Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/53741e-9392-4d19-99d2-ced29650a280/1/DaPL8eDoVupMU7WrroZZTsmTOYI.mft
File: DaPL8eDoVupMU7WrroZZTsmTOYI.mft (raw, json)
Hash identifier: tHtw0nL99f8toPsnSh0coRux1WpuXh3zakkMDwsTC6I=
Subject key identifier: D1:54:27:49:D1:C2:94:D6:D7:B3:1D:0F:D2:E9:2B:67:EC:90:E8:EC
Authority key identifier: 0D:A3:CB:F1:E0:E8:56:EA:4C:53:B5:AB:AE:86:59:4E:C9:93:39:82
Certificate issuer: /CN=0da3cbf1e0e856ea4c53b5abae86594ec9933982
Certificate serial: 0198D66135EEC03431DF7BCE2167637CEBB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DaPL8eDoVupMU7WrroZZTsmTOYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/53741e-9392-4d19-99d2-ced29650a280/1/DaPL8eDoVupMU7WrroZZTsmTOYI.mft
Manifest number: 0D7B
Signing time: Sat 23 Aug 2025 10:02:31 +0000
Manifest this update: Sat 23 Aug 2025 10:02:31 +0000
Manifest next update: Sun 24 Aug 2025 10:02:31 +0000
Files and hashes: 1: DaPL8eDoVupMU7WrroZZTsmTOYI.crl (hash: 7PBBimZ+deyjz1PW1R1mYgNCEY9Kpg6ofsQLCDT4Y/k=)
2: MNtx-M1QVv5z_3qcN6vxhaOotfc.roa (hash: px53xNqq/MugnV+199J7ZDHhE5FdBcLFsMKgKSEziic=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/53741e-9392-4d19-99d2-ced29650a280/1/DaPL8eDoVupMU7WrroZZTsmTOYI.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/53741e-9392-4d19-99d2-ced29650a280/1/DaPL8eDoVupMU7WrroZZTsmTOYI.mft
rsync://rpki.ripe.net/repository/DEFAULT/DaPL8eDoVupMU7WrroZZTsmTOYI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:02:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:61:35:ee:c0:34:31:df:7b:ce:21:67:63:7c:eb:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0da3cbf1e0e856ea4c53b5abae86594ec9933982
Validity
Not Before: Aug 23 10:02:31 2025 GMT
Not After : Aug 24 10:02:31 2025 GMT
Subject: CN=d1542749d1c294d6d7b31d0fd2e92b67ec90e8ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:ce:35:e4:73:ac:a1:85:7e:4c:20:be:d0:8c:
4e:7b:83:1a:3a:61:8e:57:45:4e:c2:2e:63:4b:6f:
bf:74:18:e7:5d:58:5f:c4:e4:3c:d1:6e:9f:8c:52:
e5:15:1f:33:d7:b9:59:1a:21:8b:67:8a:a4:77:32:
63:9c:4b:30:e3:31:86:42:9f:91:37:f6:18:cc:6d:
9a:5e:22:f0:e1:4c:a5:4c:5e:25:8f:ba:f8:04:77:
f9:75:61:fc:4a:ad:b0:b5:ef:a1:f1:9f:ee:20:b9:
ba:dc:0b:7a:54:ec:a0:0b:c1:40:0c:52:d2:b3:b7:
ca:3b:c6:e5:d9:42:c4:d4:3f:eb:b9:ca:69:b1:b9:
d3:0c:0e:0a:ac:7b:11:6c:bd:f9:4d:3c:ea:c1:fd:
b0:46:72:5d:cf:79:5e:35:28:24:7f:14:e6:5c:82:
84:df:94:2b:36:4a:04:1a:e9:f3:5f:95:08:fa:a8:
92:a0:fc:f5:21:8a:b4:da:8a:10:80:78:48:e9:aa:
79:45:d4:34:21:09:cc:e6:75:3f:27:f0:66:24:95:
ae:16:78:d4:a6:29:1c:b9:67:b6:ee:d4:44:a0:66:
ba:f2:22:76:de:d7:39:cb:68:a7:ae:c0:19:01:33:
41:3e:99:29:b1:6a:0d:cc:75:55:38:09:f0:7a:c3:
32:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:54:27:49:D1:C2:94:D6:D7:B3:1D:0F:D2:E9:2B:67:EC:90:E8:EC
X509v3 Authority Key Identifier:
keyid:0D:A3:CB:F1:E0:E8:56:EA:4C:53:B5:AB:AE:86:59:4E:C9:93:39:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DaPL8eDoVupMU7WrroZZTsmTOYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/53741e-9392-4d19-99d2-ced29650a280/1/DaPL8eDoVupMU7WrroZZTsmTOYI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/53741e-9392-4d19-99d2-ced29650a280/1/DaPL8eDoVupMU7WrroZZTsmTOYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:84:a5:25:7f:0c:4d:4e:f3:9a:45:b0:b4:c4:91:7e:e5:4d:
11:81:98:a2:8c:a3:17:82:40:16:d8:68:72:92:97:53:8c:cb:
31:4d:a0:e2:fa:5a:99:17:46:72:c5:83:c8:8a:76:97:79:20:
61:6e:c4:7d:af:c6:72:43:b9:a1:0e:67:79:77:db:c7:ae:94:
0f:0c:ca:9a:9b:3c:ed:41:a7:cc:98:a7:47:8c:c3:7f:67:a3:
cb:f4:35:cd:9e:cd:14:42:b7:9c:37:82:29:72:7d:18:32:49:
f5:6f:65:bc:85:c2:30:1c:02:c4:aa:f5:8b:73:f3:80:5d:f6:
20:b5:bd:8e:de:b2:6d:e4:30:0c:00:d7:61:30:1c:ca:ab:7a:
e6:8d:a3:87:85:ea:9b:04:0d:6f:36:0d:dd:4d:8a:14:1d:e6:
a9:fd:26:bc:97:96:92:05:dd:47:9a:d0:c7:ab:73:11:23:1f:
51:2a:ab:80:f2:d5:49:0a:5d:67:f9:32:78:e6:18:c2:fb:75:
0a:50:8f:b9:f9:61:76:da:e5:54:1d:ff:5a:ab:d1:f2:e9:89:
d5:39:bd:be:40:56:c2:3d:29:d9:e9:e9:ba:cb:fe:22:86:a9:
8a:26:22:8a:e8:97:3c:d6:13:29:2c:4e:bf:c0:23:85:56:91:
8c:4d:4d:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:00:07 2025 by rpki-client