
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/dfa6a1-1e4c-49ff-a480-274232d69505/1/dQRxYHUyqMev1g1PMXqtxJDrogY.mft
File: dQRxYHUyqMev1g1PMXqtxJDrogY.mft (raw, json)
Hash identifier: bc04T94izEal1n9dgFWXUSLoUk0GEGVql9sGoT0BsAQ=
Subject key identifier: 1C:9A:E5:AC:73:75:B5:94:BD:A9:89:1C:08:10:8E:E4:DC:B7:59:81
Authority key identifier: 75:04:71:60:75:32:A8:C7:AF:D6:0D:4F:31:7A:AD:C4:90:EB:A2:06
Certificate issuer: /CN=750471607532a8c7afd60d4f317aadc490eba206
Certificate serial: 0198D660C1798207DFF7952D9C813CDBD6AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQRxYHUyqMev1g1PMXqtxJDrogY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/dfa6a1-1e4c-49ff-a480-274232d69505/1/dQRxYHUyqMev1g1PMXqtxJDrogY.mft
Manifest number: 1646
Signing time: Sat 23 Aug 2025 10:02:01 +0000
Manifest this update: Sat 23 Aug 2025 10:02:01 +0000
Manifest next update: Sun 24 Aug 2025 10:02:01 +0000
Files and hashes: 1: dQRxYHUyqMev1g1PMXqtxJDrogY.crl (hash: dis9wxIdbZUlQNrl6WnGpaNTDPPdPLT/3QewAFkf0IQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/dfa6a1-1e4c-49ff-a480-274232d69505/1/dQRxYHUyqMev1g1PMXqtxJDrogY.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/dfa6a1-1e4c-49ff-a480-274232d69505/1/dQRxYHUyqMev1g1PMXqtxJDrogY.mft
rsync://rpki.ripe.net/repository/DEFAULT/dQRxYHUyqMev1g1PMXqtxJDrogY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:c1:79:82:07:df:f7:95:2d:9c:81:3c:db:d6:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=750471607532a8c7afd60d4f317aadc490eba206
Validity
Not Before: Aug 23 10:02:01 2025 GMT
Not After : Aug 24 10:02:01 2025 GMT
Subject: CN=1c9ae5ac7375b594bda9891c08108ee4dcb75981
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d7:75:c0:58:c7:31:a0:6d:4e:0e:de:ee:cc:
76:f1:f2:e6:18:9e:a5:06:fa:4b:d3:ba:ea:e9:3a:
26:c4:3c:0d:dc:cc:b2:ad:ef:1c:46:24:5a:08:13:
81:3c:23:90:e6:85:aa:9c:67:d2:67:1f:ec:42:1c:
f7:21:08:14:4f:c4:2a:16:a5:bc:e7:40:56:0e:17:
c4:e0:ef:6e:84:81:ce:e3:77:02:f8:69:c0:30:d2:
69:9d:da:4e:54:9d:06:f0:d2:7f:83:6e:d6:65:32:
61:c8:e1:49:f9:f6:f9:fd:a9:ce:0f:d2:1b:6e:ef:
cf:f0:e7:50:f2:57:86:7a:59:90:2c:8d:4c:59:23:
a3:a8:81:5b:e9:a1:b8:8a:89:6b:60:50:1c:de:53:
70:0c:e8:c1:63:69:1a:99:14:10:ef:a2:57:e9:69:
3d:a6:32:f9:5f:3f:09:37:fa:0d:16:6b:66:e2:07:
0d:39:52:54:19:1d:bf:42:c3:80:4c:93:f1:0c:0c:
0d:3d:bf:a7:87:c1:50:9e:1c:31:38:70:13:7e:43:
6a:7e:88:28:16:2b:0d:da:37:ed:99:fe:b8:0c:9e:
5a:bc:6d:46:75:68:d1:44:f2:10:3d:e2:6a:4d:72:
4a:43:16:6a:46:b9:84:be:9d:be:c6:45:1a:fc:26:
01:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:9A:E5:AC:73:75:B5:94:BD:A9:89:1C:08:10:8E:E4:DC:B7:59:81
X509v3 Authority Key Identifier:
keyid:75:04:71:60:75:32:A8:C7:AF:D6:0D:4F:31:7A:AD:C4:90:EB:A2:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQRxYHUyqMev1g1PMXqtxJDrogY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/dfa6a1-1e4c-49ff-a480-274232d69505/1/dQRxYHUyqMev1g1PMXqtxJDrogY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/dfa6a1-1e4c-49ff-a480-274232d69505/1/dQRxYHUyqMev1g1PMXqtxJDrogY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:88:36:79:1c:3a:52:a5:c5:a9:05:88:7c:18:97:6b:fc:dd:
88:3b:6f:cc:d6:66:bb:b6:db:6c:06:58:f4:36:7d:fc:63:63:
3e:9c:61:16:fa:e7:ff:7c:ad:45:9b:24:a8:54:65:12:12:35:
66:27:aa:5d:be:98:fc:45:af:c3:f4:13:4b:1c:a8:a6:53:d3:
97:8c:cc:c6:4a:c1:ae:3b:04:11:9e:1e:01:66:f8:51:14:ab:
2b:2e:3d:07:0f:05:72:99:78:8c:ee:ac:63:17:87:fe:dd:10:
c6:8f:66:ac:b4:79:52:0c:a0:e5:d6:f3:a5:bf:1d:29:54:95:
d3:0b:f4:3a:ea:11:c9:33:ef:42:9f:e4:21:6c:cd:6a:f4:32:
8c:93:46:59:cf:45:76:4f:11:fe:11:01:fa:34:94:25:8b:4a:
f2:2b:4b:9c:04:66:b1:8f:f8:3e:5b:a2:8c:e7:17:94:ee:62:
92:63:83:85:88:11:6e:d8:9f:5c:f4:45:3a:7e:cd:4c:0c:ff:
f3:bd:cd:ff:8a:3d:12:e0:9f:b2:10:fc:7e:45:a4:f8:e9:4e:
89:10:00:39:76:bb:00:db:0c:56:12:33:da:a9:bc:03:8f:2f:
26:22:86:f2:2a:fa:ac:19:4d:5e:86:ed:d1:20:09:f9:d7:66:
a9:f9:0d:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:01:07 2025 by rpki-client