Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/d531a8-02ae-4b0b-8f44-5287698aff3c/1/dLCDZQKVGJ8AmqdMEsvGHuI_p1M.mft
File: dLCDZQKVGJ8AmqdMEsvGHuI_p1M.mft (raw, json)
Hash identifier: Be1/TKedyaI40kxX+u0Pd0E4xZVe7m4Lohi9sP7IFCo=
Subject key identifier: DE:65:68:95:C8:B1:DC:05:18:8F:3D:DD:A9:F7:3B:E1:AA:E9:3D:A1
Authority key identifier: 74:B0:83:65:02:95:18:9F:00:9A:A7:4C:12:CB:C6:1E:E2:3F:A7:53
Certificate issuer: /CN=74b083650295189f009aa74c12cbc61ee23fa753
Certificate serial: 0198D66069873D069BE68CA8312C3DA685F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dLCDZQKVGJ8AmqdMEsvGHuI_p1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/d531a8-02ae-4b0b-8f44-5287698aff3c/1/dLCDZQKVGJ8AmqdMEsvGHuI_p1M.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 10:01:39 +0000
Manifest this update: Sat 23 Aug 2025 10:01:39 +0000
Manifest next update: Sun 24 Aug 2025 10:01:39 +0000
Files and hashes: 1: dLCDZQKVGJ8AmqdMEsvGHuI_p1M.crl (hash: hw4FX0vGdKXf02HccXROdS6n1AuFMTuc/1mtgX3UNas=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/d531a8-02ae-4b0b-8f44-5287698aff3c/1/dLCDZQKVGJ8AmqdMEsvGHuI_p1M.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/d531a8-02ae-4b0b-8f44-5287698aff3c/1/dLCDZQKVGJ8AmqdMEsvGHuI_p1M.mft
rsync://rpki.ripe.net/repository/DEFAULT/dLCDZQKVGJ8AmqdMEsvGHuI_p1M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:69:87:3d:06:9b:e6:8c:a8:31:2c:3d:a6:85:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74b083650295189f009aa74c12cbc61ee23fa753
Validity
Not Before: Aug 23 10:01:39 2025 GMT
Not After : Aug 24 10:01:39 2025 GMT
Subject: CN=de656895c8b1dc05188f3ddda9f73be1aae93da1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c3:b7:09:b1:f8:22:ac:a3:ba:8d:ac:1b:35:
66:d6:c0:9a:62:52:5d:37:3d:dc:43:e8:c5:4e:4c:
62:73:d8:c7:74:01:90:e2:9d:24:1d:40:5c:3c:b3:
39:7e:e1:83:6e:0b:f5:57:a2:7d:07:9a:98:0c:3a:
66:7a:94:7b:aa:e6:d1:b7:a5:87:22:69:00:da:ad:
c6:3f:28:42:72:d4:d8:02:ef:3c:36:eb:d5:ab:f1:
93:08:3c:d3:43:f1:77:47:a2:12:a2:18:19:f1:8c:
7b:52:b9:ae:1a:21:96:48:da:3b:85:4d:fe:72:d1:
5c:1a:62:a2:30:2b:5c:4a:b7:6c:73:15:a5:18:01:
aa:8f:a5:51:4e:1d:8c:b3:96:af:37:03:af:14:3f:
65:66:b2:79:24:ba:82:cd:ae:ed:37:62:cb:ae:c5:
3c:be:ac:e9:67:85:84:90:6a:01:51:74:13:7a:91:
c3:d5:07:48:65:12:29:ed:ac:79:45:5c:02:f0:19:
c7:e0:b8:aa:cd:9d:96:0a:46:26:64:0b:b9:87:4d:
3a:e0:f9:8e:ad:03:c2:68:eb:79:25:a7:4f:e8:19:
70:fd:dc:f3:65:06:5a:72:e7:b0:32:f2:74:55:d0:
d1:73:07:44:5a:3f:d2:5b:10:d8:53:c6:ee:6c:9a:
6e:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:65:68:95:C8:B1:DC:05:18:8F:3D:DD:A9:F7:3B:E1:AA:E9:3D:A1
X509v3 Authority Key Identifier:
keyid:74:B0:83:65:02:95:18:9F:00:9A:A7:4C:12:CB:C6:1E:E2:3F:A7:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dLCDZQKVGJ8AmqdMEsvGHuI_p1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d531a8-02ae-4b0b-8f44-5287698aff3c/1/dLCDZQKVGJ8AmqdMEsvGHuI_p1M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d531a8-02ae-4b0b-8f44-5287698aff3c/1/dLCDZQKVGJ8AmqdMEsvGHuI_p1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:ec:da:b4:28:98:7b:13:1e:bd:91:1d:25:ed:3e:0d:43:d7:
2d:8e:2e:6e:15:c0:ff:81:e7:4e:35:66:a8:3a:4f:40:c6:8b:
2c:9f:52:4c:c2:3b:cd:f4:bc:06:d3:d2:f6:a2:0c:34:0f:83:
79:ea:6b:96:91:e2:66:04:2a:54:2a:dd:fa:60:3d:69:04:45:
4e:2e:2b:d4:24:82:7b:82:17:d7:a1:12:59:3c:76:4b:d4:ee:
61:0d:1a:c2:3f:90:5d:37:c6:bf:09:20:38:a8:92:20:54:b0:
ea:7a:c4:ea:12:6a:e4:ab:49:52:7c:6f:ae:fd:b8:14:61:0e:
4d:d7:b5:19:7f:ce:84:3e:91:ae:8f:59:f9:a5:c0:3c:14:e4:
51:64:2a:c5:87:a3:7b:38:4e:f4:b4:91:b6:76:2e:f7:2b:ea:
35:f0:88:e4:cb:92:94:29:43:28:4a:00:dd:f2:f1:44:e9:46:
af:81:23:ea:8a:63:80:87:b5:a8:97:e4:ae:20:37:1f:0a:76:
a3:9e:db:39:34:28:3d:31:b7:58:a0:bf:de:d4:0a:a5:4a:b1:
06:4f:a1:68:25:9f:71:b7:f6:4a:a2:3a:39:ab:d1:b7:56:92:
45:46:27:1e:31:74:0f:f0:3c:99:7d:80:66:b5:30:7d:cb:35:
cb:89:be:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:59:51 2025 by rpki-client