Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/31a78f-c31b-4381-8631-6829c0fc738e/1/1-P-dpDC_8mjIQ6LlhgmMjXAhygY.mft
File: 1-P-dpDC_8mjIQ6LlhgmMjXAhygY.mft (raw, json)
Hash identifier: DJBi3EJ2EMnCvFT9lDwqDUcQSTg9Q6jekorhWyr0c+s=
Subject key identifier: E9:A6:CF:39:6E:FA:F5:34:71:E7:01:9A:5E:CD:5F:63:2E:A2:C7:2A
Authority key identifier: F8:FF:9D:A4:30:BF:F2:68:C8:43:A2:E5:86:09:8C:8D:70:21:CA:06
Certificate issuer: /CN=f8ff9da430bff268c843a2e586098c8d7021ca06
Certificate serial: 0198D47239381B79C5064B0B088623DAEA93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-P-dpDC_8mjIQ6LlhgmMjXAhygY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/31a78f-c31b-4381-8631-6829c0fc738e/1/1-P-dpDC_8mjIQ6LlhgmMjXAhygY.mft
Manifest number: 0D3C
Signing time: Sat 23 Aug 2025 01:01:52 +0000
Manifest this update: Sat 23 Aug 2025 01:01:52 +0000
Manifest next update: Sun 24 Aug 2025 01:01:52 +0000
Files and hashes: 1: 1-P-dpDC_8mjIQ6LlhgmMjXAhygY.crl (hash: Z6IPgAzYy2S/4MTdWqug7632CeIrn0zJTTZNTsP7gas=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/31a78f-c31b-4381-8631-6829c0fc738e/1/1-P-dpDC_8mjIQ6LlhgmMjXAhygY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/31a78f-c31b-4381-8631-6829c0fc738e/1/1-P-dpDC_8mjIQ6LlhgmMjXAhygY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-P-dpDC_8mjIQ6LlhgmMjXAhygY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:01:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:39:38:1b:79:c5:06:4b:0b:08:86:23:da:ea:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8ff9da430bff268c843a2e586098c8d7021ca06
Validity
Not Before: Aug 23 01:01:52 2025 GMT
Not After : Aug 24 01:01:52 2025 GMT
Subject: CN=e9a6cf396efaf53471e7019a5ecd5f632ea2c72a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:70:e9:1a:ce:2d:ad:ee:6b:a9:aa:99:a4:72:
14:e3:54:ea:96:83:62:fa:cf:0c:1b:1a:ce:89:99:
81:a6:c0:12:dc:0f:bb:33:c4:fa:5b:5e:0e:84:a7:
ab:5d:96:c7:84:12:02:18:d7:6a:e8:71:04:0a:2b:
78:18:58:26:da:1f:5c:a5:a1:42:58:41:5b:5d:bc:
dc:41:95:99:37:e3:c4:c6:10:64:4c:0e:28:d7:61:
09:7f:22:42:0a:73:db:62:a0:5f:9d:94:58:8e:f6:
cb:b7:39:6c:f5:8b:6f:ea:3c:42:51:d1:ad:41:ab:
2b:26:15:c7:d3:be:49:97:5e:0f:d3:e3:09:85:c9:
89:69:ae:1d:cf:94:a0:fa:d3:7e:db:53:0b:30:95:
84:6f:1b:98:d0:ea:00:a9:ab:84:4f:55:77:e0:2f:
b3:45:6d:f3:31:ca:11:65:a7:e8:92:f0:da:65:08:
02:ec:53:4e:ae:d2:34:2a:15:a5:72:dc:0e:c5:54:
af:0f:59:7b:57:b5:7c:83:f3:8f:67:b5:f2:88:58:
eb:43:1a:98:2e:69:3e:26:6b:32:88:d5:fc:e2:35:
8c:cd:54:17:43:37:46:02:2b:5a:49:9e:83:85:4d:
88:f4:a4:f2:c2:24:23:36:2b:64:69:df:ad:32:8d:
a4:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:A6:CF:39:6E:FA:F5:34:71:E7:01:9A:5E:CD:5F:63:2E:A2:C7:2A
X509v3 Authority Key Identifier:
keyid:F8:FF:9D:A4:30:BF:F2:68:C8:43:A2:E5:86:09:8C:8D:70:21:CA:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-P-dpDC_8mjIQ6LlhgmMjXAhygY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/31a78f-c31b-4381-8631-6829c0fc738e/1/1-P-dpDC_8mjIQ6LlhgmMjXAhygY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/31a78f-c31b-4381-8631-6829c0fc738e/1/1-P-dpDC_8mjIQ6LlhgmMjXAhygY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:bf:9d:69:50:0b:4b:42:de:9d:de:cb:79:d9:dc:95:d5:48:
5a:4f:09:58:89:f8:85:37:c4:1f:38:0b:13:7e:06:e6:20:a3:
77:69:ae:a3:4d:a5:50:e3:46:80:42:e8:a2:7b:61:e3:68:13:
6a:dc:5f:de:56:89:83:bd:e7:ff:78:a8:81:62:18:7c:6d:da:
d6:31:f4:e2:7e:fc:e9:b4:3b:b0:bc:b8:41:d7:33:63:6b:10:
93:84:85:56:4c:b4:d5:65:84:db:e6:2a:1f:6a:0c:48:5b:f2:
b0:e0:ac:37:ef:8a:eb:7c:58:e3:19:d6:51:d7:57:66:46:4c:
7f:88:91:37:92:72:17:82:7a:dc:91:95:08:61:0c:a1:a8:c0:
82:4d:0b:13:c5:d9:9e:95:d5:f3:11:6e:55:30:c5:29:d2:7f:
37:03:d2:c6:a3:f0:66:86:1c:8f:69:c0:98:b9:1a:fd:39:a5:
04:2a:e4:a6:65:5a:83:e6:13:eb:1c:75:71:09:45:f8:df:5c:
ea:dc:48:5a:13:bc:9c:17:e2:46:97:8b:5b:39:41:15:d1:83:
8a:32:e2:8d:6d:94:9d:b9:03:f9:20:03:f7:90:49:b3:69:4b:
c1:3d:79:00:f0:01:60:0f:64:bb:fd:04:30:b8:43:9f:83:c4:
fa:b0:91:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:33:26 2025 by rpki-client