Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/101dba-64eb-4267-b075-c02f775fbf3f/1/dXJV3ckKTQ-C-yZ0RpPtfJhtios.mft
File: dXJV3ckKTQ-C-yZ0RpPtfJhtios.mft (raw, json)
Hash identifier: o5vhWhuMiHEUMrQBL2ccBRafzEOdcLPjAq1T67Dsngg=
Subject key identifier: 9F:60:5B:49:C8:41:03:19:A2:0E:DC:5D:CD:80:3A:07:C4:5B:57:54
Authority key identifier: 75:72:55:DD:C9:0A:4D:0F:82:FB:26:74:46:93:ED:7C:98:6D:8A:8B
Certificate issuer: /CN=757255ddc90a4d0f82fb26744693ed7c986d8a8b
Certificate serial: 0198D5BC1EAA7AA623B901874D2DFBD3E4DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dXJV3ckKTQ-C-yZ0RpPtfJhtios.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/101dba-64eb-4267-b075-c02f775fbf3f/1/dXJV3ckKTQ-C-yZ0RpPtfJhtios.mft
Manifest number: 1645
Signing time: Sat 23 Aug 2025 07:02:12 +0000
Manifest this update: Sat 23 Aug 2025 07:02:12 +0000
Manifest next update: Sun 24 Aug 2025 07:02:12 +0000
Files and hashes: 1: dXJV3ckKTQ-C-yZ0RpPtfJhtios.crl (hash: UZBepCfpWiR1FqVTA601hjcRvlLH0Cpn1yBOGQitLAw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/101dba-64eb-4267-b075-c02f775fbf3f/1/dXJV3ckKTQ-C-yZ0RpPtfJhtios.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/101dba-64eb-4267-b075-c02f775fbf3f/1/dXJV3ckKTQ-C-yZ0RpPtfJhtios.mft
rsync://rpki.ripe.net/repository/DEFAULT/dXJV3ckKTQ-C-yZ0RpPtfJhtios.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:1e:aa:7a:a6:23:b9:01:87:4d:2d:fb:d3:e4:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=757255ddc90a4d0f82fb26744693ed7c986d8a8b
Validity
Not Before: Aug 23 07:02:12 2025 GMT
Not After : Aug 24 07:02:12 2025 GMT
Subject: CN=9f605b49c8410319a20edc5dcd803a07c45b5754
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:a4:87:07:a1:ad:e9:5c:02:58:67:36:89:c7:
c3:b6:9e:71:3f:4c:eb:af:22:5f:54:61:7f:b5:99:
4b:c1:2a:c4:e0:97:78:bc:14:b2:b0:f6:b0:d3:c5:
34:54:2a:8b:51:94:62:6e:8c:71:50:79:a7:84:0c:
bc:12:73:7a:ee:c4:50:b1:b6:70:c8:1d:43:b4:73:
4f:8e:30:67:ca:a7:13:5b:47:2e:7d:ce:2d:e2:eb:
57:9b:bf:24:21:96:38:46:35:7f:11:68:a1:dc:1d:
b2:8c:b0:9e:c2:6b:f3:c3:66:6a:60:05:2e:62:9f:
b4:8f:c7:8f:cd:0b:e4:25:8a:8e:3d:8d:58:2c:45:
ac:ed:d0:7e:9a:5d:6a:f7:af:df:b9:66:b8:07:66:
99:9f:60:25:17:19:ca:07:af:07:39:8e:d3:d0:bc:
b2:8f:73:f1:06:5c:be:33:72:3d:39:a2:ed:e5:ae:
03:2b:91:09:48:32:38:ac:fe:a8:df:75:b3:57:88:
87:33:52:2c:2c:f3:4e:7f:99:15:e6:a9:ce:af:65:
be:16:3a:ad:99:ea:87:af:1e:85:8b:69:ae:73:a6:
b5:9d:83:1e:06:c6:10:83:24:d9:ae:58:f7:21:63:
70:72:65:2e:01:20:20:06:4b:fa:8f:b9:ba:78:5c:
e1:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:60:5B:49:C8:41:03:19:A2:0E:DC:5D:CD:80:3A:07:C4:5B:57:54
X509v3 Authority Key Identifier:
keyid:75:72:55:DD:C9:0A:4D:0F:82:FB:26:74:46:93:ED:7C:98:6D:8A:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dXJV3ckKTQ-C-yZ0RpPtfJhtios.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/101dba-64eb-4267-b075-c02f775fbf3f/1/dXJV3ckKTQ-C-yZ0RpPtfJhtios.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/101dba-64eb-4267-b075-c02f775fbf3f/1/dXJV3ckKTQ-C-yZ0RpPtfJhtios.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:e1:23:82:94:df:62:f4:b8:05:e8:d3:75:0f:62:d7:d2:69:
ef:2f:f7:c5:12:f7:0a:ad:d1:14:40:fa:35:03:01:63:6b:0f:
f4:a2:f2:b4:6e:dd:7f:95:8a:0b:ed:95:c3:a3:17:eb:24:bf:
2e:27:ed:c2:7b:2a:ef:e6:7f:f8:4d:3d:53:9a:97:66:bb:71:
82:6f:9c:3c:90:26:58:e0:34:1d:60:3e:ed:a1:46:c9:53:1b:
06:f4:d9:b2:01:ed:50:4e:da:7c:27:cb:21:4d:58:65:cd:1f:
8a:ec:f8:84:3c:76:af:49:70:d2:b1:e3:d6:fb:43:32:60:3f:
1b:05:70:54:00:f0:fb:29:b0:77:95:f0:dd:e3:4c:18:0a:e7:
c9:73:ab:3b:b6:10:94:6b:1e:f6:67:ca:17:d6:b7:a3:d3:11:
8d:06:31:58:26:12:af:f1:f1:19:71:fd:5d:18:63:7e:d6:d8:
7c:3e:e9:f6:eb:20:69:81:26:34:bb:5b:13:ce:9a:f3:3d:7f:
38:e0:8d:1b:9a:a0:67:00:79:5e:72:e3:49:61:5d:0e:90:8e:
5f:51:24:4e:ab:8a:0b:2e:55:fe:12:36:ea:43:0e:84:5f:e1:
04:7c:b0:87:54:07:4c:1a:07:2b:84:20:70:64:ac:23:c3:de:
dd:e6:03:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:42:50 2025 by rpki-client