Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/96fb9d-ff9f-4d5d-b6c1-d910b7721d20/1/dbh4BinZITNXwHDBwBBgU0dIg8E.mft
File: dbh4BinZITNXwHDBwBBgU0dIg8E.mft (raw, json)
Hash identifier: Gf0lfzwzgwC85M971rxAieS30rmmniZrhLQt9eF8sII=
Subject key identifier: AD:09:A5:71:4C:45:F3:3D:D5:B6:C3:79:35:18:D3:23:FA:B5:7C:68
Authority key identifier: 75:B8:78:06:29:D9:21:33:57:C0:70:C1:C0:10:60:53:47:48:83:C1
Certificate issuer: /CN=75b8780629d9213357c070c1c0106053474883c1
Certificate serial: 01989E5F533174A7F21762C8CA5D52675228
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dbh4BinZITNXwHDBwBBgU0dIg8E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/96fb9d-ff9f-4d5d-b6c1-d910b7721d20/1/dbh4BinZITNXwHDBwBBgU0dIg8E.mft
Manifest number: 0C51
Signing time: Tue 12 Aug 2025 13:01:44 +0000
Manifest this update: Tue 12 Aug 2025 13:01:44 +0000
Manifest next update: Wed 13 Aug 2025 13:01:44 +0000
Files and hashes: 1: dbh4BinZITNXwHDBwBBgU0dIg8E.crl (hash: fnrHv3NmuXLUzqJGoWhjOtNSEBgneNI1aNGwvcC1wOk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/96fb9d-ff9f-4d5d-b6c1-d910b7721d20/1/dbh4BinZITNXwHDBwBBgU0dIg8E.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/96fb9d-ff9f-4d5d-b6c1-d910b7721d20/1/dbh4BinZITNXwHDBwBBgU0dIg8E.mft
rsync://rpki.ripe.net/repository/DEFAULT/dbh4BinZITNXwHDBwBBgU0dIg8E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 13:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9e:5f:53:31:74:a7:f2:17:62:c8:ca:5d:52:67:52:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75b8780629d9213357c070c1c0106053474883c1
Validity
Not Before: Aug 12 13:01:44 2025 GMT
Not After : Aug 13 13:01:44 2025 GMT
Subject: CN=ad09a5714c45f33dd5b6c3793518d323fab57c68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:62:1a:d2:a6:96:cd:29:83:31:53:fa:05:30:
31:20:f3:24:29:3e:96:4c:d4:d4:fb:92:71:b4:96:
a4:3c:29:65:e8:ef:b8:e7:9c:65:d4:12:76:5d:bc:
4a:8c:67:d1:dc:f4:f6:39:41:ca:62:f2:30:15:93:
3e:79:e9:5f:25:24:3c:96:c7:1e:e9:97:0e:c8:d5:
e5:3d:ed:61:61:22:48:ba:90:e6:e7:50:05:cd:2e:
ea:ec:1a:9e:06:63:cc:12:e3:e8:37:41:a6:eb:7b:
70:d3:0b:96:8c:a3:20:96:50:36:78:56:99:da:64:
2c:0b:44:6d:00:1f:14:44:e6:37:73:81:b2:01:b5:
74:53:3e:6d:ab:b2:e1:24:50:ed:ad:e2:cc:82:dd:
21:cd:8a:a1:e3:b3:34:5e:0e:60:32:8d:bd:c8:d6:
cc:b1:1e:c4:e1:1c:ae:0c:e5:df:e9:c9:9b:67:2a:
b9:c8:5c:73:9d:9d:0a:23:d1:5e:e4:9b:8d:18:b0:
46:58:2a:46:92:91:7e:df:8c:e7:be:19:82:d8:78:
67:5a:15:28:70:79:08:9f:56:35:11:aa:b8:35:3f:
77:fa:be:8c:95:4e:68:1f:26:db:f7:f9:24:1b:f4:
c9:6a:62:7e:46:64:8b:01:b3:0b:82:3c:53:e2:ec:
50:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:09:A5:71:4C:45:F3:3D:D5:B6:C3:79:35:18:D3:23:FA:B5:7C:68
X509v3 Authority Key Identifier:
keyid:75:B8:78:06:29:D9:21:33:57:C0:70:C1:C0:10:60:53:47:48:83:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dbh4BinZITNXwHDBwBBgU0dIg8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/96fb9d-ff9f-4d5d-b6c1-d910b7721d20/1/dbh4BinZITNXwHDBwBBgU0dIg8E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/96fb9d-ff9f-4d5d-b6c1-d910b7721d20/1/dbh4BinZITNXwHDBwBBgU0dIg8E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:d8:e4:4f:d9:bf:74:d2:c0:b4:d7:d3:2c:8e:41:26:86:50:
12:b6:9d:38:ed:d5:1e:0b:a5:9b:45:f7:ec:78:4b:33:cf:b4:
b1:64:f2:61:24:1c:cd:95:b7:78:92:00:31:84:38:8b:b8:b5:
2b:7a:9e:c8:2e:43:88:e6:b7:1c:f9:2a:6f:b3:94:b5:0b:af:
ca:0a:8e:6c:86:27:1c:34:08:a6:cf:6f:09:94:98:60:fb:22:
27:bd:23:04:47:cc:e3:39:1e:96:f7:75:14:61:df:d9:f7:73:
90:19:90:22:84:e9:75:42:3c:59:d2:55:0f:a3:f8:b8:93:df:
25:c0:61:b4:5f:e5:a6:5e:e6:de:cc:85:22:5e:93:3b:c7:60:
f0:26:39:d2:cc:06:fc:99:db:34:df:ab:78:49:26:1f:64:2f:
62:8e:88:02:79:8e:0a:4d:86:47:ea:47:b4:3e:4c:5e:a7:6f:
ba:8e:39:ef:21:49:ee:4a:9d:f2:9b:25:2f:fa:09:72:ab:2d:
35:33:1c:05:58:71:fa:5f:ec:86:e5:ac:3b:71:f3:3c:b3:e6:
55:b0:c9:f9:10:96:4b:d0:43:78:c4:31:ba:45:9e:f9:ea:ca:
11:26:b3:f0:e1:3a:60:e4:1d:31:17:ea:6a:3b:c6:5c:68:40:
d3:a5:dc:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 18:14:31 2025 by rpki-client