Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/b3d25c-45ba-433f-8824-17e0a6869ced/1/dcuRtTn9feisVTjK9Tu_L6wbslk.mft
File: dcuRtTn9feisVTjK9Tu_L6wbslk.mft (raw, json)
Hash identifier: CPW8Mi9OfAZV3z5RSltr7vHrnm6rrAa4qotnXhc/mAA=
Subject key identifier: AA:F3:5F:77:50:51:A0:5D:6B:6D:DF:18:F4:D0:11:F4:A7:3F:61:DE
Authority key identifier: 75:CB:91:B5:39:FD:7D:E8:AC:55:38:CA:F5:3B:BF:2F:AC:1B:B2:59
Certificate issuer: /CN=75cb91b539fd7de8ac5538caf53bbf2fac1bb259
Certificate serial: 019897B808A1066DADC6A97108AEA6B819DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dcuRtTn9feisVTjK9Tu_L6wbslk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/b3d25c-45ba-433f-8824-17e0a6869ced/1/dcuRtTn9feisVTjK9Tu_L6wbslk.mft
Manifest number: 06DB
Signing time: Mon 11 Aug 2025 06:01:17 +0000
Manifest this update: Mon 11 Aug 2025 06:01:17 +0000
Manifest next update: Tue 12 Aug 2025 06:01:17 +0000
Files and hashes: 1: dcuRtTn9feisVTjK9Tu_L6wbslk.crl (hash: Py8xj+KCp7VkoqDHzN08OG27oLDZA+qTcawvW/FqYGI=)
2: wmFwOwWe4TE9uLkEByUtzshEopU.roa (hash: QBlI2HpuFwgzwXYHTq+pMuExi7xAAtXFZ+n0JdzIy8U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/b3d25c-45ba-433f-8824-17e0a6869ced/1/dcuRtTn9feisVTjK9Tu_L6wbslk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/b3d25c-45ba-433f-8824-17e0a6869ced/1/dcuRtTn9feisVTjK9Tu_L6wbslk.mft
rsync://rpki.ripe.net/repository/DEFAULT/dcuRtTn9feisVTjK9Tu_L6wbslk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:97:b8:08:a1:06:6d:ad:c6:a9:71:08:ae:a6:b8:19:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75cb91b539fd7de8ac5538caf53bbf2fac1bb259
Validity
Not Before: Aug 11 06:01:17 2025 GMT
Not After : Aug 12 06:01:17 2025 GMT
Subject: CN=aaf35f775051a05d6b6ddf18f4d011f4a73f61de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:4d:54:3d:c2:c5:c2:0c:4b:74:4a:16:35:5a:
ae:c4:9d:dd:d2:f6:0e:b9:8f:b0:09:31:70:2c:03:
75:81:e2:a8:ba:21:b0:0f:db:9f:d7:f9:dc:3f:a8:
9f:d9:07:a6:c3:1a:ff:4a:bc:d7:ae:f3:8c:6b:44:
3c:5c:5e:b6:cc:e2:0a:31:6e:7f:09:3c:bb:01:aa:
54:0a:15:d5:b4:0d:68:db:1f:d2:06:cd:7b:00:9f:
24:39:76:52:1d:51:18:e8:a4:b1:77:8e:c3:0d:ba:
36:14:83:8f:76:98:4a:0a:c8:04:cc:9c:d5:3a:95:
0a:1d:fc:77:e0:a2:77:94:da:58:83:a6:19:7b:0c:
f9:34:c0:02:a6:85:8b:01:fa:14:dd:d0:7e:df:7f:
4d:a4:f8:20:c1:48:87:49:57:a8:d4:a6:d3:f9:b0:
03:18:15:ee:11:ee:f7:0a:28:b4:be:aa:a1:5c:5f:
d0:15:13:76:0c:e3:5a:f2:ef:3f:b8:b7:ba:03:8d:
41:9f:e4:d6:85:63:fc:14:f8:f4:df:84:bf:f4:ee:
3e:4b:d1:ef:02:04:8f:3a:f1:78:55:be:29:88:00:
00:16:c4:a6:aa:1b:f2:39:60:07:13:b5:3e:55:06:
d3:71:88:4d:14:e9:34:e0:00:ea:b2:3f:ed:93:0a:
1e:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:F3:5F:77:50:51:A0:5D:6B:6D:DF:18:F4:D0:11:F4:A7:3F:61:DE
X509v3 Authority Key Identifier:
keyid:75:CB:91:B5:39:FD:7D:E8:AC:55:38:CA:F5:3B:BF:2F:AC:1B:B2:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dcuRtTn9feisVTjK9Tu_L6wbslk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/b3d25c-45ba-433f-8824-17e0a6869ced/1/dcuRtTn9feisVTjK9Tu_L6wbslk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/b3d25c-45ba-433f-8824-17e0a6869ced/1/dcuRtTn9feisVTjK9Tu_L6wbslk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:00:2b:9b:09:d9:ac:28:d1:f0:d7:bf:7b:ce:9f:f9:ed:59:
df:ee:d8:73:ed:75:b1:89:68:24:43:f5:59:10:b0:6d:95:44:
25:39:3e:35:82:cf:0c:ea:1c:e5:45:a5:4c:70:4f:01:ae:61:
12:16:0a:14:13:bc:f8:2c:67:40:44:17:30:23:c9:f8:42:46:
4b:51:a9:c9:6b:2a:0a:f6:96:55:e8:cd:5f:60:e6:7c:69:0a:
30:25:d6:d3:b7:8f:9a:3e:3c:cb:c3:12:38:f2:20:c4:c7:7c:
23:21:f6:2e:ec:7e:80:95:6f:34:a7:64:ab:6e:5d:ee:5e:4e:
65:f1:51:f3:ff:ac:26:74:8f:8f:85:42:b1:39:c4:32:b7:73:
3b:39:90:a5:aa:93:70:c6:cf:6e:b6:5c:f8:5e:e2:65:27:97:
b1:d9:ba:2d:e1:7a:3a:3c:dc:cc:56:7e:86:8d:99:34:5d:f0:
94:5a:db:54:96:c2:e7:a4:c6:0f:3f:88:fe:3e:a9:97:aa:5e:
ea:fb:13:63:85:70:1d:03:80:1f:cc:f7:f8:c6:90:63:96:96:
b8:00:92:9a:f5:db:64:10:cb:8c:85:c3:d3:7e:70:6b:c7:fd:
6a:e8:f9:82:97:38:74:48:9b:a2:60:fc:75:98:c4:17:94:ac:
95:fe:99:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:22:06 2025 by rpki-client