Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/72e91a-014f-483a-a544-4e33427f734e/1/DrG9MNMZGofH0KRi5nkyQxYz3R4.mft
File: DrG9MNMZGofH0KRi5nkyQxYz3R4.mft (raw, json)
Hash identifier: tc3Vf3HXmAcayb5/ODyGSCJTZnZX3db5bRYiNtHFOVc=
Subject key identifier: 7A:6F:AF:91:32:51:FE:85:12:4E:8B:A6:DE:E9:5C:61:EF:28:E3:7E
Authority key identifier: 0E:B1:BD:30:D3:19:1A:87:C7:D0:A4:62:E6:79:32:43:16:33:DD:1E
Certificate issuer: /CN=0eb1bd30d3191a87c7d0a462e67932431633dd1e
Certificate serial: 0198D697FDB9FE34BB869AFCB8E40B4F1C1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DrG9MNMZGofH0KRi5nkyQxYz3R4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/72e91a-014f-483a-a544-4e33427f734e/1/DrG9MNMZGofH0KRi5nkyQxYz3R4.mft
Manifest number: 0363
Signing time: Sat 23 Aug 2025 11:02:21 +0000
Manifest this update: Sat 23 Aug 2025 11:02:21 +0000
Manifest next update: Sun 24 Aug 2025 11:02:21 +0000
Files and hashes: 1: DrG9MNMZGofH0KRi5nkyQxYz3R4.crl (hash: vKGPfpIe3EEBPsAu05SG/GRkV5URw/XzYjHVBdMQmOA=)
2: ogxxjz_eGLDn7LYpHHuvCo9x5ng.roa (hash: B2U5jkd3tbLDGtZHWekj2Yva7wWVjyZDFNXj9MRShj4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/72e91a-014f-483a-a544-4e33427f734e/1/DrG9MNMZGofH0KRi5nkyQxYz3R4.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/72e91a-014f-483a-a544-4e33427f734e/1/DrG9MNMZGofH0KRi5nkyQxYz3R4.mft
rsync://rpki.ripe.net/repository/DEFAULT/DrG9MNMZGofH0KRi5nkyQxYz3R4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:97:fd:b9:fe:34:bb:86:9a:fc:b8:e4:0b:4f:1c:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0eb1bd30d3191a87c7d0a462e67932431633dd1e
Validity
Not Before: Aug 23 11:02:21 2025 GMT
Not After : Aug 24 11:02:21 2025 GMT
Subject: CN=7a6faf913251fe85124e8ba6dee95c61ef28e37e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:3e:df:75:69:7a:2e:d3:71:9f:5a:3d:65:9c:
02:d1:54:38:d9:54:f4:16:6d:95:2c:4e:d4:ee:4b:
a5:b2:14:2a:7e:41:0e:6c:74:80:7c:38:c6:fc:19:
01:18:7b:b7:f3:3c:b0:7c:63:10:4f:3f:84:43:a7:
8e:02:ab:98:2c:82:ff:4f:2f:8f:eb:79:0d:13:be:
cd:85:28:83:05:ea:d4:45:00:a2:cd:03:4e:27:15:
70:1c:22:e6:6f:5c:6e:92:41:83:8d:8e:2a:e1:20:
ec:ee:79:75:5d:57:40:c4:20:fc:b8:3e:6f:94:7d:
9e:f2:b6:80:55:7b:4f:9c:08:0a:56:cc:c3:7e:08:
ce:d3:01:23:d6:9d:5c:d7:87:80:1f:5a:98:b0:94:
ea:fc:2e:79:b1:84:10:49:bd:d2:71:46:eb:44:42:
a3:e7:36:68:31:6b:aa:b6:36:fa:bf:c6:c8:52:c7:
8c:fc:aa:84:ff:a8:77:06:7a:3d:3a:01:d2:9e:be:
17:89:0a:2a:38:0d:8b:5a:65:85:7e:cf:3c:f7:c6:
b5:3a:2d:8b:54:e2:ae:7d:24:bb:fa:f5:34:2a:47:
58:f1:d8:25:39:7b:51:b8:c4:03:95:79:39:7e:50:
b6:26:03:e6:8f:1b:1e:54:28:47:99:15:a7:ec:b2:
81:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:6F:AF:91:32:51:FE:85:12:4E:8B:A6:DE:E9:5C:61:EF:28:E3:7E
X509v3 Authority Key Identifier:
keyid:0E:B1:BD:30:D3:19:1A:87:C7:D0:A4:62:E6:79:32:43:16:33:DD:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DrG9MNMZGofH0KRi5nkyQxYz3R4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/72e91a-014f-483a-a544-4e33427f734e/1/DrG9MNMZGofH0KRi5nkyQxYz3R4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/72e91a-014f-483a-a544-4e33427f734e/1/DrG9MNMZGofH0KRi5nkyQxYz3R4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:9b:55:91:4b:6e:38:d5:fb:6c:0a:41:24:a3:8c:0b:40:3b:
fa:e8:bd:f7:c6:8b:92:85:8a:20:78:41:c9:2b:97:c0:6f:32:
93:bc:f8:85:df:f9:11:82:7f:56:bc:34:78:9e:74:31:9b:e1:
85:50:1c:94:8f:80:85:6a:cd:56:e7:b3:90:c6:28:8e:ee:96:
41:a4:5d:99:52:c0:f2:83:f1:0c:40:91:cc:8f:b6:6b:ea:b0:
61:99:2c:01:be:b5:46:8c:7d:3d:12:73:ac:d3:7c:2c:49:85:
56:6e:36:81:b7:91:80:c1:23:b3:a4:84:68:d6:49:d1:25:5d:
57:0c:2c:69:1a:92:ad:ae:b3:30:79:3e:78:ac:97:c0:d3:61:
fb:a4:09:57:2a:ee:23:b5:cd:7a:0c:52:6a:e2:37:4c:d4:43:
2d:96:a1:87:75:f7:d8:9f:12:82:b2:af:7f:a3:55:73:cd:96:
e7:6c:12:56:01:97:3b:3b:c6:80:79:8d:5c:a9:04:a0:3f:dd:
f7:34:07:52:2c:38:eb:43:68:e5:ae:cf:aa:e3:bf:1a:18:ba:
e0:1c:1a:e9:ae:4c:94:5b:97:02:89:b1:b4:57:74:f9:da:d7:
70:77:5f:73:ed:ce:30:6b:fa:d4:a7:b7:b2:77:08:1d:b5:43:
80:ce:5d:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:14:04 2025 by rpki-client