Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/df99d3-5028-4361-b795-3af4a9463b77/1/Dv0crRIZAnVQiePKgLptfMxLm3E.mft
File: Dv0crRIZAnVQiePKgLptfMxLm3E.mft (raw, json)
Hash identifier: tRtjHDSRRzQ5YYrQ3IkgkLBMNHzaq7Ynqtk2CTAg99c=
Subject key identifier: 7C:E5:42:F4:D9:7D:8B:1C:02:FA:AB:38:47:55:5D:F2:C9:67:60:33
Authority key identifier: 0E:FD:1C:AD:12:19:02:75:50:89:E3:CA:80:BA:6D:7C:CC:4B:9B:71
Certificate issuer: /CN=0efd1cad121902755089e3ca80ba6d7ccc4b9b71
Certificate serial: 01987E9CD8BC3EF43029FCA12F67332F731E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dv0crRIZAnVQiePKgLptfMxLm3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/df99d3-5028-4361-b795-3af4a9463b77/1/Dv0crRIZAnVQiePKgLptfMxLm3E.mft
Manifest number: 0C18
Signing time: Wed 06 Aug 2025 09:01:04 +0000
Manifest this update: Wed 06 Aug 2025 09:01:04 +0000
Manifest next update: Thu 07 Aug 2025 09:01:04 +0000
Files and hashes: 1: Dv0crRIZAnVQiePKgLptfMxLm3E.crl (hash: PBnIdKBQi1FuS0k9OqTC2/ZlVkUTeedS7jz0+qT44ZU=)
2: kzypufx1A54QL9RnefA55meWSPM.roa (hash: cK+sc1FxI2UgckK1YuVxFsSFuYcOk8chhmHAVw1PhQ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/df99d3-5028-4361-b795-3af4a9463b77/1/Dv0crRIZAnVQiePKgLptfMxLm3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/df99d3-5028-4361-b795-3af4a9463b77/1/Dv0crRIZAnVQiePKgLptfMxLm3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dv0crRIZAnVQiePKgLptfMxLm3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:9c:d8:bc:3e:f4:30:29:fc:a1:2f:67:33:2f:73:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0efd1cad121902755089e3ca80ba6d7ccc4b9b71
Validity
Not Before: Aug 6 09:01:04 2025 GMT
Not After : Aug 7 09:01:04 2025 GMT
Subject: CN=7ce542f4d97d8b1c02faab3847555df2c9676033
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:71:a2:c0:e0:e2:8f:72:a3:76:14:5b:c2:e4:
e2:72:11:d8:37:86:5f:4d:81:09:c9:82:21:2b:50:
fa:32:d9:30:d7:f9:f1:e6:e5:82:5d:f3:53:24:f0:
8a:21:62:df:e4:73:a0:43:2e:a1:dd:0b:25:d0:37:
b5:80:e7:58:a3:3d:67:c7:4c:39:69:f4:e7:06:fe:
19:0d:e3:54:bf:b9:b3:2a:2b:29:bd:9d:25:e4:f0:
0c:dd:f8:11:25:9b:e0:9c:5f:0d:67:98:ce:26:40:
aa:ba:b3:a8:fb:c4:fe:7c:a0:24:cb:af:2a:ff:54:
70:d1:cb:13:0e:16:b3:1b:4b:e4:a9:d1:2e:44:d6:
79:ef:20:5b:f3:08:d9:f0:f3:f3:c2:4e:c5:d4:cb:
34:45:6e:a7:bc:c2:5d:91:56:68:b5:49:20:8e:3f:
10:d1:89:55:38:03:b8:a0:b3:22:f3:75:72:e3:67:
ab:1b:3d:d2:2c:7a:c6:cd:e9:25:15:a8:1e:ff:de:
61:3b:99:c7:d8:60:79:3a:d8:60:85:b1:55:f5:30:
41:aa:d6:84:67:df:87:75:17:14:6a:66:64:f1:ed:
1a:9d:b4:d7:1d:b4:72:5e:00:70:95:75:2d:70:3c:
b9:f1:e2:9a:b7:91:7d:79:18:b0:d5:b4:db:25:9a:
f7:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:E5:42:F4:D9:7D:8B:1C:02:FA:AB:38:47:55:5D:F2:C9:67:60:33
X509v3 Authority Key Identifier:
keyid:0E:FD:1C:AD:12:19:02:75:50:89:E3:CA:80:BA:6D:7C:CC:4B:9B:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dv0crRIZAnVQiePKgLptfMxLm3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/df99d3-5028-4361-b795-3af4a9463b77/1/Dv0crRIZAnVQiePKgLptfMxLm3E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/df99d3-5028-4361-b795-3af4a9463b77/1/Dv0crRIZAnVQiePKgLptfMxLm3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:0f:9f:98:b2:98:cb:69:6c:11:c2:56:13:a1:20:d4:4c:cd:
20:ff:a7:67:ae:24:7c:d3:7b:c2:09:5c:de:11:8c:ac:3e:50:
0d:49:65:33:65:58:f2:6d:fe:48:ca:26:54:e7:19:44:bd:44:
7f:b8:f1:82:82:db:13:3f:a2:b4:d8:e7:78:67:a9:ad:c3:c7:
2e:25:46:3e:19:06:0a:44:04:a5:87:fd:6e:d0:3e:c0:67:b0:
9b:fa:bb:09:8d:cc:59:aa:21:4c:ba:94:02:74:d1:36:a0:37:
a6:33:7b:be:80:d3:a6:12:34:20:32:57:23:bd:37:35:8a:1c:
aa:cd:da:b5:74:a8:d0:4f:8b:f4:fa:80:59:15:67:a8:e2:02:
1e:42:60:bd:05:4d:84:58:b7:81:10:d3:70:cd:44:39:93:7c:
ec:18:4d:7b:36:2a:2a:89:4b:fa:34:a6:0d:76:13:f0:5e:73:
92:17:fe:3b:fb:a9:51:86:b3:6b:ed:5f:bc:d4:e5:49:a6:ad:
74:9e:03:41:3c:b3:a2:e4:db:39:8f:2b:7e:7e:f1:03:fa:0b:
bf:a8:3d:5e:52:6e:35:eb:c6:ad:6c:31:06:bd:e3:05:30:e9:
5b:33:7e:25:38:63:45:c4:2f:61:f5:99:62:47:1b:bc:6c:91:
e7:95:aa:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 14:19:48 2025 by rpki-client