Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/921df1-fa7d-4307-b9c3-7ce8c9704cf0/1/DP4QWKMePBiUvPBkx-g3C7ps-OQ.mft
File: DP4QWKMePBiUvPBkx-g3C7ps-OQ.mft (raw, json)
Hash identifier: DdTc5rwM6CHmtkSUOYUXO8NbLj+kbFBq2VvY78ftyc0=
Subject key identifier: 99:F2:55:77:02:15:67:87:33:1E:ED:AA:29:9E:DA:DF:CE:26:5A:E5
Authority key identifier: 0C:FE:10:58:A3:1E:3C:18:94:BC:F0:64:C7:E8:37:0B:BA:6C:F8:E4
Certificate issuer: /CN=0cfe1058a31e3c1894bcf064c7e8370bba6cf8e4
Certificate serial: 019873E1E8A1CD5D48479AE060EFBF180576
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DP4QWKMePBiUvPBkx-g3C7ps-OQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/921df1-fa7d-4307-b9c3-7ce8c9704cf0/1/DP4QWKMePBiUvPBkx-g3C7ps-OQ.mft
Manifest number: 0CFC
Signing time: Mon 04 Aug 2025 07:00:41 +0000
Manifest this update: Mon 04 Aug 2025 07:00:41 +0000
Manifest next update: Tue 05 Aug 2025 07:00:41 +0000
Files and hashes: 1: DP4QWKMePBiUvPBkx-g3C7ps-OQ.crl (hash: ahILcaB0+L6AWdjmwNeoEZv9pxb4inuBtGNzj1FAvTs=)
2: UKqORdLzZXdOrDEcMxzidP1Tf04.roa (hash: 993OGeNZfndwd7HXQtjHB4WsdW/h/7CpCQberKrZGUc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/921df1-fa7d-4307-b9c3-7ce8c9704cf0/1/DP4QWKMePBiUvPBkx-g3C7ps-OQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/921df1-fa7d-4307-b9c3-7ce8c9704cf0/1/DP4QWKMePBiUvPBkx-g3C7ps-OQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/DP4QWKMePBiUvPBkx-g3C7ps-OQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e1:e8:a1:cd:5d:48:47:9a:e0:60:ef:bf:18:05:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cfe1058a31e3c1894bcf064c7e8370bba6cf8e4
Validity
Not Before: Aug 4 07:00:41 2025 GMT
Not After : Aug 5 07:00:41 2025 GMT
Subject: CN=99f2557702156787331eedaa299edadfce265ae5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:04:aa:cf:ee:a5:88:19:77:e6:9e:48:17:55:
19:fd:3a:be:52:6a:5c:3c:b8:5b:0e:5a:ff:11:09:
da:fa:dc:7b:b6:0b:f5:41:8d:c2:10:fc:0e:7c:f2:
b1:15:6d:eb:91:44:10:cc:5b:60:95:d1:f9:c4:2d:
60:19:a3:ef:ef:73:74:51:2f:f7:4f:e2:b7:14:d6:
54:49:78:39:40:33:95:36:93:b0:e7:ec:b2:56:9a:
2f:26:92:40:7d:c3:d6:17:ca:2e:89:42:83:eb:3d:
87:5c:7f:30:5f:1d:ce:63:ae:fd:88:29:06:d9:eb:
f3:b5:2a:d9:83:b0:86:cf:2c:2d:10:10:bd:9e:ef:
9b:af:8a:a1:06:b6:1f:13:8a:db:65:20:5b:0b:19:
69:e4:0f:24:7b:35:2f:53:32:09:ef:af:36:78:85:
ef:49:bf:35:d3:63:26:d9:d9:a7:80:40:5a:4a:86:
ba:b3:8c:1f:a7:6b:35:30:9f:d0:94:4d:f1:04:12:
9a:eb:1c:e9:f5:4f:44:38:30:97:dd:6f:da:ac:b9:
76:e9:ec:f6:12:64:0c:18:c3:9a:09:34:8e:a1:b5:
82:a0:57:ac:3b:d0:81:9a:11:20:3d:61:05:f2:d3:
82:f8:ff:50:cc:b4:5e:8d:cb:09:e8:5a:99:b1:a6:
5a:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:F2:55:77:02:15:67:87:33:1E:ED:AA:29:9E:DA:DF:CE:26:5A:E5
X509v3 Authority Key Identifier:
keyid:0C:FE:10:58:A3:1E:3C:18:94:BC:F0:64:C7:E8:37:0B:BA:6C:F8:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DP4QWKMePBiUvPBkx-g3C7ps-OQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/921df1-fa7d-4307-b9c3-7ce8c9704cf0/1/DP4QWKMePBiUvPBkx-g3C7ps-OQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/921df1-fa7d-4307-b9c3-7ce8c9704cf0/1/DP4QWKMePBiUvPBkx-g3C7ps-OQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:7a:89:5e:31:ad:d4:a2:b4:df:11:52:0a:16:64:5f:43:5c:
03:51:cd:f6:94:d4:eb:cc:a0:ce:dd:28:d1:b8:c3:72:2f:ed:
db:a4:f1:17:49:c7:e4:17:5a:db:a7:24:b4:cd:0c:a5:ab:de:
fb:f6:38:01:3d:3c:61:99:61:81:4c:b4:5c:0c:e6:a2:eb:f1:
3d:5f:0a:22:e6:7d:58:e3:8f:df:e9:c7:67:d5:21:20:81:5f:
8d:e6:60:17:fa:8e:ac:4f:b5:6f:9d:a5:d6:a0:d7:37:45:e8:
36:9a:c5:a0:d3:00:8d:25:1f:b4:78:18:a9:29:e3:43:05:d4:
13:95:d6:db:c0:a8:95:72:c9:c5:ee:52:40:0d:a3:60:ef:e2:
35:eb:e2:0d:5c:3b:8c:69:5d:77:69:e8:13:63:c7:57:45:1f:
29:ae:12:1c:83:8e:08:ee:75:86:54:d4:b8:9f:e5:ea:6b:82:
f6:22:d9:32:02:ae:7e:eb:a8:42:78:64:39:e1:81:77:de:cf:
bc:f8:43:dc:f6:8e:32:43:24:e4:02:3b:2a:f3:5d:7d:a1:81:
ba:14:4a:3a:0d:25:79:64:5a:ad:1f:20:a1:22:3f:47:77:ef:
2f:83:6e:a5:26:e2:bb:16:5b:08:68:bc:b8:cd:33:8b:fb:2f:
1e:a5:bf:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:14:49 2025 by rpki-client