Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/7b1e42-468f-41e7-a9e7-0a2a8c6c95da/1/dJFafoze18DuIhnnMMGYy7eLxfI.mft
File: dJFafoze18DuIhnnMMGYy7eLxfI.mft (raw, json)
Hash identifier: RnZFzNySZDXt9/FhlGQbharVlhGpjxZkKEEEyjQFbq8=
Subject key identifier: 9C:98:B5:C6:0A:B1:A3:FA:FD:BE:52:25:C7:DA:8C:93:59:C9:5D:12
Authority key identifier: 74:91:5A:7E:8C:DE:D7:C0:EE:22:19:E7:30:C1:98:CB:B7:8B:C5:F2
Certificate issuer: /CN=74915a7e8cded7c0ee2219e730c198cbb78bc5f2
Certificate serial: 019892FF85969F455E560C7CA27FCDD44057
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJFafoze18DuIhnnMMGYy7eLxfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/7b1e42-468f-41e7-a9e7-0a2a8c6c95da/1/dJFafoze18DuIhnnMMGYy7eLxfI.mft
Manifest number: 0189
Signing time: Sun 10 Aug 2025 08:01:16 +0000
Manifest this update: Sun 10 Aug 2025 08:01:16 +0000
Manifest next update: Mon 11 Aug 2025 08:01:16 +0000
Files and hashes: 1: dJFafoze18DuIhnnMMGYy7eLxfI.crl (hash: e4BisfWklK+DN2sa1peVHsCZTSH24okJihqLSyob0Wk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/7b1e42-468f-41e7-a9e7-0a2a8c6c95da/1/dJFafoze18DuIhnnMMGYy7eLxfI.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/7b1e42-468f-41e7-a9e7-0a2a8c6c95da/1/dJFafoze18DuIhnnMMGYy7eLxfI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJFafoze18DuIhnnMMGYy7eLxfI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:92:ff:85:96:9f:45:5e:56:0c:7c:a2:7f:cd:d4:40:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74915a7e8cded7c0ee2219e730c198cbb78bc5f2
Validity
Not Before: Aug 10 08:01:16 2025 GMT
Not After : Aug 11 08:01:16 2025 GMT
Subject: CN=9c98b5c60ab1a3fafdbe5225c7da8c9359c95d12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f1:bf:72:76:f9:2b:3c:76:e9:3e:6d:e4:5a:
f2:34:3c:13:7e:20:88:db:df:95:19:69:6f:e2:cc:
df:a9:8d:88:81:75:cf:86:36:9f:9b:4d:e9:06:c7:
6c:b1:9a:19:a5:e2:c0:af:de:e7:d8:b5:57:31:39:
4a:39:47:ee:b6:17:91:29:5d:26:2e:15:77:d8:93:
fa:57:a9:e9:bb:da:2d:15:01:b9:75:57:ec:9d:05:
81:dc:d8:4e:86:72:e5:ec:32:ed:16:f0:0a:13:8c:
38:ac:8a:6d:8b:78:e7:ee:3c:30:28:13:44:93:2e:
8c:62:91:ee:d5:6c:6c:c6:4e:04:86:e1:ba:2a:a3:
9f:63:38:26:b5:20:08:17:56:06:2f:0e:21:9a:39:
fa:44:09:05:cf:be:54:9b:1e:96:a1:d1:ba:ed:b6:
6f:35:86:f2:63:75:22:4b:1c:a7:36:a7:ea:00:37:
3c:3d:fd:5b:7f:03:3b:e8:2e:ab:b7:78:97:2a:e0:
e7:df:e2:59:68:b1:57:4e:11:e0:7e:78:db:be:6c:
b3:e1:b9:d6:d3:53:36:d4:d4:41:65:3a:1d:8e:23:
db:51:7e:82:5a:ad:f2:5e:6b:22:58:f3:e7:7d:be:
59:d3:8c:3b:d0:b6:fc:fb:8c:c4:7c:97:01:d7:e0:
da:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:98:B5:C6:0A:B1:A3:FA:FD:BE:52:25:C7:DA:8C:93:59:C9:5D:12
X509v3 Authority Key Identifier:
keyid:74:91:5A:7E:8C:DE:D7:C0:EE:22:19:E7:30:C1:98:CB:B7:8B:C5:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJFafoze18DuIhnnMMGYy7eLxfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7b1e42-468f-41e7-a9e7-0a2a8c6c95da/1/dJFafoze18DuIhnnMMGYy7eLxfI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7b1e42-468f-41e7-a9e7-0a2a8c6c95da/1/dJFafoze18DuIhnnMMGYy7eLxfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d6:4e:e6:47:89:09:a3:5c:bb:0c:93:6d:cc:1f:6c:5d:6f:dc:
d7:18:f1:f7:01:18:50:eb:5a:67:73:ef:4a:c0:7e:bf:a1:0b:
48:c9:68:83:bf:cc:40:50:64:19:45:d1:73:fa:98:70:95:17:
6b:21:39:e6:69:2d:a3:ea:94:4a:a7:5b:a9:54:a0:d8:5f:ae:
75:ad:0e:9c:74:1c:b5:cf:25:45:1b:6a:1e:10:79:f0:9e:de:
be:fe:d3:13:e2:ce:c0:78:55:54:7a:2b:7b:7a:f1:69:89:c8:
65:f2:b6:95:b8:65:59:dd:ad:50:4d:85:6d:6f:d9:4b:72:e9:
2b:e5:02:4c:a3:1b:42:30:d5:15:51:33:d6:d3:d9:19:e4:b4:
2a:62:6c:b4:fd:93:3f:12:b8:50:eb:85:9f:01:d0:ce:98:c8:
75:c0:f3:79:e2:43:f8:32:14:ee:fe:20:6c:8e:6d:61:89:e8:
56:ff:1b:5e:c6:86:6f:ce:65:8e:58:60:8d:aa:4b:b9:8b:4a:
c1:79:f0:e6:de:07:7e:25:49:97:f7:2e:cc:32:ff:78:e4:c8:
cc:14:1c:2a:4c:22:a5:42:49:d2:2a:13:b3:e1:41:9e:da:11:
b8:4f:ff:d9:b5:34:a0:85:0d:15:f8:93:ef:ce:c8:f5:2c:5c:
8b:57:fc:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:43:24 2025 by rpki-client