Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/14a273-8b75-476c-b9e3-8bbd93940eef/1/Dimkgt4NVnRsMEUmn5kgUgT5VIQ.mft
File: Dimkgt4NVnRsMEUmn5kgUgT5VIQ.mft (raw, json)
Hash identifier: o+uKekIHtRr2lB5/3rTuX4slz4qFsxNSHhBJ+m6cv0I=
Subject key identifier: FE:6F:3D:72:54:E3:FE:69:AB:44:3C:BE:54:79:C8:28:C6:09:AA:E9
Authority key identifier: 0E:29:A4:82:DE:0D:56:74:6C:30:45:26:9F:99:20:52:04:F9:54:84
Certificate issuer: /CN=0e29a482de0d56746c3045269f99205204f95484
Certificate serial: 0198A04CBAA514F34B23E6FB4083C8B7B49E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dimkgt4NVnRsMEUmn5kgUgT5VIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/14a273-8b75-476c-b9e3-8bbd93940eef/1/Dimkgt4NVnRsMEUmn5kgUgT5VIQ.mft
Manifest number: 11D4
Signing time: Tue 12 Aug 2025 22:00:39 +0000
Manifest this update: Tue 12 Aug 2025 22:00:39 +0000
Manifest next update: Wed 13 Aug 2025 22:00:39 +0000
Files and hashes: 1: Dimkgt4NVnRsMEUmn5kgUgT5VIQ.crl (hash: M/ev4+nqIEg/jqWIb06XpDZ/p/gaPBhIycuqEGX+O4U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/14a273-8b75-476c-b9e3-8bbd93940eef/1/Dimkgt4NVnRsMEUmn5kgUgT5VIQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/14a273-8b75-476c-b9e3-8bbd93940eef/1/Dimkgt4NVnRsMEUmn5kgUgT5VIQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dimkgt4NVnRsMEUmn5kgUgT5VIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:4c:ba:a5:14:f3:4b:23:e6:fb:40:83:c8:b7:b4:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e29a482de0d56746c3045269f99205204f95484
Validity
Not Before: Aug 12 22:00:39 2025 GMT
Not After : Aug 13 22:00:39 2025 GMT
Subject: CN=fe6f3d7254e3fe69ab443cbe5479c828c609aae9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:99:05:f4:40:02:b1:58:68:cb:b9:13:4a:ec:
b9:4d:e7:1f:7f:cf:21:20:37:5e:16:e5:a3:22:e6:
56:d0:13:52:6d:5c:43:da:50:bc:d9:26:83:14:84:
61:85:4f:c6:f2:26:03:44:68:e7:8a:2e:80:f4:e9:
fd:c9:49:0f:a4:1d:fc:03:48:d3:83:30:c4:21:35:
9b:c5:84:dd:ff:06:db:30:96:ab:ec:6c:35:90:c8:
cc:a5:64:ee:88:27:10:bf:da:53:58:c4:26:59:37:
e1:97:8b:26:6b:26:0b:53:ec:27:be:39:21:1e:25:
15:75:c3:16:c0:77:38:5b:16:7b:f0:05:f9:2a:c7:
72:a2:e0:4c:9a:57:c2:cf:92:49:a7:b9:11:d4:26:
55:4b:34:0a:fc:71:19:3b:40:33:85:12:40:89:ad:
3c:4c:15:b5:49:17:a2:18:0e:c1:4e:4f:6b:94:1e:
2d:0c:b1:78:a1:64:9f:ce:a9:f0:d1:a3:e6:01:49:
4b:1d:ac:c0:c7:e3:5e:b1:1d:bd:c3:ba:52:5f:d9:
e5:f0:94:2d:eb:fc:9e:7c:69:18:ba:ba:5b:a7:54:
fa:3b:71:7c:47:1b:c8:31:83:38:2d:d9:73:15:5c:
1f:87:99:f6:3f:ea:0c:d3:99:6d:c8:21:d1:86:c4:
1c:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:6F:3D:72:54:E3:FE:69:AB:44:3C:BE:54:79:C8:28:C6:09:AA:E9
X509v3 Authority Key Identifier:
keyid:0E:29:A4:82:DE:0D:56:74:6C:30:45:26:9F:99:20:52:04:F9:54:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dimkgt4NVnRsMEUmn5kgUgT5VIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/14a273-8b75-476c-b9e3-8bbd93940eef/1/Dimkgt4NVnRsMEUmn5kgUgT5VIQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/14a273-8b75-476c-b9e3-8bbd93940eef/1/Dimkgt4NVnRsMEUmn5kgUgT5VIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:2d:82:a5:e7:49:a3:63:ab:2b:c5:a4:72:cc:bd:e4:aa:0a:
94:b8:27:dd:ce:97:16:e0:d9:86:a4:96:8a:41:a0:84:f4:77:
2d:4e:36:a6:a2:e3:f2:4b:3b:b7:33:28:bc:f8:61:5e:6b:03:
7d:ba:f5:b1:26:8a:92:9b:d6:3c:3e:6b:8c:b7:84:55:4d:14:
7b:45:93:d9:88:03:bd:c9:19:54:fd:a3:37:8d:38:f6:28:ad:
a0:e5:e0:9e:22:7a:8b:0c:74:0e:57:a2:cb:91:39:c7:cf:35:
f1:7b:5d:19:13:4b:19:b8:77:4b:2d:1f:7f:9f:55:16:50:bc:
93:71:d1:fb:88:c6:4d:1b:bc:9f:8c:a4:04:c1:e3:9d:09:b9:
b2:05:c4:a7:b6:c1:17:ae:94:00:b5:e5:e9:78:2b:ab:fd:6a:
6c:7d:cf:a8:76:57:fe:b1:7f:1c:eb:11:52:f8:19:66:35:85:
f3:09:a3:ef:f8:f6:63:d6:00:0d:47:d7:fe:9c:fc:8d:42:36:
9d:dd:71:82:89:a7:17:10:81:38:87:01:ad:79:85:0d:99:51:
5b:78:18:7e:70:76:bd:29:45:aa:2a:83:bb:ab:d8:59:d1:c4:
8f:9f:3c:a2:1d:f9:b3:1e:2f:a6:d7:a4:d2:c1:df:f0:f3:5d:
37:df:da:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 05:52:50 2025 by rpki-client