Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/cf3c6e-4836-4415-91d4-f8bac4fb8f8a/1/DDvIzqseeTohA5zQseVHLHJkH2g.mft
File: DDvIzqseeTohA5zQseVHLHJkH2g.mft (raw, json)
Hash identifier: yfBKTJHbl41H0uCJACvP2JU7j0e6DKGuFjW9U1TesPw=
Subject key identifier: B1:BA:D2:C5:69:D8:B0:3E:C5:0F:F5:AB:15:21:6F:CD:73:21:7B:C7
Authority key identifier: 0C:3B:C8:CE:AB:1E:79:3A:21:03:9C:D0:B1:E5:47:2C:72:64:1F:68
Certificate issuer: /CN=0c3bc8ceab1e793a21039cd0b1e5472c72641f68
Certificate serial: 0198D54DD6E99F21399B3BB7EC63FB20B93A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DDvIzqseeTohA5zQseVHLHJkH2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/cf3c6e-4836-4415-91d4-f8bac4fb8f8a/1/DDvIzqseeTohA5zQseVHLHJkH2g.mft
Manifest number: 1647
Signing time: Sat 23 Aug 2025 05:01:44 +0000
Manifest this update: Sat 23 Aug 2025 05:01:44 +0000
Manifest next update: Sun 24 Aug 2025 05:01:44 +0000
Files and hashes: 1: DDvIzqseeTohA5zQseVHLHJkH2g.crl (hash: nzS6iY9CXL5QWBRXADz8uAD1V8N3WSWvoJbRkmvxIvM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/cf3c6e-4836-4415-91d4-f8bac4fb8f8a/1/DDvIzqseeTohA5zQseVHLHJkH2g.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/cf3c6e-4836-4415-91d4-f8bac4fb8f8a/1/DDvIzqseeTohA5zQseVHLHJkH2g.mft
rsync://rpki.ripe.net/repository/DEFAULT/DDvIzqseeTohA5zQseVHLHJkH2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4d:d6:e9:9f:21:39:9b:3b:b7:ec:63:fb:20:b9:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c3bc8ceab1e793a21039cd0b1e5472c72641f68
Validity
Not Before: Aug 23 05:01:44 2025 GMT
Not After : Aug 24 05:01:44 2025 GMT
Subject: CN=b1bad2c569d8b03ec50ff5ab15216fcd73217bc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:fa:d3:f1:1b:a7:37:24:9c:84:55:e6:1f:b2:
5c:b5:f3:7e:42:15:d6:0e:c8:de:b0:8e:a0:0d:14:
30:a5:28:15:8f:12:0b:f0:79:fc:ec:35:b9:81:6a:
1f:69:9f:8d:9a:92:9d:eb:9c:f0:ea:f6:41:d2:29:
96:16:d6:08:cf:48:d7:10:7a:a7:c1:01:fe:a3:e5:
52:19:eb:49:eb:20:b5:d8:bd:66:31:39:c0:0a:24:
aa:f5:c1:b6:58:fc:cd:87:f6:c9:e8:b2:3d:03:d2:
a0:88:83:68:a3:1a:72:ff:db:d2:b8:2d:dd:9a:45:
ec:9e:5d:0e:fd:86:3d:01:bd:94:8a:74:ec:ac:51:
8f:d0:ab:e4:a1:7c:b6:05:5c:09:8c:81:b3:7c:fa:
9b:3a:71:04:d2:d4:c9:0f:74:f5:f0:a1:ff:c8:4b:
09:d5:e4:5b:17:f1:3e:ab:35:b5:5c:e6:2f:dc:25:
85:b9:e9:34:18:93:15:1e:59:4e:6d:b2:3a:a2:50:
ce:3c:aa:c2:74:2f:81:dd:05:4d:c2:fd:25:71:a6:
3e:df:9d:f5:da:f4:63:d7:f5:57:23:e6:fe:65:c9:
2f:45:11:19:5e:6e:22:9f:34:9f:14:98:c6:df:0f:
83:32:b5:62:93:9c:10:d9:62:aa:47:1b:38:63:80:
a9:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:BA:D2:C5:69:D8:B0:3E:C5:0F:F5:AB:15:21:6F:CD:73:21:7B:C7
X509v3 Authority Key Identifier:
keyid:0C:3B:C8:CE:AB:1E:79:3A:21:03:9C:D0:B1:E5:47:2C:72:64:1F:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DDvIzqseeTohA5zQseVHLHJkH2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/cf3c6e-4836-4415-91d4-f8bac4fb8f8a/1/DDvIzqseeTohA5zQseVHLHJkH2g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/cf3c6e-4836-4415-91d4-f8bac4fb8f8a/1/DDvIzqseeTohA5zQseVHLHJkH2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:6a:a9:6c:41:13:b1:46:86:5a:8a:16:61:bf:56:c3:b0:39:
f7:de:1d:ee:cd:5e:b1:15:c4:e8:7b:dd:9f:d9:2e:9c:ca:0f:
4a:b4:25:e0:fe:23:e6:be:57:4a:28:8d:66:ec:2d:6b:fd:df:
ec:24:c6:4b:8d:88:c9:b0:44:ef:35:9d:73:c8:1f:a3:fb:d7:
ed:4d:ef:7e:fe:7e:7c:f1:5c:72:25:66:8d:3e:5e:95:a2:c6:
96:d4:45:7d:bb:ac:bc:fd:0b:b9:b7:57:f6:2a:8f:7b:58:b7:
a4:c4:b2:26:14:12:bc:0f:ec:5d:8c:6e:18:ef:f4:cf:d0:81:
9d:09:ac:b7:b1:35:4a:38:d6:63:c2:c0:cf:57:09:83:d9:f4:
f7:ac:76:eb:d2:37:21:2a:d7:ac:a3:28:1d:13:07:46:e7:9a:
91:5d:59:4d:54:dc:d0:99:4d:cf:a5:08:39:cd:2e:fd:35:8f:
d9:4b:5e:b5:9a:96:7a:f2:20:0b:d1:9e:b9:a1:a1:0b:c7:1a:
e8:3c:9c:46:03:f8:b3:4b:f6:64:d8:01:fb:0d:70:a5:0b:41:
68:dd:b7:d5:c8:4b:50:6d:cc:5f:01:06:a4:0c:eb:a6:0e:24:
5b:d5:49:a9:04:48:1c:81:97:ef:d1:c3:b7:60:d1:65:22:92:
ae:9a:c0:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:31:16 2025 by rpki-client