Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/58e8f8-1b27-41a4-92ab-fe8484f7079d/1/DTIXImHJUJ5XNSE3ugGSqEhrb90.mft
File: DTIXImHJUJ5XNSE3ugGSqEhrb90.mft (raw, json)
Hash identifier: moE9ZvNGh+uNZZ5q/J8BtRubkzVM4/F8mk4I4lWhrOs=
Subject key identifier: B3:D2:EA:46:1E:0B:79:DD:E3:CC:64:7E:21:58:42:29:09:34:49:95
Authority key identifier: 0D:32:17:22:61:C9:50:9E:57:35:21:37:BA:01:92:A8:48:6B:6F:DD
Certificate issuer: /CN=0d32172261c9509e57352137ba0192a8486b6fdd
Certificate serial: 019A0035D0E80DFE562ED2F297CEE133261F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DTIXImHJUJ5XNSE3ugGSqEhrb90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/58e8f8-1b27-41a4-92ab-fe8484f7079d/1/DTIXImHJUJ5XNSE3ugGSqEhrb90.mft
Manifest number: 07CD
Signing time: Mon 20 Oct 2025 06:01:58 +0000
Manifest this update: Mon 20 Oct 2025 06:01:58 +0000
Manifest next update: Tue 21 Oct 2025 06:01:58 +0000
Files and hashes: 1: DTIXImHJUJ5XNSE3ugGSqEhrb90.crl (hash: a7Zee509PvBJPV2LvNtVkkoUinJIHMx23kob6iyFxkA=)
2: fjriIHG0K5ESLdXlGMzPccy1eWc.roa (hash: 8Yi5eFrLfWuilXieuc7JFFDe1Ore62ncPRyz11+p5yU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/58e8f8-1b27-41a4-92ab-fe8484f7079d/1/DTIXImHJUJ5XNSE3ugGSqEhrb90.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/58e8f8-1b27-41a4-92ab-fe8484f7079d/1/DTIXImHJUJ5XNSE3ugGSqEhrb90.mft
rsync://rpki.ripe.net/repository/DEFAULT/DTIXImHJUJ5XNSE3ugGSqEhrb90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 06:01:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:35:d0:e8:0d:fe:56:2e:d2:f2:97:ce:e1:33:26:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d32172261c9509e57352137ba0192a8486b6fdd
Validity
Not Before: Oct 20 06:01:58 2025 GMT
Not After : Oct 21 06:01:58 2025 GMT
Subject: CN=b3d2ea461e0b79dde3cc647e2158422909344995
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:cc:50:87:5b:6e:a0:9e:f4:60:b9:b1:05:57:
cf:2b:57:f2:fb:60:8d:98:48:5c:25:eb:1c:43:c8:
63:32:3b:eb:6e:19:dc:9b:ab:14:04:37:e6:af:28:
ba:38:da:ae:c9:78:4b:62:1f:27:8c:98:9f:24:62:
4a:c3:73:b3:7a:44:d3:1d:ab:60:de:50:27:fa:a6:
e5:1e:df:53:a4:5d:eb:45:27:bd:8a:0b:d8:d3:5e:
d5:ce:81:5e:fb:6f:04:a2:f0:f3:67:43:4a:e4:64:
b3:da:30:da:3c:33:e1:03:ad:6a:0c:16:22:dd:22:
f4:6d:08:3e:bd:68:9a:2f:d5:01:00:6d:09:56:01:
e6:fa:9a:83:7b:23:74:01:cc:43:43:7f:f3:4e:a4:
24:41:b3:07:64:84:58:0b:4f:d6:00:0b:6a:71:93:
71:c8:c7:77:b3:ff:42:ae:1d:a2:57:b2:a7:9f:fe:
47:be:36:d0:64:2a:da:f7:38:28:fe:7d:c1:ac:cb:
0e:93:60:0e:0c:3d:e8:57:4f:52:c9:db:44:76:48:
f9:9a:8f:d2:be:1d:33:a5:0b:40:c8:c5:43:4d:be:
29:90:26:a6:a2:74:98:fe:25:af:9e:ad:bd:b3:44:
3e:ee:22:8d:33:c2:cd:95:40:80:6e:1c:f9:6d:68:
3b:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:D2:EA:46:1E:0B:79:DD:E3:CC:64:7E:21:58:42:29:09:34:49:95
X509v3 Authority Key Identifier:
keyid:0D:32:17:22:61:C9:50:9E:57:35:21:37:BA:01:92:A8:48:6B:6F:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DTIXImHJUJ5XNSE3ugGSqEhrb90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/58e8f8-1b27-41a4-92ab-fe8484f7079d/1/DTIXImHJUJ5XNSE3ugGSqEhrb90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/58e8f8-1b27-41a4-92ab-fe8484f7079d/1/DTIXImHJUJ5XNSE3ugGSqEhrb90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:96:75:62:c1:0f:90:73:7a:d8:cf:e1:be:af:27:80:1d:ec:
b4:70:ba:1a:2e:74:58:39:de:3b:ad:a7:e3:a1:7f:a2:58:f5:
eb:5b:66:0e:82:09:e9:0f:bf:da:e9:cc:37:78:6d:83:16:e9:
e9:5d:6a:40:e0:6e:d6:4e:4d:a9:60:8e:66:62:2a:f7:cb:b5:
de:8e:c9:1f:b9:47:bd:51:9b:cb:5a:fa:db:35:0d:aa:dc:ed:
3e:77:b1:9f:2d:7a:e2:85:c6:07:e1:d8:52:6b:cb:96:dd:a2:
d6:ec:f4:5e:76:4e:90:5a:ce:49:96:52:24:c5:0c:44:aa:4e:
0e:04:e8:3b:e8:9f:6d:b2:9f:ab:68:5d:fa:6c:b7:2b:88:08:
3e:73:fd:95:48:ac:f3:fc:d1:9c:47:f7:28:29:77:39:48:2d:
ff:bb:87:06:b4:8a:d7:43:1b:1e:08:f9:bd:b1:ce:78:9b:11:
ae:a5:08:23:f7:44:2e:59:d2:ca:9f:fc:c8:86:4b:99:46:d1:
5b:f5:a6:15:91:4d:3d:70:dd:e1:52:4e:de:dc:3c:2a:e6:0e:
1d:43:dd:40:eb:d2:27:3b:42:80:20:34:46:44:fa:9a:c1:8a:
fd:0d:7c:10:8b:d9:c5:0e:f9:d5:bd:2e:61:e0:e3:81:ef:3f:
b2:a9:90:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:07:57 2025 by rpki-client