Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/72e91a-014f-483a-a544-4e33427f734e/1/DrG9MNMZGofH0KRi5nkyQxYz3R4.mft
File: DrG9MNMZGofH0KRi5nkyQxYz3R4.mft (raw, json)
Hash identifier: vCJYxtp4JbA2i/HSNix0Y9/iqzeN9G3YNBEe1u7PjUM=
Subject key identifier: C2:70:95:BD:39:75:3B:78:35:5A:53:FC:A1:40:13:14:74:52:5A:90
Authority key identifier: 0E:B1:BD:30:D3:19:1A:87:C7:D0:A4:62:E6:79:32:43:16:33:DD:1E
Certificate issuer: /CN=0eb1bd30d3191a87c7d0a462e67932431633dd1e
Certificate serial: 019889571308BBF88A9D5208A8A67A3D0AD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DrG9MNMZGofH0KRi5nkyQxYz3R4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/72e91a-014f-483a-a544-4e33427f734e/1/DrG9MNMZGofH0KRi5nkyQxYz3R4.mft
Manifest number: 033B
Signing time: Fri 08 Aug 2025 11:00:41 +0000
Manifest this update: Fri 08 Aug 2025 11:00:41 +0000
Manifest next update: Sat 09 Aug 2025 11:00:41 +0000
Files and hashes: 1: DrG9MNMZGofH0KRi5nkyQxYz3R4.crl (hash: CAMNYsCZUbBHurM9v/LinRxMVVlH+5eWxnXDxidQp9E=)
2: ogxxjz_eGLDn7LYpHHuvCo9x5ng.roa (hash: B2U5jkd3tbLDGtZHWekj2Yva7wWVjyZDFNXj9MRShj4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/72e91a-014f-483a-a544-4e33427f734e/1/DrG9MNMZGofH0KRi5nkyQxYz3R4.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/72e91a-014f-483a-a544-4e33427f734e/1/DrG9MNMZGofH0KRi5nkyQxYz3R4.mft
rsync://rpki.ripe.net/repository/DEFAULT/DrG9MNMZGofH0KRi5nkyQxYz3R4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:89:57:13:08:bb:f8:8a:9d:52:08:a8:a6:7a:3d:0a:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0eb1bd30d3191a87c7d0a462e67932431633dd1e
Validity
Not Before: Aug 8 11:00:41 2025 GMT
Not After : Aug 9 11:00:41 2025 GMT
Subject: CN=c27095bd39753b78355a53fca140131474525a90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:44:93:88:06:9d:d1:7c:49:49:b0:46:91:90:
df:bd:68:4e:07:73:5a:91:54:ed:15:16:11:5c:52:
db:f1:fa:42:09:43:6f:7c:4f:d8:39:6c:7d:a2:40:
45:d1:80:2f:15:f0:56:11:0d:27:0c:f1:f4:5b:5b:
1c:10:24:46:c4:51:f3:5d:ab:a4:6d:6f:3b:2f:48:
db:29:48:1e:27:34:97:72:57:5f:bf:23:75:8b:0e:
cf:db:e0:85:4d:22:be:99:76:2e:fd:3f:7f:25:ac:
5a:0a:f0:1d:a7:66:68:bb:f0:85:7a:6e:eb:c2:e5:
23:70:59:c9:52:a1:df:ee:8e:6e:e3:1f:a2:06:b7:
f5:3e:78:de:55:08:fe:65:ec:95:31:96:94:37:a6:
05:8f:38:7a:1f:b0:01:3d:12:5a:dc:46:01:09:f7:
b6:1a:ce:df:cb:4e:ef:d4:21:67:45:6e:7e:62:64:
a6:15:51:91:13:96:fb:8b:5d:4e:df:f2:91:0e:01:
6e:7d:57:c4:5a:33:16:27:91:20:24:52:c7:67:7b:
e8:24:41:63:fe:48:44:d1:c3:9b:90:bd:e5:bc:d3:
19:80:c5:c9:11:3c:db:41:7f:9f:ef:3b:d5:77:4d:
06:64:7b:ff:8a:38:fc:ff:85:87:0c:dd:4d:49:75:
e0:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:70:95:BD:39:75:3B:78:35:5A:53:FC:A1:40:13:14:74:52:5A:90
X509v3 Authority Key Identifier:
keyid:0E:B1:BD:30:D3:19:1A:87:C7:D0:A4:62:E6:79:32:43:16:33:DD:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DrG9MNMZGofH0KRi5nkyQxYz3R4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/72e91a-014f-483a-a544-4e33427f734e/1/DrG9MNMZGofH0KRi5nkyQxYz3R4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/72e91a-014f-483a-a544-4e33427f734e/1/DrG9MNMZGofH0KRi5nkyQxYz3R4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:b2:79:83:49:16:c6:af:55:b8:43:69:a5:ac:0d:20:56:91:
69:ba:27:70:fd:68:04:b0:ec:39:d8:d2:7c:cc:56:55:a0:98:
41:40:7f:53:a3:b4:12:60:9d:6f:3e:13:49:90:db:0a:d3:8b:
80:07:c2:ab:0d:db:07:9e:58:70:3c:60:81:3a:5f:a8:14:2c:
4d:8c:0d:4f:0a:78:9a:e7:08:d3:4e:99:cf:7f:12:b5:6c:ca:
78:91:7c:1b:e3:63:c9:cf:90:a8:b3:72:bd:b2:c9:ef:33:8c:
06:de:4a:2c:12:1e:44:3e:7c:81:9f:92:36:49:e7:51:b7:c0:
eb:78:e8:bd:04:8f:2e:2e:64:84:36:88:3d:a6:95:86:f9:43:
12:74:59:9f:81:8d:ea:2e:f0:d2:e3:24:8d:3e:cb:74:e0:00:
27:56:72:04:65:63:3d:3d:25:4b:a5:d9:44:29:7e:22:02:06:
34:c8:75:c9:b3:2c:6d:3e:68:19:c2:29:67:50:d8:c2:76:8e:
33:50:f3:6d:58:4a:3c:27:25:ab:b2:c8:31:6e:94:00:57:f4:
63:6d:02:5a:52:45:9f:fe:b5:f8:70:c7:7d:68:f2:f7:bd:0f:
54:fa:a5:4a:28:de:6a:fd:35:06:5a:f5:87:22:97:f0:39:bb:
25:98:af:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 13:05:34 2025 by rpki-client