXh9X/4e6G7wovNf6r/WuAf8SkEeNMsZiGLv+M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/d22140-d961-4377-b8c6-3ef594e6c696/1/Dp4K_r9UpNIYr7rtVDB3G793d6k.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/d22140-d961-4377-b8c6-3ef594e6c696/1/Dp4K_r9UpNIYr7rtVDB3G793d6k.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dp4K_r9UpNIYr7rtVDB3G793d6k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:25:99:b4:76:83:a6:d3:c7:ad:9e:d9:d1:73:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e9e0afebf54a4d218afbaed5430771bbf7777a9
Validity
Not Before: Aug 23 03:01:56 2025 GMT
Not After : Aug 24 03:01:56 2025 GMT
Subject: CN=4a3ec8579a11932544c60f1c0f6a0239c9cdb5d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:83:7b:3f:e4:e2:55:60:b1:4b:12:dd:98:c3:
5e:48:bc:37:e6:00:7d:69:28:4f:d1:3a:91:2f:1c:
0e:5c:e4:46:01:08:7c:32:3a:74:86:71:21:4d:c3:
87:28:03:39:66:38:84:4e:af:5d:cd:67:ab:65:c8:
44:02:4a:fb:f7:b5:5c:4a:00:da:22:a4:0b:b9:03:
f6:e5:ab:34:1d:c6:93:1d:71:ab:e6:2c:40:5d:ec:
41:3a:90:48:5d:9d:aa:2e:27:fe:d2:8a:5e:6d:d2:
e8:58:8f:22:18:e0:2f:98:49:28:25:bc:93:56:43:
fb:cd:04:50:46:00:42:c5:4c:c5:84:a6:0d:ac:18:
99:d1:8a:1f:3b:19:1b:30:79:b1:e1:cf:f5:fd:8e:
6a:0d:7b:8f:a7:68:68:84:67:b0:f4:59:2e:3f:84:
06:e8:4f:38:79:2c:bb:9b:d3:cf:77:ca:06:88:fb:
21:f2:1f:c9:43:5d:71:cc:4a:08:de:0c:48:11:ea:
c5:6e:c9:18:d9:bb:94:e2:bb:23:21:cb:2f:4a:d7:
e5:ce:dd:03:ec:ae:7f:73:18:2c:29:cf:bb:7b:ae:
00:0e:88:e1:9d:d5:cb:92:6e:cc:2d:68:e4:38:54:
0b:c2:5c:88:fb:12:c8:79:e4:b5:6c:f6:57:d2:a8:
9c:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:3E:C8:57:9A:11:93:25:44:C6:0F:1C:0F:6A:02:39:C9:CD:B5:D8
X509v3 Authority Key Identifier:
keyid:0E:9E:0A:FE:BF:54:A4:D2:18:AF:BA:ED:54:30:77:1B:BF:77:77:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dp4K_r9UpNIYr7rtVDB3G793d6k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d22140-d961-4377-b8c6-3ef594e6c696/1/Dp4K_r9UpNIYr7rtVDB3G793d6k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d22140-d961-4377-b8c6-3ef594e6c696/1/Dp4K_r9UpNIYr7rtVDB3G793d6k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:bb:6f:74:1a:f4:63:9b:1c:3b:dd:8c:b6:da:00:f1:fe:d3:
24:81:88:7f:2f:97:fb:e3:9d:13:a2:24:5f:46:62:4d:99:6c:
79:69:97:f0:16:b0:62:8e:82:d9:80:28:db:eb:60:09:68:d5:
b5:7d:61:d0:85:c1:30:d2:15:59:47:b3:b5:c5:be:c1:af:95:
aa:83:d5:20:c3:32:a2:96:4c:89:be:8e:a7:a9:6c:25:40:9a:
5e:d9:ac:d1:9d:75:77:dd:fd:bb:ca:4b:cb:32:9d:47:95:38:
4c:2b:b2:2a:fa:37:31:3c:ff:62:9e:71:f9:b4:40:9d:2c:1b:
d0:41:06:48:09:40:3f:1c:46:62:77:57:d8:e6:9f:f1:c5:67:
e5:60:4f:e0:31:3b:fd:fe:49:22:22:eb:0f:8e:f8:75:36:ac:
65:09:22:d6:5a:3d:95:aa:c8:0c:28:d2:b5:71:02:20:26:7b:
2e:b6:5d:39:30:5f:78:ed:94:ac:f7:0d:3d:8a:9f:17:f3:27:
30:9b:a4:97:62:d0:2f:ad:39:4a:bd:98:a7:b5:a9:e6:23:00:
26:7b:42:68:46:46:b1:fd:c3:c3:1c:ec:85:f3:81:1c:bc:7d:
5b:25:97:a5:62:cc:d4:e1:06:ab:03:92:80:0f:58:f3:0e:d5:
83:2c:ce:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:26:14 2025 by rpki-client