Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/65fea2-a3d9-492f-8e44-894dfa5df017/1/DTM_ctnilFQ4Jb5jcp-ANKRRcJA.mft
File: DTM_ctnilFQ4Jb5jcp-ANKRRcJA.mft (raw, json)
Hash identifier: htr/G6URTMLnGTsZqTxW8brM4kEwsKJJbmpAq4HQqCk=
Subject key identifier: 7F:67:12:71:82:51:98:92:C9:63:C5:AE:27:DE:3E:47:7F:FC:F6:0F
Authority key identifier: 0D:33:3F:72:D9:E2:94:54:38:25:BE:63:72:9F:80:34:A4:51:70:90
Certificate issuer: /CN=0d333f72d9e294543825be63729f8034a4517090
Certificate serial: 01987486CF249D21EE6C8A75009EB1CE7F08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DTM_ctnilFQ4Jb5jcp-ANKRRcJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/65fea2-a3d9-492f-8e44-894dfa5df017/1/DTM_ctnilFQ4Jb5jcp-ANKRRcJA.mft
Manifest number: 0A0D
Signing time: Mon 04 Aug 2025 10:00:48 +0000
Manifest this update: Mon 04 Aug 2025 10:00:48 +0000
Manifest next update: Tue 05 Aug 2025 10:00:48 +0000
Files and hashes: 1: DTM_ctnilFQ4Jb5jcp-ANKRRcJA.crl (hash: BZq9rb7h35GEX5PM2IPUjDfdP6d6y0Y3uWokMr2aZx8=)
2: IoDHlDbNXO3jlcqfipIcULBON5A.roa (hash: KOgCTDaSahbElR1Ol4oBVrEjOtYhS4W0VzXtKth8BeM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/65fea2-a3d9-492f-8e44-894dfa5df017/1/DTM_ctnilFQ4Jb5jcp-ANKRRcJA.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/65fea2-a3d9-492f-8e44-894dfa5df017/1/DTM_ctnilFQ4Jb5jcp-ANKRRcJA.mft
rsync://rpki.ripe.net/repository/DEFAULT/DTM_ctnilFQ4Jb5jcp-ANKRRcJA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 10:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:86:cf:24:9d:21:ee:6c:8a:75:00:9e:b1:ce:7f:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d333f72d9e294543825be63729f8034a4517090
Validity
Not Before: Aug 4 10:00:48 2025 GMT
Not After : Aug 5 10:00:48 2025 GMT
Subject: CN=7f67127182519892c963c5ae27de3e477ffcf60f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:75:ec:a3:12:37:8b:00:e0:be:fa:09:7c:61:
36:28:9a:08:21:f9:06:4b:89:cc:b0:5e:ae:96:77:
d6:c8:a8:88:8c:65:c5:06:1a:b8:17:55:5b:4e:42:
b4:98:7b:b0:13:e0:49:e4:14:f2:22:08:4d:5a:b2:
07:bb:fa:06:cf:c4:e9:9e:4b:fe:a0:93:4f:b9:df:
f1:49:bd:66:da:50:fd:81:39:bb:20:e0:6c:db:61:
1f:f8:7f:fa:97:2d:03:ef:b2:7d:d5:d2:a5:25:4d:
a7:5e:50:31:b0:2a:3a:77:e5:52:eb:08:db:d3:33:
6c:0c:42:ab:e7:92:88:84:5c:12:7a:26:df:f8:dd:
b4:5d:79:4b:b2:97:5c:b0:19:12:72:0f:cf:66:1d:
f6:50:38:23:30:7f:dd:c5:df:ed:dc:46:71:cf:bc:
01:09:67:e1:91:50:bd:b4:26:0c:13:70:5c:2f:7a:
aa:c1:cd:f7:8d:63:6a:09:50:58:eb:00:cd:d9:f5:
81:0e:66:4f:e5:ca:a6:cd:fb:b2:46:4d:3d:ca:f2:
b5:2a:48:5e:63:8b:95:3d:9f:08:ee:1c:92:50:b9:
44:cd:c0:34:29:16:dc:2f:06:ea:25:af:2f:cf:f6:
0d:1d:a5:a2:d7:f9:7e:fd:77:92:28:ba:9d:da:9e:
64:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:67:12:71:82:51:98:92:C9:63:C5:AE:27:DE:3E:47:7F:FC:F6:0F
X509v3 Authority Key Identifier:
keyid:0D:33:3F:72:D9:E2:94:54:38:25:BE:63:72:9F:80:34:A4:51:70:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DTM_ctnilFQ4Jb5jcp-ANKRRcJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/65fea2-a3d9-492f-8e44-894dfa5df017/1/DTM_ctnilFQ4Jb5jcp-ANKRRcJA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/65fea2-a3d9-492f-8e44-894dfa5df017/1/DTM_ctnilFQ4Jb5jcp-ANKRRcJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:3d:79:8a:4b:54:f7:05:c8:42:29:a2:d8:aa:a3:dd:38:14:
b4:3b:50:dd:ef:ce:ca:b2:ff:7d:c6:89:c2:e4:a4:66:91:53:
3c:47:0b:95:96:b2:33:b7:db:3a:75:83:79:75:a8:fd:8e:d9:
f3:a4:e1:00:d7:6d:38:5b:03:34:03:df:6f:eb:02:38:ae:3a:
cb:75:00:56:ab:44:9d:d4:e5:d6:d7:b7:0e:72:5f:d9:23:57:
31:94:4c:81:1d:d3:8f:87:b7:08:e9:a5:69:f9:b9:83:22:67:
3e:5f:13:30:a1:9c:e1:a5:67:3d:0e:29:c8:ec:8c:1c:8e:a3:
a2:e8:84:35:5a:d6:0b:be:5c:6a:eb:1a:a0:9f:a2:48:65:9a:
72:91:8d:9e:ff:1b:06:f4:75:1a:70:5e:d0:b1:67:ca:91:f1:
bd:22:3d:cb:19:8f:d6:88:8f:74:eb:da:b4:28:d9:a6:f0:7a:
44:e9:4b:a4:b1:18:4d:8a:4d:b8:a1:e3:bd:ee:73:77:10:91:
a4:66:ab:93:2f:cb:8c:97:ba:9b:09:1d:00:cc:7b:51:6f:88:
98:20:4c:73:7f:13:09:3f:73:a1:8d:d3:76:bf:79:a1:7b:6f:
18:76:b1:3a:a9:71:e0:0f:cb:75:eb:52:cc:7a:0f:87:43:f1:
5b:c7:1a:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 19:13:30 2025 by rpki-client