Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/7b2dac-0fb4-4309-8861-7231146d156f/1/DxoYFt02i3fPMr0hqeC61d9s3_A.mft
File: DxoYFt02i3fPMr0hqeC61d9s3_A.mft (raw, json)
Hash identifier: XXgwQjGRblaaV65b9dDNw4HF9XC09ANs5HdKSQLWe2s=
Subject key identifier: C0:CD:63:87:70:DD:FC:4E:17:C9:8F:97:36:EE:C0:A4:71:F6:A2:7C
Authority key identifier: 0F:1A:18:16:DD:36:8B:77:CF:32:BD:21:A9:E0:BA:D5:DF:6C:DF:F0
Certificate issuer: /CN=0f1a1816dd368b77cf32bd21a9e0bad5df6cdff0
Certificate serial: 0198D515870405A0DA5D24482717CBB6EF77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DxoYFt02i3fPMr0hqeC61d9s3_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/7b2dac-0fb4-4309-8861-7231146d156f/1/DxoYFt02i3fPMr0hqeC61d9s3_A.mft
Manifest number: 1647
Signing time: Sat 23 Aug 2025 04:00:14 +0000
Manifest this update: Sat 23 Aug 2025 04:00:14 +0000
Manifest next update: Sun 24 Aug 2025 04:00:14 +0000
Files and hashes: 1: DxoYFt02i3fPMr0hqeC61d9s3_A.crl (hash: Ro7DI2tCouE5xFxXql51FHlzmP1uI0yIhJeM87pPERg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/7b2dac-0fb4-4309-8861-7231146d156f/1/DxoYFt02i3fPMr0hqeC61d9s3_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/7b2dac-0fb4-4309-8861-7231146d156f/1/DxoYFt02i3fPMr0hqeC61d9s3_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/DxoYFt02i3fPMr0hqeC61d9s3_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:87:04:05:a0:da:5d:24:48:27:17:cb:b6:ef:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f1a1816dd368b77cf32bd21a9e0bad5df6cdff0
Validity
Not Before: Aug 23 04:00:14 2025 GMT
Not After : Aug 24 04:00:14 2025 GMT
Subject: CN=c0cd638770ddfc4e17c98f9736eec0a471f6a27c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:9e:9e:68:15:50:02:26:85:76:cc:be:51:b7:
83:fb:5f:0e:3b:16:27:e6:c9:0f:35:50:30:a5:2a:
5b:3e:e7:ce:26:2a:f2:c4:a3:2d:a0:10:e7:f0:52:
4c:29:69:85:72:cf:68:9d:f6:b8:ad:16:fb:ce:04:
d8:6b:d5:f0:b3:3d:d7:54:20:e3:ed:8f:86:aa:90:
e0:e0:8d:79:10:ec:27:35:2d:35:f3:f8:00:d2:70:
a5:29:99:d2:b9:6d:ec:39:b2:df:32:7a:b4:34:9f:
2c:28:f5:69:f1:0b:a0:ee:62:dc:3a:f1:f1:c3:30:
68:b4:b9:7c:b4:2e:a5:7d:0f:19:0f:fc:46:7d:f1:
ab:04:57:5d:51:4d:e8:d7:f5:5d:71:9f:f3:06:3b:
4f:43:14:b0:1e:96:f7:28:0e:58:fa:3e:96:32:a8:
11:c1:11:f2:97:32:ee:ef:aa:87:23:24:91:de:92:
5d:f8:b7:5f:53:e2:36:f3:cb:3e:ae:7f:bf:83:ba:
4b:4b:f4:f2:e8:3b:fb:ab:b2:ff:e2:08:bf:bc:39:
af:c8:ab:fb:79:90:42:c2:cd:91:4e:58:e7:12:c4:
43:b6:48:a8:0e:a6:2b:33:92:3e:b6:76:8c:c8:83:
10:2b:72:7f:b4:88:fc:47:3c:ad:01:39:a5:a7:21:
84:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:CD:63:87:70:DD:FC:4E:17:C9:8F:97:36:EE:C0:A4:71:F6:A2:7C
X509v3 Authority Key Identifier:
keyid:0F:1A:18:16:DD:36:8B:77:CF:32:BD:21:A9:E0:BA:D5:DF:6C:DF:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DxoYFt02i3fPMr0hqeC61d9s3_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/7b2dac-0fb4-4309-8861-7231146d156f/1/DxoYFt02i3fPMr0hqeC61d9s3_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/7b2dac-0fb4-4309-8861-7231146d156f/1/DxoYFt02i3fPMr0hqeC61d9s3_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:be:72:e0:ac:9f:1c:9e:f9:a0:e4:d4:e6:72:45:fd:7d:43:
f7:6e:8d:0b:9a:85:fc:d4:bf:d0:1b:99:ec:fd:7c:2e:3b:73:
55:d2:0e:d2:0e:a1:63:5f:82:2d:db:c2:fc:97:b1:fa:bd:16:
8b:1f:13:73:c6:0d:bd:d7:f0:1f:91:81:90:df:ea:58:17:bc:
03:30:dd:0c:ec:a6:5b:20:32:98:6d:26:b4:eb:da:72:e1:38:
f7:f9:af:ee:3c:c7:e3:09:53:27:a5:34:5b:ad:50:c7:df:c4:
21:a1:91:5b:80:6f:f6:ba:e2:a3:46:8f:0a:9f:c3:81:07:8d:
24:29:3c:19:fd:1c:f4:ed:d8:30:47:9d:9a:55:90:95:7a:9d:
83:38:8e:91:81:16:94:27:55:8a:13:31:d0:81:c1:d9:d8:e9:
79:bb:99:60:09:a6:18:8b:93:b8:dc:df:38:81:af:d1:73:8d:
79:f6:83:27:19:6b:33:f9:59:00:1d:8b:f1:f0:f5:6b:b9:1f:
07:72:5f:c1:3f:a2:b8:8b:9c:ec:11:ae:a3:0b:6d:77:a6:2d:
de:29:ee:54:d5:f7:a7:34:17:61:f2:47:c0:b4:99:94:03:2d:
d2:00:1b:f6:ca:37:9d:52:1c:f0:16:47:36:69:e5:80:47:85:
99:e3:7e:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:49:35 2025 by rpki-client