Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/72778b-c07f-49bb-9e1d-1f0b03544810/1/dQrGfFd2g13wkZmDEJYOg8I9ncY.mft
File: dQrGfFd2g13wkZmDEJYOg8I9ncY.mft (raw, json)
Hash identifier: vIIvG0wdyuLIBkfux9wJJEEnkxVXNFwL8HtUgR1FhYM=
Subject key identifier: DA:86:21:8D:89:64:E6:E6:62:AD:0B:78:A7:03:03:18:D6:D8:68:CB
Authority key identifier: 75:0A:C6:7C:57:76:83:5D:F0:91:99:83:10:96:0E:83:C2:3D:9D:C6
Certificate issuer: /CN=750ac67c5776835df091998310960e83c23d9dc6
Certificate serial: 0198D6CD62831038A29640373B577881FAC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQrGfFd2g13wkZmDEJYOg8I9ncY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/72778b-c07f-49bb-9e1d-1f0b03544810/1/dQrGfFd2g13wkZmDEJYOg8I9ncY.mft
Manifest number: 0A35
Signing time: Sat 23 Aug 2025 12:00:40 +0000
Manifest this update: Sat 23 Aug 2025 12:00:40 +0000
Manifest next update: Sun 24 Aug 2025 12:00:40 +0000
Files and hashes: 1: dQrGfFd2g13wkZmDEJYOg8I9ncY.crl (hash: MujIL+NkID5eI7ygTM7m8EmzFR0oYwrl0d/Fx3r/by0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/72778b-c07f-49bb-9e1d-1f0b03544810/1/dQrGfFd2g13wkZmDEJYOg8I9ncY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/72778b-c07f-49bb-9e1d-1f0b03544810/1/dQrGfFd2g13wkZmDEJYOg8I9ncY.mft
rsync://rpki.ripe.net/repository/DEFAULT/dQrGfFd2g13wkZmDEJYOg8I9ncY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:62:83:10:38:a2:96:40:37:3b:57:78:81:fa:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=750ac67c5776835df091998310960e83c23d9dc6
Validity
Not Before: Aug 23 12:00:40 2025 GMT
Not After : Aug 24 12:00:40 2025 GMT
Subject: CN=da86218d8964e6e662ad0b78a7030318d6d868cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ae:92:cc:4f:f5:0f:76:59:14:3d:be:4a:60:
82:a9:ee:92:35:a0:61:50:ad:87:6c:1a:7e:25:2e:
6f:20:52:3a:a5:4a:b9:3d:48:80:dd:33:60:39:38:
88:26:61:96:e3:92:81:a2:9a:3e:b4:b0:4b:b1:ca:
a5:cd:d0:14:3c:91:32:36:64:e9:ac:16:1f:f9:b0:
11:bf:5f:4d:cf:cd:12:b3:cf:a4:4a:06:90:0e:bd:
73:8d:0d:f3:1a:fc:cf:27:46:9c:f8:57:07:cb:b1:
53:50:0b:1b:ac:a4:5f:bc:0d:f6:75:fc:e1:fb:db:
88:91:9d:b9:a3:e1:68:c1:3e:e1:2f:a0:2c:72:f6:
54:af:c4:1b:f6:bc:af:95:4d:7c:a8:02:ad:10:61:
2f:52:d8:fd:31:34:e3:d0:8a:2c:da:05:86:68:ba:
51:a2:1e:9d:86:fd:79:99:06:c0:c5:c9:67:fc:1f:
83:2d:39:65:b4:0d:48:be:1a:b7:59:14:34:9e:60:
13:a4:27:db:25:95:f3:73:d8:3d:b1:1f:07:30:14:
82:e0:61:9b:6f:c4:b5:e4:07:b8:33:c6:9e:87:86:
82:89:01:c5:19:01:90:db:8b:92:f8:58:b1:a3:c3:
1b:4e:da:f6:32:11:b1:93:53:c0:cd:60:75:04:91:
95:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:86:21:8D:89:64:E6:E6:62:AD:0B:78:A7:03:03:18:D6:D8:68:CB
X509v3 Authority Key Identifier:
keyid:75:0A:C6:7C:57:76:83:5D:F0:91:99:83:10:96:0E:83:C2:3D:9D:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQrGfFd2g13wkZmDEJYOg8I9ncY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/72778b-c07f-49bb-9e1d-1f0b03544810/1/dQrGfFd2g13wkZmDEJYOg8I9ncY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/72778b-c07f-49bb-9e1d-1f0b03544810/1/dQrGfFd2g13wkZmDEJYOg8I9ncY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:6f:64:39:8b:69:20:d6:58:c1:79:15:c6:1c:12:81:ac:a4:
bf:76:65:8c:c5:0e:b9:92:44:3e:1f:27:aa:f9:cb:46:f5:d7:
0b:13:93:61:11:fc:e7:fd:c3:fd:67:af:af:c4:c2:ff:0f:65:
ea:7e:95:8e:e6:a0:37:87:14:25:ad:b2:b6:b9:89:41:03:b6:
79:84:12:f6:04:c7:41:09:4a:44:38:d7:91:8f:28:3a:82:6a:
8c:e2:74:a7:11:37:05:5c:2e:70:c5:f1:c8:12:87:db:e3:e6:
54:83:10:af:6b:73:89:92:60:3f:a1:46:c9:19:23:67:0b:56:
33:8f:2d:56:78:4c:c0:5c:20:86:e5:8d:66:29:b3:9e:aa:d8:
55:51:4d:43:35:82:9a:6f:a5:30:90:28:b6:c8:b3:5b:d0:b3:
70:f0:5d:01:2b:54:56:48:74:49:a2:22:7b:0b:33:24:ce:70:
9d:2c:87:70:db:fe:6c:8a:3a:8a:f6:31:2c:db:09:d0:c5:c4:
21:47:4a:69:8e:d9:6f:14:13:7a:2e:0b:73:cf:fb:c8:fd:a1:
ca:f7:76:2f:f1:02:84:2d:bf:27:c4:05:ce:c9:ca:49:ce:02:
c7:f4:8d:d3:66:42:9c:d5:a8:0d:97:62:82:f3:8a:ed:b7:44:
d5:30:e7:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:07:58 2025 by rpki-client