
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/7ee442-0ed5-4303-96bd-410b9966e205/1/D9HQzFMhm2_mgeGJ5ek9Y1dzbM8.mft
File: D9HQzFMhm2_mgeGJ5ek9Y1dzbM8.mft (raw, json)
Hash identifier: qiZKlULpVUJzxoFrlk2K1KVfTfn3LgxY23nYrlBnM+A=
Subject key identifier: 5B:D6:BC:10:EE:87:D1:6F:0B:71:4F:20:41:29:A1:49:42:94:F1:47
Authority key identifier: 0F:D1:D0:CC:53:21:9B:6F:E6:81:E1:89:E5:E9:3D:63:57:73:6C:CF
Certificate issuer: /CN=0fd1d0cc53219b6fe681e189e5e93d6357736ccf
Certificate serial: 019892C8C67E6DB435B3FA6468F0B4A4C7FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D9HQzFMhm2_mgeGJ5ek9Y1dzbM8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/7ee442-0ed5-4303-96bd-410b9966e205/1/D9HQzFMhm2_mgeGJ5ek9Y1dzbM8.mft
Manifest number: 36
Signing time: Sun 10 Aug 2025 07:01:28 +0000
Manifest this update: Sun 10 Aug 2025 07:01:28 +0000
Manifest next update: Mon 11 Aug 2025 07:01:28 +0000
Files and hashes: 1: D9HQzFMhm2_mgeGJ5ek9Y1dzbM8.crl (hash: enPrs/KXV3rRcAzuBfJoiLCg6I+w3BC/GIvKA1UVnbI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/7ee442-0ed5-4303-96bd-410b9966e205/1/D9HQzFMhm2_mgeGJ5ek9Y1dzbM8.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/7ee442-0ed5-4303-96bd-410b9966e205/1/D9HQzFMhm2_mgeGJ5ek9Y1dzbM8.mft
rsync://rpki.ripe.net/repository/DEFAULT/D9HQzFMhm2_mgeGJ5ek9Y1dzbM8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 07:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:92:c8:c6:7e:6d:b4:35:b3:fa:64:68:f0:b4:a4:c7:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fd1d0cc53219b6fe681e189e5e93d6357736ccf
Validity
Not Before: Aug 10 07:01:28 2025 GMT
Not After : Aug 11 07:01:28 2025 GMT
Subject: CN=5bd6bc10ee87d16f0b714f204129a1494294f147
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:f2:c8:d2:b2:31:8d:5b:9f:6b:65:73:5b:ab:
b2:a9:08:24:dc:5a:3a:a3:ad:1a:32:da:af:d8:36:
0c:66:07:14:d2:0c:2e:7e:f4:25:ad:03:e1:73:9b:
af:1b:c7:68:a9:59:5b:74:00:22:cb:cc:f9:75:5d:
ef:9c:61:20:1b:fb:82:c9:a0:99:4d:df:4e:e3:86:
a3:7e:10:a5:74:09:77:fb:fc:b5:b3:b0:49:f1:85:
77:fb:da:45:9e:18:22:fc:27:f4:77:0c:b7:83:0f:
cb:4c:a8:7e:2c:95:c2:40:50:4f:a3:83:ad:c8:77:
86:8e:2b:26:a9:82:08:2f:ce:9c:e8:e4:7f:6e:8d:
74:61:c6:c9:4f:0c:f8:bf:d1:a9:4f:50:69:73:42:
2f:6b:5f:c3:6b:8f:c8:c1:2f:5b:46:d7:09:5c:66:
18:b7:7e:80:07:19:82:86:bd:3f:e6:f5:26:80:40:
cf:5d:ba:c5:af:2a:b2:84:e5:39:0e:6f:66:e0:ad:
ef:3a:41:89:76:58:bb:38:84:84:97:c2:5e:0f:3b:
46:02:ad:cc:3a:e3:65:c3:e9:77:07:c4:7c:56:1f:
ec:ff:23:c1:db:d3:0b:b3:5d:12:17:69:37:36:54:
44:cc:63:fd:01:21:8b:88:e5:22:05:e5:b5:23:a5:
57:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:D6:BC:10:EE:87:D1:6F:0B:71:4F:20:41:29:A1:49:42:94:F1:47
X509v3 Authority Key Identifier:
keyid:0F:D1:D0:CC:53:21:9B:6F:E6:81:E1:89:E5:E9:3D:63:57:73:6C:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D9HQzFMhm2_mgeGJ5ek9Y1dzbM8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7ee442-0ed5-4303-96bd-410b9966e205/1/D9HQzFMhm2_mgeGJ5ek9Y1dzbM8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7ee442-0ed5-4303-96bd-410b9966e205/1/D9HQzFMhm2_mgeGJ5ek9Y1dzbM8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:61:a1:2a:79:33:b5:38:b5:bc:52:15:02:ef:c4:70:c7:c2:
be:60:36:3d:e1:41:71:8e:0a:93:5e:20:f6:d1:41:d9:5b:c6:
73:d5:20:d4:4e:43:f6:af:34:b7:d7:05:d3:26:1b:a2:ac:96:
15:e5:17:a4:05:ff:38:7d:3e:19:e4:ef:ca:4b:57:ca:88:99:
f1:a3:08:6e:eb:f6:ea:fe:96:d4:8f:81:e2:0b:c3:bd:53:e3:
ee:2d:ac:ae:42:a3:77:02:01:40:2e:3a:38:0e:86:4b:83:3c:
92:3d:f7:50:5b:03:7d:b5:aa:fa:6a:c5:3e:f0:40:d1:9e:67:
6d:9c:2b:75:6e:23:17:c2:95:e5:76:b2:85:81:6f:14:32:76:
f4:4e:a1:0c:62:de:99:74:b0:14:c8:03:83:84:04:69:8e:66:
6b:ba:27:f7:9b:a7:e3:62:7a:ac:31:99:1a:5b:e0:42:fc:55:
30:f5:5c:b6:a0:e1:04:53:50:dc:8d:42:a4:f5:78:e9:82:4a:
2b:12:2c:8a:fc:6b:13:8a:d9:df:8e:29:ef:55:32:ed:4b:d1:
c9:0d:cb:83:0c:d0:4c:1b:f2:e1:63:d8:78:4f:7b:29:c4:f6:
95:f9:99:d9:f8:e5:38:07:e8:9b:59:61:9e:18:cb:c0:de:36:
0f:34:36:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:48:43 2025 by rpki-client