Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/999dd3-88f7-42c2-aff5-81d5aac03496/1/DvJQ9m3TDDt1RDCoXVMjbxczG38.mft
File: DvJQ9m3TDDt1RDCoXVMjbxczG38.mft (raw, json)
Hash identifier: yuzV7jqcXSvcQjj+UtYY+bYl+fpR5vAw9tsbX7U1c50=
Subject key identifier: 94:55:66:97:D6:7D:66:2A:61:95:E6:54:66:49:23:3A:5E:DD:9F:5F
Authority key identifier: 0E:F2:50:F6:6D:D3:0C:3B:75:44:30:A8:5D:53:23:6F:17:33:1B:7F
Certificate issuer: /CN=0ef250f66dd30c3b754430a85d53236f17331b7f
Certificate serial: 0198D65F9A01F273022D869F6B6FF42579AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DvJQ9m3TDDt1RDCoXVMjbxczG38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/999dd3-88f7-42c2-aff5-81d5aac03496/1/DvJQ9m3TDDt1RDCoXVMjbxczG38.mft
Manifest number: 02E8
Signing time: Sat 23 Aug 2025 10:00:46 +0000
Manifest this update: Sat 23 Aug 2025 10:00:46 +0000
Manifest next update: Sun 24 Aug 2025 10:00:46 +0000
Files and hashes: 1: DvJQ9m3TDDt1RDCoXVMjbxczG38.crl (hash: +mtSiUtLo5BXUdxQiuzDkMgjQ9mg619jMAykZIdv1uE=)
2: wz1d87RRsH1wKxGmJq_DN0PXswY.roa (hash: UbFzX/CxroLQPhe2c4ynViKTu15Zs0MKcqpj4a9goDk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/999dd3-88f7-42c2-aff5-81d5aac03496/1/DvJQ9m3TDDt1RDCoXVMjbxczG38.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/999dd3-88f7-42c2-aff5-81d5aac03496/1/DvJQ9m3TDDt1RDCoXVMjbxczG38.mft
rsync://rpki.ripe.net/repository/DEFAULT/DvJQ9m3TDDt1RDCoXVMjbxczG38.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:9a:01:f2:73:02:2d:86:9f:6b:6f:f4:25:79:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ef250f66dd30c3b754430a85d53236f17331b7f
Validity
Not Before: Aug 23 10:00:46 2025 GMT
Not After : Aug 24 10:00:46 2025 GMT
Subject: CN=94556697d67d662a6195e6546649233a5edd9f5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:21:c0:53:d6:4c:67:da:58:e4:5e:f9:63:3c:
06:1d:34:a2:eb:47:8e:8d:2f:46:50:00:02:03:88:
14:85:20:58:c0:f6:3d:aa:8e:92:d9:85:80:d5:1f:
d3:52:ca:3b:b3:d8:5a:11:a6:91:a6:47:90:3b:56:
b2:dc:18:12:b3:9a:91:fb:f7:d5:f4:9d:7d:2d:40:
1c:47:8e:53:79:9a:f5:e6:9d:4a:3e:43:4e:78:c4:
85:f8:90:df:3a:10:fb:c4:fd:8f:cf:a5:12:48:de:
66:22:7f:cb:c1:03:6a:cf:71:82:c7:09:5f:1e:21:
af:39:c9:2e:d6:22:dc:57:6b:0e:60:fe:a3:71:bf:
47:e9:ae:18:0c:c5:b3:b6:70:32:59:7c:f0:76:97:
4b:df:e1:24:bb:b8:28:74:e5:d8:7e:0a:9d:f6:dc:
04:6d:65:e8:ce:95:cb:a1:77:87:25:3a:a9:4d:5c:
9a:be:60:07:3c:6f:6c:95:9a:30:7d:d5:d1:d7:20:
2a:38:9b:d7:6f:eb:9a:e6:a7:f7:f7:41:a7:46:bf:
3e:5f:66:a3:7d:d5:cf:aa:5e:eb:9c:05:90:1c:99:
6a:39:23:81:30:7d:3c:d0:a6:60:c0:9e:45:cb:04:
af:be:fe:8d:24:24:2d:7b:4d:24:27:2a:50:99:79:
d5:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:55:66:97:D6:7D:66:2A:61:95:E6:54:66:49:23:3A:5E:DD:9F:5F
X509v3 Authority Key Identifier:
keyid:0E:F2:50:F6:6D:D3:0C:3B:75:44:30:A8:5D:53:23:6F:17:33:1B:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DvJQ9m3TDDt1RDCoXVMjbxczG38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/999dd3-88f7-42c2-aff5-81d5aac03496/1/DvJQ9m3TDDt1RDCoXVMjbxczG38.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/999dd3-88f7-42c2-aff5-81d5aac03496/1/DvJQ9m3TDDt1RDCoXVMjbxczG38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:8e:1c:97:81:8f:b2:0a:eb:50:c7:52:dc:02:ec:69:c5:48:
03:00:db:80:b1:fe:fb:be:de:bc:c7:b9:d5:7f:12:e6:04:02:
b2:3c:9b:e5:fc:2a:9b:e0:d1:0b:fb:71:66:c7:39:56:e9:1f:
35:ca:74:b3:88:f5:a5:df:71:f1:87:cd:d4:32:1d:6e:61:78:
e1:e1:23:68:93:7e:c0:e1:58:0a:fb:44:c0:79:f1:e2:e7:98:
d7:d1:75:28:ee:c5:c4:d4:62:77:6c:d2:48:ca:67:4c:cc:60:
8b:64:04:c6:b2:b0:b4:83:63:8d:3b:17:ce:ee:67:3f:b0:af:
f7:51:f6:46:5f:1d:97:c1:9e:2c:53:5d:ff:ef:6a:b2:6c:28:
db:f7:2d:a7:8f:2d:da:29:28:4b:61:ef:fd:0c:5f:c9:28:39:
f4:f6:45:c7:ba:bc:7f:23:e7:d6:5f:f8:5a:9a:54:95:00:86:
1d:84:3b:be:2b:7a:bc:eb:58:de:9f:98:1b:89:74:8d:4e:08:
b6:d9:17:8d:31:93:72:1c:d1:af:f8:1e:a3:44:31:7b:30:92:
07:d7:51:58:32:27:c9:46:d5:e3:d5:74:d5:42:7e:03:a1:01:
0c:e0:c1:6d:1d:1f:8d:00:e5:ff:fc:7b:03:d8:b2:00:b2:40:
36:ec:b0:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:18:41 2025 by rpki-client