Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/3796fa-c02e-45f9-a1a4-622bb4899887/1/DghrZ9iYllO662i40kq56b0Mryo.mft
File: DghrZ9iYllO662i40kq56b0Mryo.mft (raw, json)
Hash identifier: gsJO6VzsYc4PfczryQhO6ZWJRFE+aDEOX6/K+WDrj+g=
Subject key identifier: 8F:1A:11:8B:67:C7:92:0A:70:53:6F:5C:CF:BB:77:71:E2:B8:88:CC
Authority key identifier: 0E:08:6B:67:D8:98:96:53:BA:EB:68:B8:D2:4A:B9:E9:BD:0C:AF:2A
Certificate issuer: /CN=0e086b67d8989653baeb68b8d24ab9e9bd0caf2a
Certificate serial: 01987D1C41F29AFC2FE77D0E86BB79C65F51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DghrZ9iYllO662i40kq56b0Mryo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/3796fa-c02e-45f9-a1a4-622bb4899887/1/DghrZ9iYllO662i40kq56b0Mryo.mft
Manifest number: 1096
Signing time: Wed 06 Aug 2025 02:01:00 +0000
Manifest this update: Wed 06 Aug 2025 02:01:00 +0000
Manifest next update: Thu 07 Aug 2025 02:01:00 +0000
Files and hashes: 1: DghrZ9iYllO662i40kq56b0Mryo.crl (hash: myS0bX0GTyRzHO42kgwLd9O8rPKhzpd0D5aNUdBU150=)
2: XKbuE11HMiW-d3-7SHwE1VaECgw.roa (hash: iROyh9ucuOmjws3pOPkYjHDlUGlInLoKUEPjUvuWoZE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/3796fa-c02e-45f9-a1a4-622bb4899887/1/DghrZ9iYllO662i40kq56b0Mryo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/3796fa-c02e-45f9-a1a4-622bb4899887/1/DghrZ9iYllO662i40kq56b0Mryo.mft
rsync://rpki.ripe.net/repository/DEFAULT/DghrZ9iYllO662i40kq56b0Mryo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 02:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:1c:41:f2:9a:fc:2f:e7:7d:0e:86:bb:79:c6:5f:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e086b67d8989653baeb68b8d24ab9e9bd0caf2a
Validity
Not Before: Aug 6 02:01:00 2025 GMT
Not After : Aug 7 02:01:00 2025 GMT
Subject: CN=8f1a118b67c7920a70536f5ccfbb7771e2b888cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:20:03:0d:17:09:67:61:51:26:f8:f9:56:94:
39:42:37:02:20:18:0a:f5:3d:89:ba:82:b0:9a:10:
a2:9d:fa:00:0e:34:a5:b2:5f:e5:1d:55:03:b6:63:
ac:4f:a1:70:77:44:40:83:37:48:a0:fc:a0:3a:ab:
33:af:a1:b6:c8:87:55:21:3d:a5:30:e1:1c:f6:4f:
e7:92:5d:55:5b:5f:f4:06:e4:bf:88:19:50:53:08:
06:21:72:92:2e:a6:3b:3f:7e:75:85:de:dd:d1:51:
e7:83:72:6b:80:f2:95:15:57:e9:45:c6:4c:3c:d6:
7b:95:73:c8:fa:e9:ec:54:52:0c:a3:f2:05:32:82:
1d:ff:a4:e8:b6:67:6f:02:60:7d:52:03:7e:9c:85:
ab:04:f8:62:5c:b8:b1:a2:a3:81:55:4b:81:39:48:
b7:24:ee:c5:97:66:a8:3e:61:ac:37:8a:06:b0:d3:
35:31:6e:9a:18:af:36:57:b4:c4:b6:8f:b2:70:47:
1d:38:a5:c5:8b:4f:bb:c7:35:4b:54:43:3f:b8:de:
b1:29:f7:d1:34:42:8e:2a:cf:08:52:57:da:62:56:
58:c9:f7:ad:33:84:4e:1d:c7:50:93:60:b1:a7:c7:
8d:45:de:cc:c3:a4:f0:62:51:f2:21:fe:58:7d:07:
42:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:1A:11:8B:67:C7:92:0A:70:53:6F:5C:CF:BB:77:71:E2:B8:88:CC
X509v3 Authority Key Identifier:
keyid:0E:08:6B:67:D8:98:96:53:BA:EB:68:B8:D2:4A:B9:E9:BD:0C:AF:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DghrZ9iYllO662i40kq56b0Mryo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/3796fa-c02e-45f9-a1a4-622bb4899887/1/DghrZ9iYllO662i40kq56b0Mryo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/3796fa-c02e-45f9-a1a4-622bb4899887/1/DghrZ9iYllO662i40kq56b0Mryo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:db:33:03:c2:86:36:92:df:17:ae:36:de:aa:b9:80:0b:d3:
29:2b:5e:bd:10:7e:62:ba:2b:91:a8:c3:6c:0d:64:29:82:6f:
4b:a6:18:4a:bd:62:e5:05:17:ef:38:6f:3b:61:5c:48:87:ac:
c7:43:b9:3a:3b:97:b4:64:95:f3:fe:8e:5b:a2:a5:e9:74:25:
95:6e:e1:34:20:66:f8:11:fc:15:56:64:1e:24:fc:0e:68:b1:
db:5f:a6:e6:4f:cf:c1:4f:de:90:79:52:6b:39:fb:a3:22:fa:
9e:98:d3:41:bd:dd:80:f0:9d:d8:22:3b:98:46:16:30:ad:25:
63:e3:b3:40:91:14:83:c2:c8:8f:ff:1e:0a:de:2c:e4:80:1f:
b4:09:b9:dc:8c:8f:06:74:d3:af:56:79:19:8b:4f:ab:98:b6:
8e:50:c5:14:39:8f:38:7f:6a:64:24:a7:10:c0:a2:56:d7:9b:
0d:84:80:c2:20:72:4f:49:c1:b5:07:43:c6:58:64:19:46:b7:
db:2d:71:b2:ec:fd:84:99:45:0d:a7:d6:91:1d:87:38:ba:16:
8b:15:c3:3a:79:01:46:18:9b:98:1d:69:92:f5:60:ea:5b:7a:
3e:b5:ff:0f:44:6f:7d:90:f8:9c:a9:7b:10:be:31:dc:78:3f:
b4:1f:8d:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 12:35:24 2025 by rpki-client