Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/89fc51-d475-4eee-a970-930700ca617f/1/dC44IKB42kewo3Ti06ZtYmPB4j8.mft
File: dC44IKB42kewo3Ti06ZtYmPB4j8.mft (raw, json)
Hash identifier: KoTjPZ1u3eF50+quNwk/3kXHJ8VMB95+ZQmH0qCJ90I=
Subject key identifier: 66:6C:98:16:C6:CC:74:1F:B5:29:B6:6D:9F:34:B1:50:B2:08:CE:D6
Authority key identifier: 74:2E:38:20:A0:78:DA:47:B0:A3:74:E2:D3:A6:6D:62:63:C1:E2:3F
Certificate issuer: /CN=742e3820a078da47b0a374e2d3a66d6263c1e23f
Certificate serial: 0198D4728243BEA3D77E0BDECB9214995A7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dC44IKB42kewo3Ti06ZtYmPB4j8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/89fc51-d475-4eee-a970-930700ca617f/1/dC44IKB42kewo3Ti06ZtYmPB4j8.mft
Manifest number: 0F19
Signing time: Sat 23 Aug 2025 01:02:10 +0000
Manifest this update: Sat 23 Aug 2025 01:02:10 +0000
Manifest next update: Sun 24 Aug 2025 01:02:10 +0000
Files and hashes: 1: dC44IKB42kewo3Ti06ZtYmPB4j8.crl (hash: fTWk32hx9cCXYLC6Lur3KTS7eGkxyOWQwGTsRRoDXks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/89fc51-d475-4eee-a970-930700ca617f/1/dC44IKB42kewo3Ti06ZtYmPB4j8.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/89fc51-d475-4eee-a970-930700ca617f/1/dC44IKB42kewo3Ti06ZtYmPB4j8.mft
rsync://rpki.ripe.net/repository/DEFAULT/dC44IKB42kewo3Ti06ZtYmPB4j8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:82:43:be:a3:d7:7e:0b:de:cb:92:14:99:5a:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=742e3820a078da47b0a374e2d3a66d6263c1e23f
Validity
Not Before: Aug 23 01:02:10 2025 GMT
Not After : Aug 24 01:02:10 2025 GMT
Subject: CN=666c9816c6cc741fb529b66d9f34b150b208ced6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:39:fb:a5:b1:9d:e3:55:64:50:99:74:49:e6:
39:72:ba:a9:09:97:74:78:d0:1c:44:d3:07:50:78:
07:d3:08:36:71:d4:79:56:bb:6f:29:ab:93:f3:75:
f7:a8:e8:ca:a8:93:d9:ef:33:d2:1c:72:b3:c1:2b:
8f:ee:ee:a2:65:f6:75:5d:19:66:de:52:c2:02:80:
8e:8f:cb:f6:a5:5b:82:e7:f1:f2:a6:7f:fc:e4:f0:
3f:c8:a8:b0:ae:af:d9:8d:84:30:3f:26:a0:61:ac:
d6:08:f1:36:5a:18:cc:cd:cf:fc:67:8d:72:53:66:
7f:30:07:dd:63:36:29:a7:c7:6a:8f:a6:36:61:0d:
a8:ea:08:c7:05:5e:8b:7d:d9:3b:55:dc:8a:49:e0:
cd:93:1b:28:03:98:17:a8:75:df:3f:15:83:c1:be:
c0:28:6d:18:e2:ab:9e:e9:4d:a4:da:87:e8:36:32:
76:1d:20:da:95:0e:31:c5:17:ea:3e:f0:70:ad:51:
85:b5:be:54:48:cc:b2:db:d9:d1:a7:1e:31:95:b4:
e4:35:00:62:e7:53:1b:ce:92:26:01:8a:ef:8a:0a:
39:a7:08:02:12:b3:15:a2:93:0a:e5:29:08:1a:99:
45:d8:50:6c:a5:c6:72:1e:e2:6a:50:03:01:33:f7:
9d:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:6C:98:16:C6:CC:74:1F:B5:29:B6:6D:9F:34:B1:50:B2:08:CE:D6
X509v3 Authority Key Identifier:
keyid:74:2E:38:20:A0:78:DA:47:B0:A3:74:E2:D3:A6:6D:62:63:C1:E2:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dC44IKB42kewo3Ti06ZtYmPB4j8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/89fc51-d475-4eee-a970-930700ca617f/1/dC44IKB42kewo3Ti06ZtYmPB4j8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/89fc51-d475-4eee-a970-930700ca617f/1/dC44IKB42kewo3Ti06ZtYmPB4j8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:27:70:e2:cc:df:8a:35:7d:eb:a2:d6:dd:77:b0:ee:7c:5e:
a6:15:f4:81:20:c1:eb:1d:1f:d0:b4:a8:47:c0:cc:ce:1f:77:
2b:bd:c6:7a:ca:c0:16:5f:1e:10:8e:c0:3f:c4:04:f4:6a:fa:
91:98:7e:d4:a3:71:b3:4e:87:49:00:3c:04:e6:c6:b3:a3:76:
d4:c7:1e:e3:47:52:8e:ef:c3:2f:9a:60:2b:1f:d9:97:76:f8:
bd:98:ba:b3:84:15:ca:39:52:66:25:ec:ce:e4:e3:2f:46:71:
f6:25:ac:25:f3:74:1f:52:d8:6f:e5:62:08:8a:a3:6c:ed:5f:
84:6e:89:58:b4:0a:80:af:da:69:21:3e:9e:75:48:14:a2:b7:
dc:2c:21:a3:dd:af:0c:c1:13:da:dd:72:27:03:84:41:c2:36:
3e:ed:f6:c4:e2:de:38:a8:1d:97:96:4f:02:c8:1c:06:94:b7:
57:1c:d8:28:41:8b:28:0f:be:a7:4c:59:9c:9d:e0:29:de:02:
57:05:57:e8:dc:0f:77:2b:ad:b6:6a:39:8f:16:af:f5:c8:f9:
b1:d0:2b:4f:3f:6f:a7:ec:e6:5a:c4:48:f1:01:3d:86:1b:17:
2d:c6:70:5f:05:6c:0c:6d:94:4c:ce:f5:e6:cc:d2:db:b4:e2:
00:06:27:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:37:32 2025 by rpki-client