Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/72778b-c07f-49bb-9e1d-1f0b03544810/1/dQrGfFd2g13wkZmDEJYOg8I9ncY.mft
File: dQrGfFd2g13wkZmDEJYOg8I9ncY.mft (raw, json)
Hash identifier: ++Wt2bouMOXqKlvwGCEwa2cv+DgbcNmvbULetWVnqaY=
Subject key identifier: 86:2C:58:7F:57:98:E7:B3:92:7D:CA:4D:31:E8:D9:D0:EC:D1:FD:99
Authority key identifier: 75:0A:C6:7C:57:76:83:5D:F0:91:99:83:10:96:0E:83:C2:3D:9D:C6
Certificate issuer: /CN=750ac67c5776835df091998310960e83c23d9dc6
Certificate serial: 0198A0BB281E631A5A5C4F958BFA95251BFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQrGfFd2g13wkZmDEJYOg8I9ncY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/72778b-c07f-49bb-9e1d-1f0b03544810/1/dQrGfFd2g13wkZmDEJYOg8I9ncY.mft
Manifest number: 0A19
Signing time: Wed 13 Aug 2025 00:01:16 +0000
Manifest this update: Wed 13 Aug 2025 00:01:16 +0000
Manifest next update: Thu 14 Aug 2025 00:01:16 +0000
Files and hashes: 1: dQrGfFd2g13wkZmDEJYOg8I9ncY.crl (hash: 6TeiAYbtzSgg7r9iSEytlZtEbGZ/+VoGF5UIsUNV02Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/72778b-c07f-49bb-9e1d-1f0b03544810/1/dQrGfFd2g13wkZmDEJYOg8I9ncY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/72778b-c07f-49bb-9e1d-1f0b03544810/1/dQrGfFd2g13wkZmDEJYOg8I9ncY.mft
rsync://rpki.ripe.net/repository/DEFAULT/dQrGfFd2g13wkZmDEJYOg8I9ncY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:bb:28:1e:63:1a:5a:5c:4f:95:8b:fa:95:25:1b:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=750ac67c5776835df091998310960e83c23d9dc6
Validity
Not Before: Aug 13 00:01:16 2025 GMT
Not After : Aug 14 00:01:16 2025 GMT
Subject: CN=862c587f5798e7b3927dca4d31e8d9d0ecd1fd99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:80:1c:c0:d6:8c:ab:f3:86:01:95:69:c2:a3:
27:fc:7d:2c:ea:e0:50:99:07:69:e1:ec:a7:10:f3:
55:d4:5a:96:d0:fb:32:45:5b:88:13:6d:67:f7:76:
f9:8b:c5:a0:20:8a:b8:8e:ea:20:99:df:73:ff:48:
a6:e2:53:14:98:33:9d:eb:f3:35:b1:11:c8:bd:55:
95:6b:58:cb:ed:75:2c:5f:02:7e:0b:38:1a:e6:f0:
ad:11:3c:8b:b5:41:af:16:02:cc:5f:df:02:c1:cd:
de:4b:e4:33:c1:24:2b:97:1e:da:24:20:b9:f9:59:
c8:e2:d4:b7:ba:3f:00:4a:55:69:fd:2e:98:a0:dc:
b3:8b:ab:d8:1e:28:51:7f:2e:c8:ed:2b:18:44:f7:
e8:c8:d6:c6:1a:69:38:5b:8c:0d:9c:17:dc:ce:10:
51:2c:f9:27:c7:9d:99:bd:97:62:bf:a4:7d:4d:c5:
92:36:09:9f:05:05:b4:0f:de:87:8a:89:5e:e5:71:
40:a4:e1:4f:ec:8c:a8:18:42:fc:9b:a9:dd:d4:e6:
1d:74:04:97:66:a9:24:fe:95:89:95:0f:b3:67:6a:
c7:9c:fe:c6:2d:c6:ce:3a:18:9f:7d:e6:f0:ba:aa:
1d:10:8e:ec:08:99:85:6d:f6:f6:c4:a0:a7:b8:fb:
87:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:2C:58:7F:57:98:E7:B3:92:7D:CA:4D:31:E8:D9:D0:EC:D1:FD:99
X509v3 Authority Key Identifier:
keyid:75:0A:C6:7C:57:76:83:5D:F0:91:99:83:10:96:0E:83:C2:3D:9D:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQrGfFd2g13wkZmDEJYOg8I9ncY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/72778b-c07f-49bb-9e1d-1f0b03544810/1/dQrGfFd2g13wkZmDEJYOg8I9ncY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/72778b-c07f-49bb-9e1d-1f0b03544810/1/dQrGfFd2g13wkZmDEJYOg8I9ncY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:ac:1f:fc:88:80:00:de:75:b3:9a:3f:ab:e8:52:b6:b5:25:
fc:51:e3:36:5a:1c:29:3d:d9:7e:64:88:73:10:da:62:3f:6f:
cf:f0:88:a4:8e:37:43:0f:85:ff:27:ef:37:03:5b:c0:e8:dd:
9e:82:6f:6d:f7:10:a9:d8:57:b5:42:8e:e5:50:6f:a7:2b:d7:
14:db:5a:bb:91:e1:31:a4:75:b3:b3:5b:55:b9:e6:52:d8:cd:
58:57:10:a5:f1:4e:1e:39:6f:9a:1a:11:e6:31:d2:39:e9:ad:
da:15:d9:64:7a:dc:11:18:cc:e2:e5:d6:46:fa:c5:0b:11:3e:
65:39:a5:03:ee:b2:03:18:8b:40:fe:d9:6e:49:24:79:61:e5:
7b:21:b7:a2:9e:77:f5:62:f4:5b:f6:3b:52:f9:db:4c:6c:39:
77:1f:f7:b6:ba:83:4c:a5:8d:0d:c5:ec:ce:26:f0:15:f1:3b:
b3:a7:c7:d0:64:49:01:b6:9c:ad:9b:66:ec:0b:a4:d5:b0:79:
57:9e:e3:fc:e0:39:3c:68:a4:33:28:b0:d2:4d:a0:ab:1d:1c:
f7:47:3c:ca:65:3d:7f:d5:00:5e:64:cd:c1:f6:ba:29:5c:4c:
de:2f:a3:ff:7a:0d:3e:1f:26:14:41:5f:53:ad:01:bd:2b:e2:
40:97:6b:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 05:53:17 2025 by rpki-client