
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/53be2f-e997-470d-93bf-41b5863ca8db/1/DhI9xSvlTkcrv-N18u1B5JqHg-c.mft
File: DhI9xSvlTkcrv-N18u1B5JqHg-c.mft (raw, json)
Hash identifier: 3rVgFOdeHyNSU+EJEmRUyj0DVrrv5JtODTPLCHaMrBA=
Subject key identifier: CE:6E:06:90:A6:65:5E:18:79:7E:9B:73:8A:06:21:7E:E0:74:10:0A
Authority key identifier: 0E:12:3D:C5:2B:E5:4E:47:2B:BF:E3:75:F2:ED:41:E4:9A:87:83:E7
Certificate issuer: /CN=0e123dc52be54e472bbfe375f2ed41e49a8783e7
Certificate serial: 0198D583E241408B689CC45C8447160F3D71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DhI9xSvlTkcrv-N18u1B5JqHg-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/53be2f-e997-470d-93bf-41b5863ca8db/1/DhI9xSvlTkcrv-N18u1B5JqHg-c.mft
Manifest number: 0678
Signing time: Sat 23 Aug 2025 06:00:46 +0000
Manifest this update: Sat 23 Aug 2025 06:00:46 +0000
Manifest next update: Sun 24 Aug 2025 06:00:46 +0000
Files and hashes: 1: DhI9xSvlTkcrv-N18u1B5JqHg-c.crl (hash: EuW2bjuEzbjIieJHMNNblH/rwDDzwNdVx75pW8XWHxY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/53be2f-e997-470d-93bf-41b5863ca8db/1/DhI9xSvlTkcrv-N18u1B5JqHg-c.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/53be2f-e997-470d-93bf-41b5863ca8db/1/DhI9xSvlTkcrv-N18u1B5JqHg-c.mft
rsync://rpki.ripe.net/repository/DEFAULT/DhI9xSvlTkcrv-N18u1B5JqHg-c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:e2:41:40:8b:68:9c:c4:5c:84:47:16:0f:3d:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e123dc52be54e472bbfe375f2ed41e49a8783e7
Validity
Not Before: Aug 23 06:00:46 2025 GMT
Not After : Aug 24 06:00:46 2025 GMT
Subject: CN=ce6e0690a6655e18797e9b738a06217ee074100a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:54:3e:4a:7e:08:3f:e5:b3:84:e7:a0:6d:3a:
f2:cb:3b:7e:82:9e:4f:83:25:08:45:be:33:cf:a6:
66:d4:68:f4:69:fd:67:ff:b7:84:4b:ad:94:e7:99:
40:7e:c4:aa:57:6e:5b:2c:59:0b:c6:97:1f:2f:d7:
8f:f5:92:c3:3c:00:24:ab:bd:7c:29:2b:9d:b5:53:
08:e9:52:7c:c6:6b:4e:8a:2e:6d:c4:24:dc:6b:c2:
1e:9a:5a:5b:e9:7d:a9:08:c2:f0:69:85:a4:67:20:
c8:63:23:7a:ed:8c:6a:5b:21:6b:42:56:29:0c:5a:
83:99:0e:bb:51:da:1a:c5:49:e7:a1:b6:62:de:b9:
1b:21:d5:2f:82:a6:1a:59:d2:78:10:ec:ea:b3:bf:
bb:36:7f:f5:3d:2d:77:dc:55:1c:d0:cf:7b:28:81:
df:3e:69:36:24:37:42:db:f1:d0:79:fe:d9:29:aa:
4a:55:85:a2:96:44:4d:fe:0d:22:14:48:a0:db:81:
8e:11:97:1f:6b:ec:2a:c5:9b:b1:7f:f4:56:54:a6:
46:cd:1a:fd:e4:cb:e7:80:3f:8f:15:d7:c2:95:f8:
e9:43:09:a3:78:93:2c:56:d9:0b:fd:99:3b:a1:39:
51:2d:5c:ad:33:c8:22:98:bb:5e:1c:0f:9a:e9:a5:
04:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:6E:06:90:A6:65:5E:18:79:7E:9B:73:8A:06:21:7E:E0:74:10:0A
X509v3 Authority Key Identifier:
keyid:0E:12:3D:C5:2B:E5:4E:47:2B:BF:E3:75:F2:ED:41:E4:9A:87:83:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DhI9xSvlTkcrv-N18u1B5JqHg-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/53be2f-e997-470d-93bf-41b5863ca8db/1/DhI9xSvlTkcrv-N18u1B5JqHg-c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/53be2f-e997-470d-93bf-41b5863ca8db/1/DhI9xSvlTkcrv-N18u1B5JqHg-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:9d:79:a0:c7:4f:7e:43:4a:06:a1:24:d5:c2:3b:ce:37:3c:
f5:81:3a:db:0e:5c:ac:84:d9:0a:0c:52:2b:27:05:3c:17:fe:
a4:e1:8a:47:ea:a6:ff:bc:d9:38:e2:fa:58:97:ad:af:67:f9:
20:52:80:bd:a3:ea:26:cb:47:f0:f7:6c:10:b4:69:d0:d8:2f:
d3:2c:34:06:ca:9a:18:05:85:f0:20:3f:12:e2:7b:0c:98:60:
11:d7:16:b5:77:e5:52:11:e8:e1:5b:3c:02:ef:99:63:69:6e:
61:54:9c:0c:be:90:3f:ad:38:c9:ae:a0:23:77:0f:33:79:22:
75:84:8e:93:c3:a0:e4:6f:0b:90:8b:f3:f2:46:bd:12:4e:59:
a5:50:a8:07:b8:f9:71:49:e2:99:57:e0:2d:3a:1a:01:41:6c:
6f:36:84:cb:e1:49:e6:14:75:c6:34:ad:a0:78:b8:d0:20:8b:
45:21:dd:ec:c4:aa:e8:a6:d4:91:d2:c4:c8:bf:9f:d1:62:11:
c3:bf:2e:d4:46:79:bc:55:3d:fa:09:73:70:58:4b:37:04:04:
90:12:e2:30:15:2d:c5:1b:3b:ac:ea:31:6f:c9:35:59:12:da:
40:46:a2:be:9c:dd:00:ec:90:98:1b:5c:d2:4b:e5:3e:ab:99:
d8:c9:bf:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:01:30 2025 by rpki-client