Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8adf19-0869-46fb-92b3-f0d7b2774d3e/1/DPSuqBZureCsfGkRvcnmnHB1TBQ.mft
File: DPSuqBZureCsfGkRvcnmnHB1TBQ.mft (raw, json)
Hash identifier: 3WxbcnbYWPoYeRx/b4JInakR+r9CIicSz9I5W0lT/M8=
Subject key identifier: 17:45:3D:2B:2D:1F:CC:9D:73:23:4E:CB:20:08:D2:74:64:AF:79:D1
Authority key identifier: 0C:F4:AE:A8:16:6E:AD:E0:AC:7C:69:11:BD:C9:E6:9C:70:75:4C:14
Certificate issuer: /CN=0cf4aea8166eade0ac7c6911bdc9e69c70754c14
Certificate serial: 0198D7E10E86CB50F13D11DD50EBC0116455
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DPSuqBZureCsfGkRvcnmnHB1TBQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8adf19-0869-46fb-92b3-f0d7b2774d3e/1/DPSuqBZureCsfGkRvcnmnHB1TBQ.mft
Manifest number: FF
Signing time: Sat 23 Aug 2025 17:01:47 +0000
Manifest this update: Sat 23 Aug 2025 17:01:47 +0000
Manifest next update: Sun 24 Aug 2025 17:01:47 +0000
Files and hashes: 1: DPSuqBZureCsfGkRvcnmnHB1TBQ.crl (hash: C1pGGbUe5YKqlhQ0Yb51ZtxkC71QSRwpr+yXNXxMb+M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/8adf19-0869-46fb-92b3-f0d7b2774d3e/1/DPSuqBZureCsfGkRvcnmnHB1TBQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/8adf19-0869-46fb-92b3-f0d7b2774d3e/1/DPSuqBZureCsfGkRvcnmnHB1TBQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/DPSuqBZureCsfGkRvcnmnHB1TBQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:e1:0e:86:cb:50:f1:3d:11:dd:50:eb:c0:11:64:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cf4aea8166eade0ac7c6911bdc9e69c70754c14
Validity
Not Before: Aug 23 17:01:47 2025 GMT
Not After : Aug 24 17:01:47 2025 GMT
Subject: CN=17453d2b2d1fcc9d73234ecb2008d27464af79d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c1:79:d3:55:48:6b:0e:40:47:a5:96:e4:6a:
3c:f3:db:7d:d1:45:7d:ec:cf:00:18:4f:80:aa:ac:
2d:a3:d3:e3:6a:83:8a:0c:c1:54:1e:53:9c:8a:dd:
a0:f4:93:1b:f3:c6:b1:6a:0c:f0:00:87:56:b4:eb:
37:2a:04:66:24:ce:05:7b:d1:df:4c:c8:18:d7:e2:
13:d3:48:70:b0:b5:7d:5f:db:c9:21:e6:71:fa:14:
f9:a7:71:d4:50:77:b4:3e:cb:c9:c9:16:e2:18:9e:
85:af:33:23:a0:82:2d:8d:88:ac:fb:55:7a:6b:64:
79:fd:5b:2e:e0:f6:30:33:ba:9c:cf:bd:8f:e7:39:
2d:84:4c:92:4f:ac:d2:e3:09:6a:1b:11:be:c8:1b:
e5:37:a7:78:14:b8:a3:50:23:d2:59:6c:68:c9:e5:
28:f2:45:27:15:c4:59:32:d8:b5:db:50:b6:c4:7b:
5b:f1:b0:9e:d7:5d:7e:c3:4a:ab:ae:6a:66:b2:1d:
f1:11:2c:57:ef:8b:1b:03:78:0c:bb:cb:16:94:5a:
dd:e3:a2:e6:f0:c5:a2:5f:61:8b:aa:d6:e8:3c:42:
ae:0a:66:04:d0:46:91:25:ff:8c:a4:08:b4:49:f1:
67:37:55:60:2f:3d:58:3e:aa:9e:54:76:cf:bd:46:
13:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:45:3D:2B:2D:1F:CC:9D:73:23:4E:CB:20:08:D2:74:64:AF:79:D1
X509v3 Authority Key Identifier:
keyid:0C:F4:AE:A8:16:6E:AD:E0:AC:7C:69:11:BD:C9:E6:9C:70:75:4C:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DPSuqBZureCsfGkRvcnmnHB1TBQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8adf19-0869-46fb-92b3-f0d7b2774d3e/1/DPSuqBZureCsfGkRvcnmnHB1TBQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8adf19-0869-46fb-92b3-f0d7b2774d3e/1/DPSuqBZureCsfGkRvcnmnHB1TBQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:33:ed:bf:bd:ed:45:80:69:12:7a:05:91:11:9c:2d:93:de:
83:0b:b6:2f:7c:5c:b8:be:ed:ea:98:19:02:eb:b8:bc:05:52:
35:f0:c0:28:93:9d:20:dc:55:c0:07:11:65:8f:25:82:bd:c8:
a3:00:c1:ee:dc:c3:1e:ec:fc:12:05:eb:39:0c:5e:45:26:c1:
84:bf:80:a5:e1:76:d7:ca:cc:43:20:76:a9:3b:a9:51:f7:3f:
ac:e8:64:17:06:50:72:07:8b:1f:7f:72:eb:90:6f:55:8b:b5:
d2:5e:1e:d5:d8:34:63:72:45:44:42:95:b2:58:dd:a3:21:19:
ce:2e:cd:e7:bd:88:f0:fc:7a:28:d5:14:d1:84:58:24:5e:80:
55:d3:87:c5:af:3d:46:fe:5d:ac:ef:e9:15:fd:83:a8:fd:cd:
36:71:69:13:82:b1:6c:eb:d7:a8:b5:38:c2:43:a4:bf:46:ba:
43:68:69:84:b8:1f:55:70:b3:98:14:a9:51:2b:57:ef:37:72:
2b:28:bf:ff:e1:cf:05:7c:00:45:97:eb:ef:5d:9b:8e:07:5e:
e0:ac:51:6f:4e:49:02:d5:e5:80:b6:07:6e:fd:cb:fc:1b:ac:
d2:9a:58:8f:29:b2:3e:c9:57:91:ea:58:10:7c:7a:0a:a1:2d:
66:e4:26:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:29:48 2025 by rpki-client