Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/ab82a4-5a72-45a7-96fd-9480b1633f9c/1/do5xE0z2ctauj2b8RNW-5iTNAqM.mft
File: do5xE0z2ctauj2b8RNW-5iTNAqM.mft (raw, json)
Hash identifier: gUJ6KC6tqCYE65sO14qtnXfrU96eHRltegSWIEqX0tA=
Subject key identifier: 42:3F:5E:52:4B:40:EF:75:50:AF:CB:12:73:A5:DC:38:3C:97:A8:A8
Authority key identifier: 76:8E:71:13:4C:F6:72:D6:AE:8F:66:FC:44:D5:BE:E6:24:CD:02:A3
Certificate issuer: /CN=768e71134cf672d6ae8f66fc44d5bee624cd02a3
Certificate serial: 0198D54E5CA87517BF996B7A8DE95362221F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/do5xE0z2ctauj2b8RNW-5iTNAqM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/ab82a4-5a72-45a7-96fd-9480b1633f9c/1/do5xE0z2ctauj2b8RNW-5iTNAqM.mft
Manifest number: 069D
Signing time: Sat 23 Aug 2025 05:02:19 +0000
Manifest this update: Sat 23 Aug 2025 05:02:19 +0000
Manifest next update: Sun 24 Aug 2025 05:02:19 +0000
Files and hashes: 1: do5xE0z2ctauj2b8RNW-5iTNAqM.crl (hash: Ovsg9GeM9X2oLKg/NWXjvZEC5WvMPIgP9KqJG9Q46MQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/ab82a4-5a72-45a7-96fd-9480b1633f9c/1/do5xE0z2ctauj2b8RNW-5iTNAqM.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/ab82a4-5a72-45a7-96fd-9480b1633f9c/1/do5xE0z2ctauj2b8RNW-5iTNAqM.mft
rsync://rpki.ripe.net/repository/DEFAULT/do5xE0z2ctauj2b8RNW-5iTNAqM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:5c:a8:75:17:bf:99:6b:7a:8d:e9:53:62:22:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=768e71134cf672d6ae8f66fc44d5bee624cd02a3
Validity
Not Before: Aug 23 05:02:19 2025 GMT
Not After : Aug 24 05:02:19 2025 GMT
Subject: CN=423f5e524b40ef7550afcb1273a5dc383c97a8a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:3d:ba:5e:48:05:65:2b:95:4a:24:63:1d:5a:
b7:34:8e:93:0d:08:b5:c7:77:b6:aa:88:34:d3:2e:
68:56:41:40:74:e9:82:03:fb:25:c4:55:d9:cd:ca:
02:a9:3b:23:d4:80:e5:9d:af:32:49:11:16:50:80:
68:53:c5:c1:9b:16:07:f0:69:5c:6e:3b:26:62:0e:
fe:5d:63:4b:9d:30:d7:da:e8:63:ac:a3:1d:4d:32:
7c:14:26:79:28:6a:94:b4:31:37:3e:90:6b:1d:99:
2e:90:f0:44:c8:5b:02:67:43:29:39:ea:3a:b3:3e:
bf:20:bc:f5:de:80:07:cb:0e:13:ca:46:cd:73:63:
91:88:ca:d1:40:f8:52:19:17:82:94:cb:c2:e9:4a:
79:f4:55:9f:26:bc:13:45:8f:7f:56:84:6b:c1:24:
c6:7b:1c:42:99:cf:78:f4:ec:82:fc:2b:d8:df:2b:
22:6b:37:31:bb:ab:f0:34:31:b8:ac:aa:17:4f:0a:
48:63:49:ae:5a:5e:66:a5:87:44:65:2c:24:f9:e6:
90:5b:2a:6f:08:91:d1:bc:a5:22:24:65:8e:72:9c:
47:70:8d:e6:84:30:bc:f4:db:a1:ce:cd:0a:46:1b:
74:33:e9:87:dd:79:ce:bb:48:ea:26:70:6e:b0:3c:
57:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:3F:5E:52:4B:40:EF:75:50:AF:CB:12:73:A5:DC:38:3C:97:A8:A8
X509v3 Authority Key Identifier:
keyid:76:8E:71:13:4C:F6:72:D6:AE:8F:66:FC:44:D5:BE:E6:24:CD:02:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/do5xE0z2ctauj2b8RNW-5iTNAqM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/ab82a4-5a72-45a7-96fd-9480b1633f9c/1/do5xE0z2ctauj2b8RNW-5iTNAqM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/ab82a4-5a72-45a7-96fd-9480b1633f9c/1/do5xE0z2ctauj2b8RNW-5iTNAqM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:ba:3c:ba:99:a0:ee:4d:52:e0:c6:61:14:d6:aa:4c:a7:9f:
66:f4:b1:46:a2:2e:79:2d:26:59:40:97:a4:af:9a:1a:11:cf:
33:d1:99:5f:04:94:9e:c3:8c:43:eb:75:02:83:7f:6c:16:51:
30:fb:11:96:be:0f:bb:c3:c6:cb:fe:39:0c:5d:47:e9:f9:90:
db:ce:90:1b:ad:58:2f:ce:b1:35:d2:36:82:fe:44:a7:27:51:
df:4a:fa:df:19:1f:0d:52:e1:a6:66:26:1e:6a:ff:03:96:48:
45:fc:29:15:d4:72:02:a1:e3:39:92:61:b4:b1:19:03:0e:b8:
5e:51:a4:d1:3c:2c:11:2d:cb:bb:68:c3:bc:dd:28:73:62:d0:
e4:06:21:d2:c1:49:90:59:cc:3f:4a:0c:b3:81:14:03:04:4a:
34:50:73:09:f4:23:49:a7:30:dc:87:d5:6b:fd:eb:ab:10:ac:
bd:f1:eb:f3:e1:bf:15:d3:8b:e8:26:52:43:20:fe:61:41:ba:
6a:f3:ad:95:1a:a2:29:a6:88:5b:da:70:64:be:c2:de:93:dc:
53:1c:0b:b8:1c:92:5c:f6:c2:e6:4c:8a:92:47:c1:fd:1e:62:
41:51:19:ac:3a:3b:ce:9d:f2:28:b5:28:29:48:7d:d4:ea:9f:
8a:bf:3d:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:39:41 2025 by rpki-client