Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/8c918e-3aaf-4aa6-8c4d-24ed40c9f389/1/DwxSlP25wrH3QxZPyWDAB-a_5gE.mft
File: DwxSlP25wrH3QxZPyWDAB-a_5gE.mft (raw, json)
Hash identifier: I+uAygsuO0fvJFI0clE76Pd7bLCU7HuoVX7xnOnE9HQ=
Subject key identifier: E5:3D:66:42:A9:7C:EC:8C:A7:82:D0:81:6D:C2:35:71:7F:A5:89:9F
Authority key identifier: 0F:0C:52:94:FD:B9:C2:B1:F7:43:16:4F:C9:60:C0:07:E6:BF:E6:01
Certificate issuer: /CN=0f0c5294fdb9c2b1f743164fc960c007e6bfe601
Certificate serial: 0198D660748E8C1E70DDFB6EAF83FBD4062D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DwxSlP25wrH3QxZPyWDAB-a_5gE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/8c918e-3aaf-4aa6-8c4d-24ed40c9f389/1/DwxSlP25wrH3QxZPyWDAB-a_5gE.mft
Manifest number: 1647
Signing time: Sat 23 Aug 2025 10:01:42 +0000
Manifest this update: Sat 23 Aug 2025 10:01:42 +0000
Manifest next update: Sun 24 Aug 2025 10:01:42 +0000
Files and hashes: 1: DwxSlP25wrH3QxZPyWDAB-a_5gE.crl (hash: Ki/qajzahR3LZsCnjA3PD5HM1GPCM3m73vZ1FqyKWTU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/8c918e-3aaf-4aa6-8c4d-24ed40c9f389/1/DwxSlP25wrH3QxZPyWDAB-a_5gE.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/8c918e-3aaf-4aa6-8c4d-24ed40c9f389/1/DwxSlP25wrH3QxZPyWDAB-a_5gE.mft
rsync://rpki.ripe.net/repository/DEFAULT/DwxSlP25wrH3QxZPyWDAB-a_5gE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:74:8e:8c:1e:70:dd:fb:6e:af:83:fb:d4:06:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f0c5294fdb9c2b1f743164fc960c007e6bfe601
Validity
Not Before: Aug 23 10:01:42 2025 GMT
Not After : Aug 24 10:01:42 2025 GMT
Subject: CN=e53d6642a97cec8ca782d0816dc235717fa5899f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:73:9e:51:cf:9d:56:9f:08:51:65:c8:b9:3e:
19:83:85:a5:fe:3c:63:00:e9:69:20:34:3e:5b:0d:
b1:8f:51:2f:83:27:61:d1:8a:1a:f5:60:61:87:12:
ba:a5:62:dd:8a:f7:1c:db:72:de:96:3b:a6:4f:17:
f4:7a:de:f0:90:69:21:5a:55:38:1f:6c:ef:ec:ff:
1a:bc:5c:c5:94:1b:6a:01:02:96:4f:6f:19:ee:31:
44:b3:f0:2c:e6:99:d8:48:89:97:ea:f9:d5:1e:a9:
14:1f:31:ed:38:14:8f:56:ce:c7:3c:b7:34:b4:2c:
fe:16:17:70:f0:e6:ce:28:8d:ea:f0:8c:bd:0c:0c:
ff:f7:29:c7:03:e8:e2:b3:1a:b2:e9:dd:13:1d:17:
e9:1e:ec:b7:2e:30:14:0f:89:41:93:80:a2:74:63:
79:9b:2a:90:cc:98:2a:25:1c:f5:c6:3e:ea:9e:5d:
61:19:9a:11:49:4f:d6:da:07:ac:e0:05:0a:21:eb:
1d:f8:76:68:bf:37:91:84:e5:e4:9b:95:0b:aa:89:
a0:4d:3c:81:82:30:b2:14:69:f7:19:f1:3d:a8:cc:
ff:79:56:4c:6b:33:1c:81:1d:1a:57:a4:c4:c6:7b:
c4:96:4a:5c:a2:d4:ef:54:d5:bd:79:07:fe:40:a4:
fb:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:3D:66:42:A9:7C:EC:8C:A7:82:D0:81:6D:C2:35:71:7F:A5:89:9F
X509v3 Authority Key Identifier:
keyid:0F:0C:52:94:FD:B9:C2:B1:F7:43:16:4F:C9:60:C0:07:E6:BF:E6:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DwxSlP25wrH3QxZPyWDAB-a_5gE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8c918e-3aaf-4aa6-8c4d-24ed40c9f389/1/DwxSlP25wrH3QxZPyWDAB-a_5gE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8c918e-3aaf-4aa6-8c4d-24ed40c9f389/1/DwxSlP25wrH3QxZPyWDAB-a_5gE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:1c:02:40:b5:73:9f:67:f4:cb:05:03:6c:2c:aa:de:5c:28:
a2:87:99:e5:25:d5:21:89:4d:4b:8c:14:6a:e7:18:2a:7c:a7:
6a:77:86:a1:29:fb:f0:31:d3:22:ef:a9:02:8d:e5:c9:5e:4e:
04:ed:2e:39:7f:d3:5f:1c:be:59:83:6a:30:82:10:a8:f3:21:
17:3d:b6:55:86:17:58:4a:68:3b:43:71:12:c6:17:33:f1:e5:
9f:8f:29:65:89:2a:c4:ad:b9:03:f3:48:a0:89:bb:14:10:2b:
d1:7b:ff:a0:4c:54:69:e9:7e:40:c3:da:7a:ed:3c:6d:12:c2:
21:0a:85:1e:8d:e6:25:af:50:69:68:ae:a3:bb:8a:ed:e9:52:
30:b3:3b:ce:6a:f1:bb:e3:c0:dc:d9:8e:db:89:00:ca:50:ae:
49:cb:14:5a:60:4b:61:70:dd:1e:94:c5:f8:43:da:e0:5c:b2:
22:9c:cd:39:bb:c4:f9:ab:7e:60:5b:a7:68:ee:60:16:8c:53:
df:de:ef:49:8c:f1:11:d6:55:b9:83:80:e8:a0:82:1e:71:65:
44:5a:14:df:ed:4b:fe:30:ef:d6:09:9b:d5:5e:21:5b:29:ff:
47:b1:64:91:8d:9d:a8:f5:af:67:9f:90:45:47:08:6f:22:fc:
cb:ef:d1:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:35:24 2025 by rpki-client