Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/a9b91b-684e-4d78-aae9-c447b4193210/1/Dr8L3NkBYisW_9QUS1iIcHMixTQ.mft
File: Dr8L3NkBYisW_9QUS1iIcHMixTQ.mft (raw, json)
Hash identifier: bsZPmsB+3zgSc4R/K1i2UgP6Y+AjBm8aZuy56q2fHII=
Subject key identifier: 88:6A:F1:CD:5F:21:4A:74:0E:79:8B:F6:4A:44:FF:76:04:F7:FE:E7
Authority key identifier: 0E:BF:0B:DC:D9:01:62:2B:16:FF:D4:14:4B:58:88:70:73:22:C5:34
Certificate issuer: /CN=0ebf0bdcd901622b16ffd4144b5888707322c534
Certificate serial: 0198D54E123EF82F6ED71FD32865615B0E59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dr8L3NkBYisW_9QUS1iIcHMixTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/a9b91b-684e-4d78-aae9-c447b4193210/1/Dr8L3NkBYisW_9QUS1iIcHMixTQ.mft
Manifest number: 163C
Signing time: Sat 23 Aug 2025 05:02:00 +0000
Manifest this update: Sat 23 Aug 2025 05:02:00 +0000
Manifest next update: Sun 24 Aug 2025 05:02:00 +0000
Files and hashes: 1: Dr8L3NkBYisW_9QUS1iIcHMixTQ.crl (hash: YoenHlrvSx15EAFayGxR8czN9tjmZWNEQsqLBPGvAxQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/a9b91b-684e-4d78-aae9-c447b4193210/1/Dr8L3NkBYisW_9QUS1iIcHMixTQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/a9b91b-684e-4d78-aae9-c447b4193210/1/Dr8L3NkBYisW_9QUS1iIcHMixTQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dr8L3NkBYisW_9QUS1iIcHMixTQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:12:3e:f8:2f:6e:d7:1f:d3:28:65:61:5b:0e:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ebf0bdcd901622b16ffd4144b5888707322c534
Validity
Not Before: Aug 23 05:02:00 2025 GMT
Not After : Aug 24 05:02:00 2025 GMT
Subject: CN=886af1cd5f214a740e798bf64a44ff7604f7fee7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:35:48:6e:e7:98:cf:4a:4c:c6:14:7a:68:98:
9e:cf:57:42:0e:a6:db:e3:fa:94:15:11:28:28:90:
0d:c8:b9:a1:b4:42:8c:b3:da:9d:66:17:35:75:cd:
b0:3c:9a:31:3b:43:61:4d:27:4d:f4:6f:16:15:76:
fa:40:a2:69:69:ed:aa:d6:a8:0d:76:43:cb:c1:b7:
91:fc:63:ce:67:4f:da:eb:c8:5e:90:73:0b:74:63:
77:d6:b3:3b:fc:fe:4e:80:08:de:cb:e6:6e:cb:3c:
df:cc:2e:09:10:60:1a:e6:84:65:98:7b:e4:96:7c:
83:2f:ab:2a:6b:85:51:1f:a2:fc:ac:32:6f:73:6b:
d6:89:30:8f:71:4e:55:60:bc:5a:a9:f2:6b:bf:40:
3d:9c:89:30:db:a7:6a:b5:5d:54:26:48:3d:8e:72:
55:39:2e:11:70:f8:c3:78:41:05:ca:79:ba:cd:62:
b8:57:88:63:2c:03:d4:29:c7:4c:04:08:2c:d5:aa:
b1:b2:00:a8:7a:b0:cb:5d:3e:de:f3:19:26:ff:e6:
73:78:c3:49:8c:8b:50:a4:91:8a:09:7a:8d:a7:23:
ab:21:b4:30:e1:b9:73:11:5a:4d:8a:d4:a0:64:ba:
cd:88:cc:a7:6e:a8:b0:4d:59:17:53:7a:ba:9e:58:
cf:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:6A:F1:CD:5F:21:4A:74:0E:79:8B:F6:4A:44:FF:76:04:F7:FE:E7
X509v3 Authority Key Identifier:
keyid:0E:BF:0B:DC:D9:01:62:2B:16:FF:D4:14:4B:58:88:70:73:22:C5:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dr8L3NkBYisW_9QUS1iIcHMixTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/a9b91b-684e-4d78-aae9-c447b4193210/1/Dr8L3NkBYisW_9QUS1iIcHMixTQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/a9b91b-684e-4d78-aae9-c447b4193210/1/Dr8L3NkBYisW_9QUS1iIcHMixTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:c6:59:ac:2c:45:44:f7:b5:d7:e8:fa:67:de:ef:f0:ed:c2:
13:ab:80:74:49:eb:9c:0b:b7:4c:51:f0:a6:6b:68:7d:b5:d8:
8b:80:b0:42:52:81:f8:24:88:3d:78:5f:e4:c6:49:91:9a:10:
87:7b:4c:2a:2b:21:4c:5a:9b:e6:b5:06:29:62:c9:33:8e:7f:
01:ca:dd:31:19:52:6e:bc:18:f0:16:9f:e5:79:2f:5e:99:9d:
df:9b:52:dc:0f:59:8e:38:b4:cb:00:76:7e:74:fa:8e:6e:c9:
f1:74:56:30:16:9f:55:67:57:3d:af:b7:85:42:76:5a:8f:51:
d3:56:65:88:8f:c5:39:20:6f:3a:f5:d1:c4:e9:59:3a:37:cd:
67:e8:56:13:7c:29:a3:fd:bf:c7:93:6a:e3:f0:d2:3d:4a:6a:
5f:55:32:4a:ff:3f:30:3c:98:64:d8:9c:e4:5f:4d:58:7a:da:
67:d5:98:2d:f1:24:d3:d6:75:bc:f8:e4:eb:f8:34:5d:8e:b4:
3d:d4:7e:77:7f:ae:dd:d0:c3:32:9c:df:ff:63:c8:8a:19:45:
3e:a7:08:5f:0d:ae:81:ea:52:4b:2b:96:b2:8a:da:b2:53:2d:
83:f1:ae:4b:5d:a1:26:f7:68:6a:4a:15:af:8c:39:75:22:7c:
95:f5:c1:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:25:25 2025 by rpki-client