Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/0b9773-f9d8-4d87-8772-7008bc97c7b1/1/dpx0RfVnkSzoKKX3h-yUSgjb_eM.mft
File: dpx0RfVnkSzoKKX3h-yUSgjb_eM.mft (raw, json)
Hash identifier: /9L6ltBVmhsJ+T+9MBwzzuIoS8z21akq/k2I+uTf8G8=
Subject key identifier: 06:D4:59:CB:B1:14:41:98:5E:0F:67:8B:8B:CB:32:2E:63:A8:A9:D9
Authority key identifier: 76:9C:74:45:F5:67:91:2C:E8:28:A5:F7:87:EC:94:4A:08:DB:FD:E3
Certificate issuer: /CN=769c7445f567912ce828a5f787ec944a08dbfde3
Certificate serial: 0198D6600B83F8FEA5D0789A6298524C57BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dpx0RfVnkSzoKKX3h-yUSgjb_eM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/0b9773-f9d8-4d87-8772-7008bc97c7b1/1/dpx0RfVnkSzoKKX3h-yUSgjb_eM.mft
Manifest number: 122A
Signing time: Sat 23 Aug 2025 10:01:15 +0000
Manifest this update: Sat 23 Aug 2025 10:01:15 +0000
Manifest next update: Sun 24 Aug 2025 10:01:15 +0000
Files and hashes: 1: dpx0RfVnkSzoKKX3h-yUSgjb_eM.crl (hash: xlKoWYbNF8grfMaYHwF4XZxiZDlFVYfGXCqXNmidMwk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/0b9773-f9d8-4d87-8772-7008bc97c7b1/1/dpx0RfVnkSzoKKX3h-yUSgjb_eM.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/0b9773-f9d8-4d87-8772-7008bc97c7b1/1/dpx0RfVnkSzoKKX3h-yUSgjb_eM.mft
rsync://rpki.ripe.net/repository/DEFAULT/dpx0RfVnkSzoKKX3h-yUSgjb_eM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:0b:83:f8:fe:a5:d0:78:9a:62:98:52:4c:57:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=769c7445f567912ce828a5f787ec944a08dbfde3
Validity
Not Before: Aug 23 10:01:15 2025 GMT
Not After : Aug 24 10:01:15 2025 GMT
Subject: CN=06d459cbb11441985e0f678b8bcb322e63a8a9d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:45:6d:07:21:07:11:0d:ca:fc:48:ea:cc:87:
f9:2c:6c:ed:4b:46:b8:ee:75:f6:0e:28:fe:4e:a6:
12:a9:e1:d9:86:35:8d:5c:d3:dc:e5:9a:80:fd:e0:
f1:6d:b8:db:1b:3c:18:9e:88:89:f1:e9:9b:59:c0:
93:1c:53:cf:cd:b1:71:24:19:3b:0a:5e:a6:1d:1b:
13:67:3b:b0:24:d1:bf:d2:17:1b:43:c5:f3:2e:06:
7c:8a:b9:e9:b0:6e:ec:55:31:f5:2b:f1:27:43:f4:
ec:36:a3:e5:9b:28:3d:59:19:c2:f0:59:10:e0:77:
3a:03:47:8b:9a:e6:a7:58:ae:65:0e:71:70:59:b4:
c8:2a:ce:a2:06:48:fb:78:42:16:42:ef:4d:6e:0d:
a6:ab:81:bb:54:b4:3b:ae:9d:de:d2:07:16:30:8e:
79:12:1e:c4:91:12:cb:5f:39:e4:72:f6:d2:f7:92:
7e:22:99:87:f3:a7:ab:6f:ad:15:f7:8a:13:98:4a:
e2:1c:db:e1:e1:e9:a9:23:59:12:83:93:bd:a7:26:
14:e2:2c:9e:fe:8d:2b:c9:84:c1:47:b7:9c:09:0f:
47:8f:15:27:0d:1e:1c:e6:51:d3:ca:c2:2f:eb:fc:
e8:9b:74:f0:e5:f4:6b:18:b1:86:6b:03:0d:e0:f8:
1c:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:D4:59:CB:B1:14:41:98:5E:0F:67:8B:8B:CB:32:2E:63:A8:A9:D9
X509v3 Authority Key Identifier:
keyid:76:9C:74:45:F5:67:91:2C:E8:28:A5:F7:87:EC:94:4A:08:DB:FD:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dpx0RfVnkSzoKKX3h-yUSgjb_eM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/0b9773-f9d8-4d87-8772-7008bc97c7b1/1/dpx0RfVnkSzoKKX3h-yUSgjb_eM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/0b9773-f9d8-4d87-8772-7008bc97c7b1/1/dpx0RfVnkSzoKKX3h-yUSgjb_eM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:ce:16:79:36:f6:cc:27:93:e7:34:04:5e:1c:7a:d1:c9:2f:
45:ff:6f:3f:86:c4:be:ea:3f:b8:c2:b3:fd:db:f9:8e:54:e7:
b5:bb:d6:7a:e2:d1:6e:6a:6c:cb:11:ca:5f:24:9e:a7:50:8a:
7b:31:bd:2f:3a:fc:92:e5:1b:44:fd:fe:20:fe:d9:f7:c7:e2:
9d:f2:36:50:5c:a4:a9:c5:2d:33:a1:96:55:37:08:03:ba:a3:
41:59:54:49:6e:a8:ff:5a:79:bc:03:c4:d8:58:17:12:e8:d9:
fa:21:7e:81:73:3f:df:27:b8:aa:65:ab:d3:fa:7e:47:fb:b5:
f9:3f:d0:f7:f3:b3:d8:e0:01:bf:2e:8d:6e:66:dc:ed:84:b4:
af:b4:fd:95:57:26:4d:66:32:8e:45:b7:bf:ad:73:7e:12:21:
f7:c8:c0:98:68:87:e7:a8:6f:0b:88:e1:99:c5:9b:24:51:29:
d3:91:95:d2:fd:22:8c:90:2f:49:ee:1e:9d:d0:c4:db:b1:9b:
d1:09:72:23:eb:61:6f:e6:bd:0f:a6:36:5a:a4:b0:0a:41:17:
4e:fc:98:9e:db:e1:1c:46:e2:99:c9:a2:ed:04:51:f9:7f:19:
57:68:53:97:bf:bb:c1:9d:27:70:f7:bc:96:c5:90:36:e2:6e:
de:6e:66:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:05:10 2025 by rpki-client