
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/742d35-8274-49af-bc12-da85c5732b85/1/DtjJoWGXLWi0RTPg4x9R5NzlunU.mft
File: DtjJoWGXLWi0RTPg4x9R5NzlunU.mft (raw, json)
Hash identifier: wv+8KhqAJTfLyEAF4rKStIasLlgC64ZAVLf0wxHtib4=
Subject key identifier: 33:A3:05:0B:E0:2E:81:A5:CF:CE:F7:FF:1A:33:30:D9:F7:EF:72:2E
Authority key identifier: 0E:D8:C9:A1:61:97:2D:68:B4:45:33:E0:E3:1F:51:E4:DC:E5:BA:75
Certificate issuer: /CN=0ed8c9a161972d68b44533e0e31f51e4dce5ba75
Certificate serial: 01988B0F4C3BBC633B1D97982F45B096728D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DtjJoWGXLWi0RTPg4x9R5NzlunU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/742d35-8274-49af-bc12-da85c5732b85/1/DtjJoWGXLWi0RTPg4x9R5NzlunU.mft
Manifest number: 161E
Signing time: Fri 08 Aug 2025 19:01:32 +0000
Manifest this update: Fri 08 Aug 2025 19:01:32 +0000
Manifest next update: Sat 09 Aug 2025 19:01:32 +0000
Files and hashes: 1: DtjJoWGXLWi0RTPg4x9R5NzlunU.crl (hash: OrgZeL2AqdyZozZfcnpXqnadlB9cSNXlydptsI8rMGs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/742d35-8274-49af-bc12-da85c5732b85/1/DtjJoWGXLWi0RTPg4x9R5NzlunU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/742d35-8274-49af-bc12-da85c5732b85/1/DtjJoWGXLWi0RTPg4x9R5NzlunU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DtjJoWGXLWi0RTPg4x9R5NzlunU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 19:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:0f:4c:3b:bc:63:3b:1d:97:98:2f:45:b0:96:72:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ed8c9a161972d68b44533e0e31f51e4dce5ba75
Validity
Not Before: Aug 8 19:01:32 2025 GMT
Not After : Aug 9 19:01:32 2025 GMT
Subject: CN=33a3050be02e81a5cfcef7ff1a3330d9f7ef722e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:65:b5:df:87:a3:64:43:be:02:57:45:a0:93:
68:3e:80:70:67:ed:3a:6c:d1:d4:6a:37:d1:ce:92:
d6:c6:59:a0:bb:8e:e6:45:fa:f1:d3:c3:b6:c0:15:
f0:05:64:7d:6e:e4:92:57:a3:95:7f:7c:55:fb:4d:
6a:10:85:61:27:73:2b:fb:1a:d4:0b:87:09:cf:04:
72:18:f8:e1:27:53:41:84:3c:c6:bb:06:c1:b2:9f:
b0:fe:b0:63:8f:2f:ab:cd:62:22:76:84:ba:2e:f8:
e1:cc:47:64:91:5f:66:20:2e:38:33:27:21:ee:32:
d6:00:8e:08:b5:2f:e5:f8:ac:4f:51:50:69:58:c4:
0f:8a:94:69:09:ec:72:ff:56:83:f0:51:10:b4:f9:
72:3c:96:39:ec:cc:a3:36:68:1b:09:e7:c6:51:bb:
38:bc:6f:dd:71:3a:5b:3b:97:fa:c9:9d:c3:2d:55:
08:71:bc:1b:8e:6f:34:46:20:15:ea:95:f0:b3:e5:
d0:29:98:7c:d4:4c:f8:7d:db:29:df:69:dd:4d:2e:
0d:b2:07:ad:e2:0c:a2:7d:f2:a5:00:09:82:6a:32:
06:b3:e7:c4:03:9c:30:dd:ea:05:8e:a8:10:57:6e:
45:d0:00:d9:95:3c:f5:eb:1e:af:e6:fe:98:a5:15:
8c:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:A3:05:0B:E0:2E:81:A5:CF:CE:F7:FF:1A:33:30:D9:F7:EF:72:2E
X509v3 Authority Key Identifier:
keyid:0E:D8:C9:A1:61:97:2D:68:B4:45:33:E0:E3:1F:51:E4:DC:E5:BA:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DtjJoWGXLWi0RTPg4x9R5NzlunU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/742d35-8274-49af-bc12-da85c5732b85/1/DtjJoWGXLWi0RTPg4x9R5NzlunU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/742d35-8274-49af-bc12-da85c5732b85/1/DtjJoWGXLWi0RTPg4x9R5NzlunU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:ef:ee:74:54:d9:b4:49:55:11:11:ae:6a:46:98:8f:3a:65:
e8:07:93:57:9c:e5:91:7c:1a:a5:1d:9b:1a:d3:9e:4c:9c:09:
70:e3:ba:95:67:5e:98:59:60:f4:9b:89:b1:b2:e6:cf:69:c6:
58:c4:16:37:57:93:f6:6b:dc:3d:ee:fc:e9:fe:26:79:19:8c:
32:33:54:16:d9:ec:1b:ac:1d:f6:e5:95:51:dd:c2:32:ce:f8:
40:05:9a:42:5a:6c:4f:b2:03:35:1f:99:c8:4e:da:19:81:3f:
f3:ca:e2:1e:6e:5d:31:9d:b5:7a:56:d5:7d:90:d9:c1:3d:16:
87:c8:f5:98:7e:f4:a5:90:3c:9e:79:d1:18:94:93:83:96:fb:
8b:b1:68:6a:8e:1b:f6:7f:fb:72:f3:90:b9:d8:9e:30:66:3d:
04:94:5a:ac:5d:81:5e:71:c4:2f:27:97:0b:d5:d3:23:ed:fd:
55:8e:49:4f:ff:a0:56:b8:26:dd:9a:c2:e4:45:3e:b4:9b:d5:
43:21:f9:be:ea:0e:a9:7e:1b:d7:e6:72:a9:5b:ba:b3:7c:ac:
3d:cb:f0:83:17:b2:8f:ad:6c:77:4b:ca:d8:98:0f:7f:1e:17:
ae:48:58:db:71:fd:8d:76:eb:84:91:0b:c3:05:a6:e0:a1:c1:
83:18:24:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:23:45 2025 by rpki-client