Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/688943-713d-491e-a721-eca59f82018a/1/8DpbV31dnm0cX9O-1ADpacC-fDQ.mft
File: 8DpbV31dnm0cX9O-1ADpacC-fDQ.mft (raw, json)
Hash identifier: fnQHve6lL7PszKR0m04jl+Qz36vIsQ7B6QveBLVuOoY=
Subject key identifier: 42:64:45:05:57:5B:B0:0E:D7:35:6B:77:B2:C3:E1:47:7C:A6:D2:A1
Authority key identifier: F0:3A:5B:57:7D:5D:9E:6D:1C:5F:D3:BE:D4:00:E9:69:C0:BE:7C:34
Certificate issuer: /CN=f03a5b577d5d9e6d1c5fd3bed400e969c0be7c34
Certificate serial: 0198D73B7ED04844C03D7791A81F14B1B9D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8DpbV31dnm0cX9O-1ADpacC-fDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/688943-713d-491e-a721-eca59f82018a/1/8DpbV31dnm0cX9O-1ADpacC-fDQ.mft
Manifest number: 1645
Signing time: Sat 23 Aug 2025 14:00:57 +0000
Manifest this update: Sat 23 Aug 2025 14:00:57 +0000
Manifest next update: Sun 24 Aug 2025 14:00:57 +0000
Files and hashes: 1: 8DpbV31dnm0cX9O-1ADpacC-fDQ.crl (hash: GuwIgN1Ss8/B4RKYjcbK6N2uYgVM5K4KqWsbMni8ew0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/688943-713d-491e-a721-eca59f82018a/1/8DpbV31dnm0cX9O-1ADpacC-fDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/688943-713d-491e-a721-eca59f82018a/1/8DpbV31dnm0cX9O-1ADpacC-fDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8DpbV31dnm0cX9O-1ADpacC-fDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3b:7e:d0:48:44:c0:3d:77:91:a8:1f:14:b1:b9:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f03a5b577d5d9e6d1c5fd3bed400e969c0be7c34
Validity
Not Before: Aug 23 14:00:57 2025 GMT
Not After : Aug 24 14:00:57 2025 GMT
Subject: CN=42644505575bb00ed7356b77b2c3e1477ca6d2a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:55:c0:59:c1:38:68:0f:f9:df:6b:35:bc:fe:
9b:ae:61:f5:93:4e:8b:6d:be:34:a4:2c:f3:ce:85:
52:07:4f:eb:7b:d3:36:13:48:cb:3c:2d:c3:9a:d4:
f4:34:40:3d:6e:69:be:2d:08:8a:2c:0d:e0:d3:44:
c8:91:a6:b2:b2:f8:0a:cd:21:8a:22:b4:d8:69:63:
f1:b7:8c:1d:6b:3c:d3:fb:cc:5c:33:5f:bc:7f:d8:
e6:f8:30:5c:e5:78:99:9d:21:32:65:74:a8:b1:13:
46:62:56:46:9d:3a:16:14:08:e9:4d:a0:b6:85:3f:
df:6c:e2:ff:42:73:ed:2f:a7:d3:6e:e2:80:90:75:
e7:70:ea:a4:e6:75:e5:c4:a8:67:9a:fb:e2:0d:e5:
41:cc:90:73:33:a9:c1:bd:1f:f1:8d:59:d0:a8:97:
96:c1:df:b1:25:9b:93:8a:78:fd:c5:ee:22:e0:49:
d6:56:f2:3a:37:e9:cc:2d:6f:53:95:72:52:54:d9:
4b:7f:e6:c4:27:4f:65:f3:e0:c4:f3:32:99:9c:cd:
8b:fc:09:e8:88:cf:85:5d:0a:1c:81:0b:2f:3c:10:
09:9b:b8:4e:e8:45:68:44:f5:b4:b5:df:57:89:1b:
04:69:14:a4:8b:19:11:d4:0e:f9:4b:fa:6f:e3:08:
da:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:64:45:05:57:5B:B0:0E:D7:35:6B:77:B2:C3:E1:47:7C:A6:D2:A1
X509v3 Authority Key Identifier:
keyid:F0:3A:5B:57:7D:5D:9E:6D:1C:5F:D3:BE:D4:00:E9:69:C0:BE:7C:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8DpbV31dnm0cX9O-1ADpacC-fDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/688943-713d-491e-a721-eca59f82018a/1/8DpbV31dnm0cX9O-1ADpacC-fDQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/688943-713d-491e-a721-eca59f82018a/1/8DpbV31dnm0cX9O-1ADpacC-fDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:41:5d:e8:1d:8d:1f:16:4d:55:9a:ea:9a:7d:ca:e8:05:b1:
51:1e:32:39:9f:af:1e:eb:95:93:d1:a8:dd:ba:8e:89:2b:1b:
66:df:4a:24:21:cf:40:20:6c:b8:6e:c3:e5:3b:3c:f7:92:2d:
2f:fd:4f:d4:b3:e1:9a:95:d2:20:c9:d9:55:cc:a3:2a:44:6c:
b7:25:4a:86:38:ce:55:4e:25:39:7a:d3:bf:49:73:ab:31:e8:
c4:14:1d:cf:55:d1:a5:45:c5:f1:57:87:e4:ad:63:89:89:57:
00:3b:a1:51:ea:dd:f3:61:50:8b:4c:7b:56:65:02:6e:8c:91:
bb:19:61:4f:2e:c5:25:9e:f9:66:a8:44:c2:d6:ad:0b:0b:a8:
88:8d:20:db:10:af:9d:b4:2f:ac:ac:d7:2f:bc:09:d5:5f:30:
b8:b7:a6:19:7a:7b:61:ff:e8:f5:83:49:ab:a4:78:ef:9b:9f:
c9:28:6b:9e:9e:1e:93:6b:7a:16:3b:0a:f3:06:37:04:f9:86:
e0:db:4d:73:44:a2:fb:6a:84:f2:4a:49:f0:54:09:8f:3e:1a:
46:33:2e:1a:82:5a:c5:c6:b6:74:91:0e:7f:34:c1:c3:33:e3:
e9:e8:17:97:81:4e:b6:be:86:46:3e:a5:d0:fa:a4:3c:9b:ab:
ca:17:9c:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:28:15 2025 by rpki-client