Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6a1baa-5f8f-420a-90c4-665a69cb8900/1/DibUX9VpIdNGnRnEdXLydfnVUkI.mft
File: DibUX9VpIdNGnRnEdXLydfnVUkI.mft (raw, json)
Hash identifier: PHsj9sHp2AksItNWGfS/A7HzerGYDUYholAJjfhf3kQ=
Subject key identifier: C9:22:9D:12:6E:73:D2:50:15:F1:CE:C0:52:4B:BB:8F:0B:17:D7:2A
Authority key identifier: 0E:26:D4:5F:D5:69:21:D3:46:9D:19:C4:75:72:F2:75:F9:D5:52:42
Certificate issuer: /CN=0e26d45fd56921d3469d19c47572f275f9d55242
Certificate serial: 01988E4641E74C4F7C54267ED7E3B2EA3B20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DibUX9VpIdNGnRnEdXLydfnVUkI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6a1baa-5f8f-420a-90c4-665a69cb8900/1/DibUX9VpIdNGnRnEdXLydfnVUkI.mft
Manifest number: 0872
Signing time: Sat 09 Aug 2025 10:00:25 +0000
Manifest this update: Sat 09 Aug 2025 10:00:25 +0000
Manifest next update: Sun 10 Aug 2025 10:00:25 +0000
Files and hashes: 1: DibUX9VpIdNGnRnEdXLydfnVUkI.crl (hash: Sz3/KSlIdzlDwnozGW8NZcoJNgT+MtzSGmwL4ThrLEY=)
2: xY4E3yQDPueuZRFyGHMpuwD_2xI.roa (hash: JFOzMGNC8f6WUb/Ik4daKoB04MNWXOUy7eceKB/AaN8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/6a1baa-5f8f-420a-90c4-665a69cb8900/1/DibUX9VpIdNGnRnEdXLydfnVUkI.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/6a1baa-5f8f-420a-90c4-665a69cb8900/1/DibUX9VpIdNGnRnEdXLydfnVUkI.mft
rsync://rpki.ripe.net/repository/DEFAULT/DibUX9VpIdNGnRnEdXLydfnVUkI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8e:46:41:e7:4c:4f:7c:54:26:7e:d7:e3:b2:ea:3b:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e26d45fd56921d3469d19c47572f275f9d55242
Validity
Not Before: Aug 9 10:00:25 2025 GMT
Not After : Aug 10 10:00:25 2025 GMT
Subject: CN=c9229d126e73d25015f1cec0524bbb8f0b17d72a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:61:88:15:0c:49:6f:c4:4e:74:87:63:2a:2f:
55:0a:2b:10:dd:55:60:06:1e:a7:a1:51:b2:d9:9a:
7b:1a:47:b6:fc:bd:f5:f0:a5:da:ae:44:1f:38:cd:
db:c3:46:f7:b4:7a:33:43:b5:2e:71:03:c0:6d:4d:
bd:20:07:28:bb:64:d0:7d:3f:8c:0e:bb:37:a9:62:
4b:2a:01:be:de:30:3e:89:f8:8f:fb:8f:87:f0:ab:
43:ea:0f:82:83:7f:81:72:62:04:a1:a8:df:df:52:
eb:64:45:df:93:29:cf:be:b2:5a:0d:e9:ab:02:cd:
f1:2d:c4:10:4a:12:93:5a:92:c8:ba:2d:51:f2:51:
ae:f5:e9:41:e7:1c:d5:8b:c9:13:a5:24:80:e8:cc:
41:5d:c1:f6:71:99:b4:a7:4b:4c:39:29:83:a3:d6:
92:a3:74:42:ba:d2:fb:0f:9a:f3:de:42:98:71:76:
52:4a:e6:c6:d5:b4:a3:d3:95:18:80:81:75:34:6f:
60:ae:13:32:92:ed:2a:66:bb:83:c4:12:b3:cf:2c:
86:84:46:85:33:7f:52:3f:6d:00:9d:90:38:45:76:
ce:62:28:b7:a2:2f:bf:1b:8b:86:25:75:ec:f3:ed:
c0:4e:5b:fd:7c:3c:a4:b5:8e:e3:ec:98:de:99:6f:
b6:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:22:9D:12:6E:73:D2:50:15:F1:CE:C0:52:4B:BB:8F:0B:17:D7:2A
X509v3 Authority Key Identifier:
keyid:0E:26:D4:5F:D5:69:21:D3:46:9D:19:C4:75:72:F2:75:F9:D5:52:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DibUX9VpIdNGnRnEdXLydfnVUkI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6a1baa-5f8f-420a-90c4-665a69cb8900/1/DibUX9VpIdNGnRnEdXLydfnVUkI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6a1baa-5f8f-420a-90c4-665a69cb8900/1/DibUX9VpIdNGnRnEdXLydfnVUkI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:fa:3f:a9:27:fb:83:cc:49:36:af:60:8a:72:63:fc:4c:42:
12:db:5c:44:38:64:da:c8:ed:5e:1b:81:87:63:b5:c5:67:75:
f4:9c:da:34:fd:e9:e8:89:73:14:d1:4b:ed:57:51:11:2b:9f:
0f:45:91:0c:2e:8d:a9:ca:9f:11:14:c7:4c:bd:84:18:a1:22:
5b:d0:84:89:cc:4b:42:4b:8d:a0:92:ed:7c:ef:df:0b:97:92:
1e:85:44:49:f9:6b:fa:d1:70:ff:3f:6a:b9:bb:48:b2:72:46:
18:e8:d8:7f:02:15:1d:48:b3:91:b9:6f:39:c2:0e:fa:78:57:
24:e9:44:49:3e:8e:39:a0:93:84:a7:0a:52:7b:46:c7:7b:ff:
53:c2:35:de:01:fd:31:af:c9:9b:13:a6:2f:82:a0:5f:a1:be:
f8:77:9b:c2:eb:e1:1c:67:6a:6c:0e:bb:d6:52:4f:67:b6:29:
36:c9:69:13:a5:be:91:83:8e:eb:8c:a0:0a:4c:0b:88:ae:7a:
1e:0e:bb:58:10:8f:db:ea:6b:b1:94:bf:1f:75:46:7b:cf:26:
82:e5:d8:70:75:fc:e4:b1:cd:9b:84:02:3f:54:e7:df:11:ba:
d4:58:b9:48:33:c7:11:a0:7c:59:b5:b4:3f:27:41:b7:25:aa:
5a:ec:3e:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 14:19:17 2025 by rpki-client