Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/2cd638-c75f-4d24-bbad-cfd8869df591/1/fDhGWJo7OVs3WHc9o9nxMzTHIDg.mft
File: fDhGWJo7OVs3WHc9o9nxMzTHIDg.mft (raw, json)
Hash identifier: AlbpROoHVP2s49sVDJclVncC2Af6qr7X2UO91A4xgRk=
Subject key identifier: 29:A8:56:38:22:DE:6B:D3:A0:B5:86:9B:D3:37:CC:2F:59:6A:A7:9F
Authority key identifier: 7C:38:46:58:9A:3B:39:5B:37:58:77:3D:A3:D9:F1:33:34:C7:20:38
Certificate issuer: /CN=7c3846589a3b395b3758773da3d9f13334c72038
Certificate serial: 0198D73B96F526DB25BA22CCC2E48A0557AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fDhGWJo7OVs3WHc9o9nxMzTHIDg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/2cd638-c75f-4d24-bbad-cfd8869df591/1/fDhGWJo7OVs3WHc9o9nxMzTHIDg.mft
Manifest number: 1647
Signing time: Sat 23 Aug 2025 14:01:03 +0000
Manifest this update: Sat 23 Aug 2025 14:01:03 +0000
Manifest next update: Sun 24 Aug 2025 14:01:03 +0000
Files and hashes: 1: fDhGWJo7OVs3WHc9o9nxMzTHIDg.crl (hash: FN1qrl1xfbiaaCl7ulDWkavttdVgt85S6j+yvYNZQU0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/2cd638-c75f-4d24-bbad-cfd8869df591/1/fDhGWJo7OVs3WHc9o9nxMzTHIDg.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/2cd638-c75f-4d24-bbad-cfd8869df591/1/fDhGWJo7OVs3WHc9o9nxMzTHIDg.mft
rsync://rpki.ripe.net/repository/DEFAULT/fDhGWJo7OVs3WHc9o9nxMzTHIDg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3b:96:f5:26:db:25:ba:22:cc:c2:e4:8a:05:57:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3846589a3b395b3758773da3d9f13334c72038
Validity
Not Before: Aug 23 14:01:03 2025 GMT
Not After : Aug 24 14:01:03 2025 GMT
Subject: CN=29a8563822de6bd3a0b5869bd337cc2f596aa79f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d8:37:75:12:bc:0a:64:e9:9f:cf:72:a1:10:
b7:f0:55:ff:ec:7f:d4:02:af:91:c0:e0:a3:da:d9:
40:52:bb:1a:d9:db:74:83:35:95:b9:6a:7f:d1:6c:
b6:ec:a3:ae:bc:5a:f2:f8:33:9e:26:17:9d:44:94:
6f:18:f2:87:c2:a1:41:22:63:bb:7e:ab:d8:17:f1:
3c:8c:c4:de:b2:dd:b0:f6:c6:57:1f:64:25:70:6e:
38:50:9a:44:19:dc:b5:f7:01:d1:fb:a6:5f:36:a4:
c7:c1:2c:25:67:42:5b:4b:96:2b:78:56:5c:61:06:
99:0e:ed:a0:8d:0c:86:1c:70:4a:b6:c5:26:3d:93:
22:33:fa:a9:1d:5a:9b:04:04:9c:62:63:a7:b3:58:
ec:8c:b8:b1:5b:c4:a6:ab:c2:7b:f1:bc:8a:31:72:
b0:f5:c2:58:88:be:d3:21:7e:63:f5:92:50:ec:08:
81:7c:03:23:13:33:79:e3:44:37:93:f0:d6:ba:a2:
6d:17:95:52:81:09:91:cc:69:8d:2a:df:c3:4c:56:
0f:60:67:ab:a5:aa:e6:b7:11:4d:e0:16:6c:1c:32:
bc:66:90:ca:78:ea:42:45:dc:26:24:da:31:3f:dc:
23:68:95:71:99:8f:21:47:f3:29:a7:25:4a:26:4c:
07:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:A8:56:38:22:DE:6B:D3:A0:B5:86:9B:D3:37:CC:2F:59:6A:A7:9F
X509v3 Authority Key Identifier:
keyid:7C:38:46:58:9A:3B:39:5B:37:58:77:3D:A3:D9:F1:33:34:C7:20:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fDhGWJo7OVs3WHc9o9nxMzTHIDg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/2cd638-c75f-4d24-bbad-cfd8869df591/1/fDhGWJo7OVs3WHc9o9nxMzTHIDg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/2cd638-c75f-4d24-bbad-cfd8869df591/1/fDhGWJo7OVs3WHc9o9nxMzTHIDg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:85:34:de:8e:e7:e3:7a:c8:eb:fa:f6:24:33:94:a6:4f:7b:
e8:f9:d5:4e:12:31:2a:79:08:71:61:69:08:fe:d6:4f:32:1b:
20:1c:e0:d0:2b:ab:7b:24:3e:3b:b4:b8:30:a0:c0:fb:88:67:
cb:18:22:59:6b:a4:25:d9:03:54:8f:e1:df:cd:ad:27:a8:3c:
02:a5:da:17:6e:57:32:33:d6:f6:ed:a5:5e:d3:26:b8:9c:08:
3b:a8:97:c0:ca:d9:e0:0d:41:f8:9c:0f:b5:c7:cf:89:cd:64:
ba:01:8c:31:cc:8c:78:4f:e5:12:3c:38:16:fb:b9:de:98:aa:
48:e5:dc:62:6d:ed:3f:30:eb:74:54:38:b7:b2:46:9a:b1:c0:
99:c8:36:f5:9a:1e:27:26:46:57:f7:be:72:f2:f2:83:3d:e3:
f4:32:9c:07:09:d7:22:a2:b6:d1:a3:8f:73:3b:8d:33:cc:36:
31:93:b1:db:41:71:18:10:1f:b7:d8:14:91:9a:ed:8a:06:98:
d1:98:b1:cf:27:df:eb:d2:81:c6:a1:48:3e:53:07:27:ac:02:
3e:8a:a3:38:10:d1:63:61:b6:29:f1:6b:09:0e:bf:32:14:59:
7a:1c:d9:e6:bb:20:78:36:72:38:c6:48:fc:74:7e:07:7e:80:
12:22:9a:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:01:13 2025 by rpki-client