Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/742d35-8274-49af-bc12-da85c5732b85/1/DtjJoWGXLWi0RTPg4x9R5NzlunU.mft
File: DtjJoWGXLWi0RTPg4x9R5NzlunU.mft (raw, json)
Hash identifier: RPFJFI86xUaNLyBJMvycmly8FK33S6wmUNvbTMAKflw=
Subject key identifier: 86:91:85:B8:5D:99:8F:8F:8E:93:C8:23:E1:D9:F0:EF:C7:98:1B:55
Authority key identifier: 0E:D8:C9:A1:61:97:2D:68:B4:45:33:E0:E3:1F:51:E4:DC:E5:BA:75
Certificate issuer: /CN=0ed8c9a161972d68b44533e0e31f51e4dce5ba75
Certificate serial: 0198D4732105FD23D631D8D626A4E490DBE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DtjJoWGXLWi0RTPg4x9R5NzlunU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/742d35-8274-49af-bc12-da85c5732b85/1/DtjJoWGXLWi0RTPg4x9R5NzlunU.mft
Manifest number: 1644
Signing time: Sat 23 Aug 2025 01:02:51 +0000
Manifest this update: Sat 23 Aug 2025 01:02:51 +0000
Manifest next update: Sun 24 Aug 2025 01:02:51 +0000
Files and hashes: 1: DtjJoWGXLWi0RTPg4x9R5NzlunU.crl (hash: 4xl6uRTtB17fpJ9vsPcKv/FKVjxY50DGy5SgZBSftEs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/742d35-8274-49af-bc12-da85c5732b85/1/DtjJoWGXLWi0RTPg4x9R5NzlunU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/742d35-8274-49af-bc12-da85c5732b85/1/DtjJoWGXLWi0RTPg4x9R5NzlunU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DtjJoWGXLWi0RTPg4x9R5NzlunU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:21:05:fd:23:d6:31:d8:d6:26:a4:e4:90:db:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ed8c9a161972d68b44533e0e31f51e4dce5ba75
Validity
Not Before: Aug 23 01:02:51 2025 GMT
Not After : Aug 24 01:02:51 2025 GMT
Subject: CN=869185b85d998f8f8e93c823e1d9f0efc7981b55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:46:28:8c:83:e5:fd:c4:93:26:40:0a:23:e3:
45:9d:b9:6e:64:5d:81:81:9f:b2:07:c7:a2:e7:e6:
5f:74:86:e3:a2:21:2a:52:76:e9:7c:4e:de:5f:9d:
1c:ee:f3:3f:43:0b:79:e2:37:4b:46:ee:f0:cf:91:
c0:59:c1:ca:68:1b:c0:5b:a9:d7:6a:f1:c3:e6:69:
9f:e0:91:36:b2:10:d6:2a:89:2a:02:cb:60:69:43:
45:8e:e7:c6:05:78:33:8e:63:05:f9:0f:af:a6:ff:
f2:c4:34:0f:a2:ea:ae:78:d7:0c:7d:ac:7c:ca:47:
62:e9:34:b6:08:21:8d:2a:da:a6:8b:ed:d9:06:0b:
37:2d:51:01:25:36:14:dd:90:9c:bf:0f:91:04:02:
37:e7:f3:c0:35:cf:21:c6:ed:53:79:4f:a3:dc:7e:
0f:41:b9:a1:e1:8a:65:e8:1d:cb:03:9c:80:a3:89:
46:2e:22:4d:6b:d4:d2:7e:b9:14:f6:f3:65:26:ca:
c1:d0:23:05:67:59:82:e1:00:83:63:0d:d6:d9:4f:
f4:1e:ed:1b:ec:70:d9:c7:7f:db:b7:19:89:e8:7e:
6b:18:a8:11:20:d4:c7:02:51:8f:06:10:1d:e3:55:
2d:86:66:96:9e:19:ab:e2:f4:2e:24:fa:9c:1c:91:
24:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:91:85:B8:5D:99:8F:8F:8E:93:C8:23:E1:D9:F0:EF:C7:98:1B:55
X509v3 Authority Key Identifier:
keyid:0E:D8:C9:A1:61:97:2D:68:B4:45:33:E0:E3:1F:51:E4:DC:E5:BA:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DtjJoWGXLWi0RTPg4x9R5NzlunU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/742d35-8274-49af-bc12-da85c5732b85/1/DtjJoWGXLWi0RTPg4x9R5NzlunU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/742d35-8274-49af-bc12-da85c5732b85/1/DtjJoWGXLWi0RTPg4x9R5NzlunU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:3b:23:9b:c1:5f:44:14:df:f9:e3:35:b3:df:e0:0a:53:48:
7e:48:81:df:be:03:e8:26:2f:19:0f:e0:9d:d9:dc:92:6a:dc:
8a:2e:10:de:de:11:33:f9:ae:99:73:1e:2a:ee:36:25:95:0b:
42:02:fa:6b:f2:f0:99:b6:c8:7f:42:99:f5:cb:8d:dc:15:14:
59:1c:b9:d0:42:d4:05:ae:5b:07:33:7f:e8:82:31:58:35:22:
3b:55:31:b9:f4:82:49:2b:18:26:a9:7b:53:4e:c4:52:14:dc:
9c:32:b0:02:6d:98:3e:29:19:5b:8c:5c:84:12:77:66:02:ad:
07:29:e2:88:45:9c:42:1a:18:ab:dd:34:bd:37:69:c0:d3:c4:
0b:f8:84:07:ac:dc:e1:88:40:9b:11:65:2d:cd:6c:be:9e:4b:
e7:ed:3d:9d:74:d4:e1:1f:0a:41:92:b1:f1:db:99:5c:9e:25:
07:68:2c:4a:ba:dc:a0:cc:b1:a8:c5:3a:98:78:71:0e:ea:e7:
9a:a8:da:18:30:6b:57:5b:23:01:f9:ca:91:7e:f3:b8:3e:c3:
3a:73:f7:3c:3c:5c:55:8b:51:23:8a:01:58:22:0b:aa:b2:b3:
19:b2:f0:4d:ef:e6:c6:2a:cc:0a:c2:63:98:29:89:a0:78:21:
21:88:08:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:25:46 2025 by rpki-client