Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/66b77e-5a29-47b5-b5a7-007e08b3af8f/1/DmuhOkKdJETI5sfYf-vxnVD-dQo.mft
File: DmuhOkKdJETI5sfYf-vxnVD-dQo.mft (raw, json)
Hash identifier: KoqMdwNcQ8k4e0RY8GCNV+Sc/3Re3vnlOnWKit8k2tI=
Subject key identifier: 7A:8A:B9:A0:86:81:30:7C:B5:22:B9:2A:23:DA:E2:F3:E5:E5:A9:69
Authority key identifier: 0E:6B:A1:3A:42:9D:24:44:C8:E6:C7:D8:7F:EB:F1:9D:50:FE:75:0A
Certificate issuer: /CN=0e6ba13a429d2444c8e6c7d87febf19d50fe750a
Certificate serial: 0198D660F3A1C89BAF913C801B0D0B6ACBF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DmuhOkKdJETI5sfYf-vxnVD-dQo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/66b77e-5a29-47b5-b5a7-007e08b3af8f/1/DmuhOkKdJETI5sfYf-vxnVD-dQo.mft
Manifest number: 1647
Signing time: Sat 23 Aug 2025 10:02:14 +0000
Manifest this update: Sat 23 Aug 2025 10:02:14 +0000
Manifest next update: Sun 24 Aug 2025 10:02:14 +0000
Files and hashes: 1: DmuhOkKdJETI5sfYf-vxnVD-dQo.crl (hash: Crw367f/mv5BYYoM4U9gThFvT6xtsrVw9tYrjLkfFBk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/66b77e-5a29-47b5-b5a7-007e08b3af8f/1/DmuhOkKdJETI5sfYf-vxnVD-dQo.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/66b77e-5a29-47b5-b5a7-007e08b3af8f/1/DmuhOkKdJETI5sfYf-vxnVD-dQo.mft
rsync://rpki.ripe.net/repository/DEFAULT/DmuhOkKdJETI5sfYf-vxnVD-dQo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:02:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:f3:a1:c8:9b:af:91:3c:80:1b:0d:0b:6a:cb:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e6ba13a429d2444c8e6c7d87febf19d50fe750a
Validity
Not Before: Aug 23 10:02:14 2025 GMT
Not After : Aug 24 10:02:14 2025 GMT
Subject: CN=7a8ab9a08681307cb522b92a23dae2f3e5e5a969
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:d0:ee:9c:2f:31:2e:31:dd:1a:85:bc:29:9f:
6e:f2:54:7a:99:dd:86:e7:30:0f:f6:09:fb:85:e4:
d1:cb:dc:24:88:6f:3e:27:75:c9:16:0d:8c:0d:d4:
7a:c2:58:5b:6c:2d:e4:e5:10:89:ec:b1:f8:ba:a6:
29:14:2e:19:9c:08:d2:68:f3:4a:02:17:f5:81:7c:
63:2e:ef:8c:73:8c:ca:9c:17:da:da:29:70:5b:a2:
5f:9e:7f:aa:da:b8:bf:a2:3b:ac:78:5e:1d:b4:4e:
93:76:d2:2e:1d:71:01:c9:7c:06:5e:83:5c:3b:34:
ab:13:8c:03:a4:38:33:1d:27:ed:07:80:e3:1d:d0:
1e:dd:64:ec:c1:eb:90:42:ef:23:72:e6:a7:51:53:
70:94:f2:d9:fa:fd:c9:58:f4:46:04:7f:77:e3:36:
6d:13:55:17:ee:bc:6d:96:4c:e8:09:e0:b2:1d:c8:
73:f5:c7:ed:20:3d:c2:7c:f5:59:c3:f5:1f:2a:61:
22:22:df:d3:ea:a6:59:60:07:2d:7c:bf:b7:f8:19:
3c:ba:a0:f6:20:0f:cf:32:cd:82:c8:d9:4f:8f:d5:
4d:1b:b2:91:bd:dc:75:fa:5f:fa:94:60:0a:e0:62:
2c:dd:36:e3:90:c5:2e:fc:39:71:ae:48:ce:45:90:
01:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:8A:B9:A0:86:81:30:7C:B5:22:B9:2A:23:DA:E2:F3:E5:E5:A9:69
X509v3 Authority Key Identifier:
keyid:0E:6B:A1:3A:42:9D:24:44:C8:E6:C7:D8:7F:EB:F1:9D:50:FE:75:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DmuhOkKdJETI5sfYf-vxnVD-dQo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/66b77e-5a29-47b5-b5a7-007e08b3af8f/1/DmuhOkKdJETI5sfYf-vxnVD-dQo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/66b77e-5a29-47b5-b5a7-007e08b3af8f/1/DmuhOkKdJETI5sfYf-vxnVD-dQo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:5b:cb:7b:fb:e7:af:16:da:65:6f:fc:1d:f1:f7:35:0b:af:
b5:cd:08:db:42:db:4f:c4:13:72:3e:d3:32:6e:31:00:cb:dd:
04:7c:e4:3f:66:42:56:8c:b6:99:55:8a:59:86:37:4c:0a:0b:
1b:12:59:5d:76:ff:6c:c2:9c:ca:e7:08:34:c1:c5:01:7d:fa:
e0:fe:43:8a:c5:f3:26:eb:b2:42:42:d1:70:af:24:3d:a1:2e:
75:f4:83:2c:78:55:cc:82:3f:8f:57:b4:89:6b:19:fa:a3:55:
2b:e3:ef:f1:1d:ac:b0:e4:86:c1:cc:be:80:dc:b9:3c:66:e5:
8d:c3:81:8b:37:da:95:fe:9f:cb:c1:6a:23:e6:ec:b2:7f:04:
e2:12:1f:4e:6a:da:ff:4a:d7:46:91:80:a1:c7:1e:de:38:7c:
c1:32:92:09:5f:0b:b1:5c:41:7a:97:cd:cf:9f:36:72:fd:dd:
21:63:cf:e8:8b:c2:59:95:cf:9a:3e:65:75:f4:54:6b:d9:a9:
e7:da:99:8c:cc:3d:a1:a3:23:5c:73:d7:24:23:4f:d5:df:32:
dd:d3:37:84:4b:a4:3a:50:4c:b1:3e:3e:f0:a4:0d:c5:f4:86:
a1:44:fe:62:3b:68:71:10:16:25:92:0a:1f:d6:88:ae:ca:fb:
2c:63:c2:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:37:29 2025 by rpki-client