Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/fb147f-04ee-48f0-807d-fe3db5253eb0/1/DtlRtDq5cf2S62PsJqWyJu0Tx1I.mft
File: DtlRtDq5cf2S62PsJqWyJu0Tx1I.mft (raw, json)
Hash identifier: IRQuHVngw+pxleE67ClJBM0hcUTQl4UfbGKZBo4tY74=
Subject key identifier: 8C:43:58:8C:8B:F7:5E:1F:AB:70:5E:BF:1E:F1:13:64:11:46:46:1B
Authority key identifier: 0E:D9:51:B4:3A:B9:71:FD:92:EB:63:EC:26:A5:B2:26:ED:13:C7:52
Certificate issuer: /CN=0ed951b43ab971fd92eb63ec26a5b226ed13c752
Certificate serial: 0198D6606235ED5ABB9AD5E63CEA7D4C8F05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DtlRtDq5cf2S62PsJqWyJu0Tx1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/fb147f-04ee-48f0-807d-fe3db5253eb0/1/DtlRtDq5cf2S62PsJqWyJu0Tx1I.mft
Manifest number: 042B
Signing time: Sat 23 Aug 2025 10:01:37 +0000
Manifest this update: Sat 23 Aug 2025 10:01:37 +0000
Manifest next update: Sun 24 Aug 2025 10:01:37 +0000
Files and hashes: 1: DtlRtDq5cf2S62PsJqWyJu0Tx1I.crl (hash: kOv2sJTFphU+5SGVAt+CucArR5Xc4OH3CH7zfFzVDUA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/fb147f-04ee-48f0-807d-fe3db5253eb0/1/DtlRtDq5cf2S62PsJqWyJu0Tx1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/fb147f-04ee-48f0-807d-fe3db5253eb0/1/DtlRtDq5cf2S62PsJqWyJu0Tx1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/DtlRtDq5cf2S62PsJqWyJu0Tx1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:62:35:ed:5a:bb:9a:d5:e6:3c:ea:7d:4c:8f:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ed951b43ab971fd92eb63ec26a5b226ed13c752
Validity
Not Before: Aug 23 10:01:37 2025 GMT
Not After : Aug 24 10:01:37 2025 GMT
Subject: CN=8c43588c8bf75e1fab705ebf1ef113641146461b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:70:40:6e:42:23:28:b9:27:87:2c:a9:20:91:
3e:b9:54:bd:99:b6:26:c8:df:60:9e:43:67:8b:f4:
ad:d9:17:95:af:48:a2:f0:4f:6f:96:85:4c:c8:07:
0a:f4:c2:c9:1d:24:51:c9:00:39:f0:52:54:53:af:
2d:e9:d5:76:ab:22:2c:73:8f:ac:44:0b:2e:b2:92:
9a:8e:9b:1f:4d:27:b3:d7:e4:80:b1:17:78:90:1f:
5e:0a:bf:aa:df:da:6e:18:d4:7b:5f:c7:53:8a:d6:
a9:08:5d:2b:cb:cf:0b:ba:8d:cf:ef:44:06:a8:ce:
35:6a:d9:32:6a:57:02:dc:d5:85:72:5f:29:ee:2e:
3d:1f:8f:96:d6:ba:3d:14:02:fd:7d:af:62:80:4b:
d5:66:6b:d7:e4:12:dc:ed:28:7f:1b:4c:39:c0:10:
f0:3f:42:5c:a6:9c:44:de:4b:6e:bf:9f:82:a4:fe:
6c:3c:d7:8c:60:aa:d3:a5:78:8b:b3:88:0b:be:ec:
21:fa:fc:99:74:41:74:a8:7a:71:e7:1d:20:74:fe:
6f:5b:7e:5c:51:89:b7:0f:2a:d8:d0:d3:56:50:8e:
23:7a:d5:8e:74:31:02:02:da:c5:10:11:d9:e6:a0:
cd:b4:ad:24:7e:68:ca:8d:cb:2f:0a:20:e7:9d:f3:
2b:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:43:58:8C:8B:F7:5E:1F:AB:70:5E:BF:1E:F1:13:64:11:46:46:1B
X509v3 Authority Key Identifier:
keyid:0E:D9:51:B4:3A:B9:71:FD:92:EB:63:EC:26:A5:B2:26:ED:13:C7:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DtlRtDq5cf2S62PsJqWyJu0Tx1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/fb147f-04ee-48f0-807d-fe3db5253eb0/1/DtlRtDq5cf2S62PsJqWyJu0Tx1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/fb147f-04ee-48f0-807d-fe3db5253eb0/1/DtlRtDq5cf2S62PsJqWyJu0Tx1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:0e:8e:8f:fa:bc:db:0d:5a:5e:1b:57:b5:a3:24:bb:f7:b7:
c1:ab:6b:37:4c:6b:43:ec:62:8a:a2:b1:f3:cc:8a:f7:2f:82:
2c:8a:6d:bf:57:db:1e:b1:bd:85:19:15:84:06:66:d9:a0:be:
64:c6:09:59:64:d7:fc:2e:59:50:d7:d0:c4:62:d4:38:f6:48:
e3:aa:ac:7c:13:c6:c6:02:90:65:bd:f4:a4:40:2c:73:4c:28:
25:d4:0a:56:87:e6:49:55:6b:d3:ad:94:86:a8:ca:b8:32:0a:
09:da:22:26:ba:56:50:68:d6:9e:18:80:83:0c:0e:dd:e0:ed:
de:a4:cf:24:25:29:57:5a:f6:a5:00:db:7c:c7:aa:24:30:34:
be:a1:b4:83:9a:d1:5d:1a:45:68:08:b2:7b:4f:61:9d:97:e8:
3c:cd:90:a7:83:cf:ca:ed:7b:72:e2:9e:c2:8f:49:6a:8d:48:
4b:36:35:b4:92:76:86:8b:4d:e0:5b:24:a8:50:01:df:04:47:
90:12:5c:6f:db:44:9b:31:06:f6:86:dc:21:d0:52:e0:cd:38:
56:66:a8:58:f1:4d:e1:29:46:0d:64:32:04:6d:91:37:9b:59:
d1:14:50:8a:b3:29:84:59:38:db:c9:a2:6d:bc:af:1e:9d:dc:
2c:85:56:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:27:37 2025 by rpki-client