Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/bea9db-1b92-44cb-8fd3-bdbe5b7a7680/1/dbciFa46YYMFwSMUKzSd8mZyoU0.mft
File: dbciFa46YYMFwSMUKzSd8mZyoU0.mft (raw, json)
Hash identifier: O6pQ5Sall6AYaZXsUhPaY2cQ6zRpgqfpTGhym9naNyc=
Subject key identifier: 10:DA:F7:DB:69:59:9A:A7:23:8D:12:A9:71:29:C4:78:23:F7:B7:A8
Authority key identifier: 75:B7:22:15:AE:3A:61:83:05:C1:23:14:2B:34:9D:F2:66:72:A1:4D
Certificate issuer: /CN=75b72215ae3a618305c123142b349df26672a14d
Certificate serial: 0198D66091DE83C1BECB14D0ACFDC6D862DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dbciFa46YYMFwSMUKzSd8mZyoU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/bea9db-1b92-44cb-8fd3-bdbe5b7a7680/1/dbciFa46YYMFwSMUKzSd8mZyoU0.mft
Manifest number: 033B
Signing time: Sat 23 Aug 2025 10:01:49 +0000
Manifest this update: Sat 23 Aug 2025 10:01:49 +0000
Manifest next update: Sun 24 Aug 2025 10:01:49 +0000
Files and hashes: 1: dbciFa46YYMFwSMUKzSd8mZyoU0.crl (hash: SBmLTDew8la+Nc9kJ23Hcg7xtXeD2CENDd8IUhPSVlM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/bea9db-1b92-44cb-8fd3-bdbe5b7a7680/1/dbciFa46YYMFwSMUKzSd8mZyoU0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/bea9db-1b92-44cb-8fd3-bdbe5b7a7680/1/dbciFa46YYMFwSMUKzSd8mZyoU0.mft
rsync://rpki.ripe.net/repository/DEFAULT/dbciFa46YYMFwSMUKzSd8mZyoU0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:91:de:83:c1:be:cb:14:d0:ac:fd:c6:d8:62:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75b72215ae3a618305c123142b349df26672a14d
Validity
Not Before: Aug 23 10:01:49 2025 GMT
Not After : Aug 24 10:01:49 2025 GMT
Subject: CN=10daf7db69599aa7238d12a97129c47823f7b7a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:bc:c8:9c:43:63:b9:b0:b6:de:48:2f:ac:b5:
c0:3b:af:73:84:76:5b:1d:fd:ba:5f:92:c2:35:8a:
cc:04:fe:d9:dc:39:c0:14:e2:ba:bf:b3:09:0d:cf:
44:d4:23:14:0c:c9:6e:ec:dd:67:4a:34:58:c7:39:
62:79:13:4e:16:08:d5:05:03:c7:ac:3e:84:d5:7e:
33:ea:6b:3b:59:08:7e:e0:62:91:1b:fd:b5:2b:33:
db:0c:fa:c0:c6:d8:33:0c:72:ae:f3:5a:2b:42:44:
76:88:49:30:d3:e2:cd:88:3a:be:b0:cb:62:d9:ae:
f7:1f:7d:0a:12:14:7b:85:09:cd:26:48:1e:db:6f:
fa:73:e6:5b:ec:f5:65:67:db:77:4a:25:e1:97:f9:
4e:17:a1:2d:45:bd:07:c7:76:18:e1:61:ed:cb:29:
94:67:58:63:95:85:6b:6a:dd:26:6c:2b:27:76:8f:
16:53:e5:ca:fa:f2:e6:9a:d2:3a:22:38:6a:3b:6b:
da:7d:44:a0:12:64:66:fd:4c:c6:b1:89:72:a5:ed:
94:8f:ef:06:e1:23:a6:fc:c6:c0:74:f0:d6:2c:37:
d4:ff:09:31:33:41:1f:ae:cc:3f:f9:e1:c7:b7:6e:
3b:ae:cc:29:23:1e:fe:7a:a4:0c:08:f7:91:1f:c5:
e4:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:DA:F7:DB:69:59:9A:A7:23:8D:12:A9:71:29:C4:78:23:F7:B7:A8
X509v3 Authority Key Identifier:
keyid:75:B7:22:15:AE:3A:61:83:05:C1:23:14:2B:34:9D:F2:66:72:A1:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dbciFa46YYMFwSMUKzSd8mZyoU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/bea9db-1b92-44cb-8fd3-bdbe5b7a7680/1/dbciFa46YYMFwSMUKzSd8mZyoU0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/bea9db-1b92-44cb-8fd3-bdbe5b7a7680/1/dbciFa46YYMFwSMUKzSd8mZyoU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:82:d4:73:a6:46:f4:8c:aa:2a:b1:f1:dc:42:c4:5f:a1:57:
3f:96:33:6d:57:3d:03:c3:04:19:62:fd:bd:c7:0f:16:a0:c7:
db:59:15:c2:cf:0d:bd:9c:2a:4b:6d:a0:d0:3c:17:81:ea:4a:
66:dd:8f:fe:d8:aa:56:45:19:29:dc:e3:0e:b6:45:cc:e8:9a:
26:11:2f:66:ba:9e:2f:01:53:4b:59:ea:05:8b:71:3b:6c:90:
e5:fb:8d:a0:74:cd:7a:05:ea:ea:cc:e1:99:b8:5f:cd:21:36:
c4:74:a6:82:fb:68:25:c8:3a:e8:89:23:47:1e:bd:51:18:e1:
3f:ef:ae:7b:ba:83:d3:1f:e0:5a:b5:4e:84:d8:cb:53:67:7d:
ae:c3:5e:a3:98:19:3b:f2:9f:47:51:21:c9:c5:05:ce:f9:6d:
f1:f6:47:6a:40:00:c6:19:17:6a:1b:99:3d:f8:91:0a:25:37:
88:3f:d9:1f:54:9b:f8:69:29:9a:a4:20:06:37:44:2f:fa:e1:
44:97:50:de:7e:7d:2c:12:cd:69:d5:f6:43:6a:c3:53:9a:96:
d6:c4:cb:29:51:ea:ad:b0:fe:1d:a3:2a:46:57:b6:dc:f7:48:
b6:a3:4e:51:53:43:8a:54:b8:9a:0c:fb:79:b3:e1:4b:07:51:
35:2c:5e:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:02:51 2025 by rpki-client