Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/ffac24-7ac5-45a6-a946-e0812df1221f/1/D2vaHb-nfHTacoBe7lQY0_DMU50.mft
File: D2vaHb-nfHTacoBe7lQY0_DMU50.mft (raw, json)
Hash identifier: DG7E6zLjs+BItUrZfBuHLDMumsZ1LiWye66xHlbdGZY=
Subject key identifier: DB:7E:1D:AD:76:BA:2D:E1:92:8D:61:B3:0E:D6:40:40:2F:37:1E:46
Authority key identifier: 0F:6B:DA:1D:BF:A7:7C:74:DA:72:80:5E:EE:54:18:D3:F0:CC:53:9D
Certificate issuer: /CN=0f6bda1dbfa77c74da72805eee5418d3f0cc539d
Certificate serial: 0198D5BBD2EFC5DDB81C546B511D3C272B8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D2vaHb-nfHTacoBe7lQY0_DMU50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/ffac24-7ac5-45a6-a946-e0812df1221f/1/D2vaHb-nfHTacoBe7lQY0_DMU50.mft
Manifest number: 136D
Signing time: Sat 23 Aug 2025 07:01:52 +0000
Manifest this update: Sat 23 Aug 2025 07:01:52 +0000
Manifest next update: Sun 24 Aug 2025 07:01:52 +0000
Files and hashes: 1: D2vaHb-nfHTacoBe7lQY0_DMU50.crl (hash: GQQWgYb05RqsLMPCIiUUorzItZBrGIxOAf7jZYf6suw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/ffac24-7ac5-45a6-a946-e0812df1221f/1/D2vaHb-nfHTacoBe7lQY0_DMU50.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/ffac24-7ac5-45a6-a946-e0812df1221f/1/D2vaHb-nfHTacoBe7lQY0_DMU50.mft
rsync://rpki.ripe.net/repository/DEFAULT/D2vaHb-nfHTacoBe7lQY0_DMU50.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:d2:ef:c5:dd:b8:1c:54:6b:51:1d:3c:27:2b:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f6bda1dbfa77c74da72805eee5418d3f0cc539d
Validity
Not Before: Aug 23 07:01:52 2025 GMT
Not After : Aug 24 07:01:52 2025 GMT
Subject: CN=db7e1dad76ba2de1928d61b30ed640402f371e46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:d8:5c:ec:4a:2a:4d:c3:7d:8c:b3:68:30:37:
a8:f0:68:14:06:11:2c:30:cc:d0:ed:16:40:dd:20:
27:b3:bb:dc:af:13:a7:f5:40:c2:88:c7:d3:59:23:
f3:91:66:f4:bf:14:30:de:cd:46:43:94:b6:07:6c:
88:01:ba:16:49:b7:46:95:7f:7b:82:11:37:08:7d:
38:86:8c:dd:15:fe:6a:79:a3:2e:70:be:80:30:5f:
59:88:04:08:ca:b8:43:93:b0:dc:8b:e3:57:d0:99:
7f:25:3f:08:50:04:91:85:e3:ff:cc:90:7e:59:c7:
5f:13:7d:59:ce:50:cc:2c:b3:21:49:08:20:37:9f:
d6:1d:52:38:dc:e4:bf:bc:87:15:b6:e8:a3:2f:67:
8b:34:f8:32:9c:a9:be:0b:fe:36:36:4f:eb:38:e3:
45:5d:11:8e:4c:34:e4:5a:c9:15:aa:4c:c5:e8:74:
2f:f4:9c:3d:59:61:be:71:55:20:33:fc:8b:40:0d:
3a:65:b0:f6:03:85:10:27:b4:e4:68:5c:7d:e1:be:
a4:d0:20:ee:90:c2:d5:77:fb:f1:dc:ff:fb:1d:f9:
36:d6:67:0c:b7:06:b0:e2:42:33:8f:9d:a9:d0:07:
0e:b1:a6:42:99:6b:76:14:be:44:3e:46:32:2d:31:
2a:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:7E:1D:AD:76:BA:2D:E1:92:8D:61:B3:0E:D6:40:40:2F:37:1E:46
X509v3 Authority Key Identifier:
keyid:0F:6B:DA:1D:BF:A7:7C:74:DA:72:80:5E:EE:54:18:D3:F0:CC:53:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D2vaHb-nfHTacoBe7lQY0_DMU50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/ffac24-7ac5-45a6-a946-e0812df1221f/1/D2vaHb-nfHTacoBe7lQY0_DMU50.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/ffac24-7ac5-45a6-a946-e0812df1221f/1/D2vaHb-nfHTacoBe7lQY0_DMU50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:cb:82:e7:56:91:9c:d8:57:d1:94:b5:b5:17:27:a3:fc:23:
f5:e1:f9:1e:95:5b:f6:94:32:7b:0a:51:a4:1c:05:7d:bb:e1:
77:ba:3c:65:86:34:fb:02:9a:c8:b4:46:56:53:73:00:f0:37:
1d:cb:41:eb:98:55:01:b6:a0:14:9a:11:10:ed:cc:f7:6f:7d:
0d:df:c4:84:11:4c:f1:4b:18:7e:58:59:42:15:10:75:0a:d3:
94:5d:9d:af:4d:d9:98:3e:72:a0:8f:6d:2d:4a:21:73:ba:d3:
e5:c2:99:5c:02:c2:ac:7a:e2:47:94:a9:5b:b4:30:6a:4b:85:
3e:f9:91:d5:db:23:7e:87:c9:74:75:2f:66:65:a7:29:ab:9c:
93:44:f4:6f:6f:d2:94:ff:11:ba:51:78:d2:6d:16:0c:ed:a7:
57:c5:51:10:4c:fc:6b:fc:77:c3:51:b7:0e:ac:4a:cc:05:55:
64:66:94:21:78:eb:27:a4:cc:f3:00:7c:af:8e:99:52:20:9a:
34:9f:0f:f0:a0:46:26:c2:40:44:c0:7b:6c:c9:c9:33:fc:74:
a5:95:c8:eb:2e:9a:67:3f:e3:15:ff:25:42:7e:73:4d:b8:a9:
cb:6a:cd:78:52:28:60:2e:c5:fa:31:21:75:e7:08:42:e4:2c:
b1:c0:84:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:36:40 2025 by rpki-client