Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/0d2ca3-0234-4dbf-8190-12d28d7d4223/1/DykT4xUxAZpDKBkGVbRd2WvdLJ4.mft
File: DykT4xUxAZpDKBkGVbRd2WvdLJ4.mft (raw, json)
Hash identifier: yLudLL5xMtP1bpTeR7xi8U/DYFRLr5UaDewGisUwZ7s=
Subject key identifier: 9C:20:D4:50:6C:49:14:A4:99:F8:FE:49:5A:5D:55:52:AE:E2:D8:8B
Authority key identifier: 0F:29:13:E3:15:31:01:9A:43:28:19:06:55:B4:5D:D9:6B:DD:2C:9E
Certificate issuer: /CN=0f2913e31531019a4328190655b45dd96bdd2c9e
Certificate serial: 0198D5837C5913A5D8822325AB612C872F49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DykT4xUxAZpDKBkGVbRd2WvdLJ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/0d2ca3-0234-4dbf-8190-12d28d7d4223/1/DykT4xUxAZpDKBkGVbRd2WvdLJ4.mft
Manifest number: 0663
Signing time: Sat 23 Aug 2025 06:00:20 +0000
Manifest this update: Sat 23 Aug 2025 06:00:20 +0000
Manifest next update: Sun 24 Aug 2025 06:00:20 +0000
Files and hashes: 1: DykT4xUxAZpDKBkGVbRd2WvdLJ4.crl (hash: ShUQrGzZUOmXbyubYi2bDiPVyrPOP63ewx9OjdxEBhs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/0d2ca3-0234-4dbf-8190-12d28d7d4223/1/DykT4xUxAZpDKBkGVbRd2WvdLJ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/0d2ca3-0234-4dbf-8190-12d28d7d4223/1/DykT4xUxAZpDKBkGVbRd2WvdLJ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/DykT4xUxAZpDKBkGVbRd2WvdLJ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:7c:59:13:a5:d8:82:23:25:ab:61:2c:87:2f:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f2913e31531019a4328190655b45dd96bdd2c9e
Validity
Not Before: Aug 23 06:00:20 2025 GMT
Not After : Aug 24 06:00:20 2025 GMT
Subject: CN=9c20d4506c4914a499f8fe495a5d5552aee2d88b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:6a:c8:6e:aa:3f:b8:1b:8d:28:29:eb:c7:a0:
c5:26:ad:b9:15:c4:8e:14:fe:9a:64:eb:7b:58:c4:
ad:2f:13:17:a9:f2:d1:a6:de:65:af:74:cc:00:ea:
e9:fa:af:9c:f6:f2:3b:90:ad:05:b0:ed:91:2c:20:
71:5f:d5:54:97:34:c2:6c:45:98:cd:5b:5d:ac:73:
72:42:51:3f:bc:34:6d:93:5e:de:d0:bb:2b:0f:8d:
13:62:06:af:88:ca:d2:9a:b6:15:98:17:ed:7f:3f:
aa:6d:c6:35:08:f6:5d:13:7a:56:15:c1:7f:c2:42:
8f:88:ed:ab:e6:ae:54:bf:96:97:ee:66:12:72:c5:
4d:75:2d:de:03:f2:df:76:60:fc:bf:56:bc:27:7d:
78:3e:d9:1f:d9:da:f1:13:7e:7f:b8:5d:82:60:73:
59:b6:5c:28:b0:02:57:2c:e4:15:00:e8:ba:d7:cb:
a8:3e:f6:cc:66:5d:6a:d8:c7:f8:41:f8:8e:2b:c0:
76:9b:b5:bd:c0:1b:8b:d9:98:88:4d:df:1a:30:1d:
77:a6:7a:a2:a4:39:60:1a:50:4a:71:2f:a6:5e:d1:
93:60:56:99:ab:3c:aa:6b:14:69:7e:cd:25:d7:ed:
6e:3b:7a:07:a3:ed:ed:dc:58:e5:74:2e:f1:e1:ff:
cb:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:20:D4:50:6C:49:14:A4:99:F8:FE:49:5A:5D:55:52:AE:E2:D8:8B
X509v3 Authority Key Identifier:
keyid:0F:29:13:E3:15:31:01:9A:43:28:19:06:55:B4:5D:D9:6B:DD:2C:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DykT4xUxAZpDKBkGVbRd2WvdLJ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/0d2ca3-0234-4dbf-8190-12d28d7d4223/1/DykT4xUxAZpDKBkGVbRd2WvdLJ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/0d2ca3-0234-4dbf-8190-12d28d7d4223/1/DykT4xUxAZpDKBkGVbRd2WvdLJ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:65:61:9a:8d:e8:e2:b1:92:72:3a:ec:c2:da:d7:12:2c:80:
ee:00:27:7e:ae:f7:54:7f:a7:0f:bf:a5:06:42:b7:0e:6a:be:
f4:4f:aa:13:f7:76:0d:c9:01:ef:a9:c5:c7:a7:48:ae:55:3c:
15:14:3f:02:4b:e4:9f:10:dd:49:c8:dc:3a:c4:25:c3:60:c9:
d1:2b:39:af:28:cc:f5:9b:60:0c:8d:d9:cd:78:bd:59:fd:7a:
90:2a:ee:a6:a2:df:ff:2e:22:de:28:ad:50:31:37:9f:4f:b8:
b4:4c:bf:c9:db:fc:46:65:7a:6f:5a:b0:78:96:68:17:bf:d8:
11:7d:2f:31:d2:75:b0:b0:70:bf:e5:c7:47:b5:8d:b6:5e:ac:
fa:89:8b:59:2c:65:3c:44:e7:84:85:97:05:07:0d:eb:9f:df:
06:97:56:4c:b4:a5:9d:61:8a:b3:28:d8:1d:1e:94:c1:a2:d6:
09:6f:48:b6:9b:82:14:79:4b:07:90:8d:d0:1f:6f:0c:86:54:
45:b0:f5:bd:89:c5:a8:f7:b9:78:92:ed:cc:9d:7b:03:40:80:
ef:e8:91:c0:38:a2:cc:1b:d8:2a:a5:ff:73:7b:07:1a:2c:e7:
9b:2f:32:12:9d:35:42:ce:84:52:a4:db:a3:f1:20:78:66:71:
22:95:c0:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:54:25 2025 by rpki-client