Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/2e805c-bced-4f54-b320-f9de59c37291/1/dpcDbZO0rGcPD_xakM6ral-LwpU.mft
File: dpcDbZO0rGcPD_xakM6ral-LwpU.mft (raw, json)
Hash identifier: 6fz4O4XG1WWk/qpQpWniT+qxu9EB/tQNZgz10TuFFg4=
Subject key identifier: AF:8C:B0:DF:EF:F1:48:FE:9D:97:AB:21:C9:06:33:26:B8:60:5F:AB
Authority key identifier: 76:97:03:6D:93:B4:AC:67:0F:0F:FC:5A:90:CE:AB:6A:5F:8B:C2:95
Certificate issuer: /CN=7697036d93b4ac670f0ffc5a90ceab6a5f8bc295
Certificate serial: 0198D472888B8EE8DABC7B6F5C1C1A3C01CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dpcDbZO0rGcPD_xakM6ral-LwpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/2e805c-bced-4f54-b320-f9de59c37291/1/dpcDbZO0rGcPD_xakM6ral-LwpU.mft
Manifest number: 0E67
Signing time: Sat 23 Aug 2025 01:02:12 +0000
Manifest this update: Sat 23 Aug 2025 01:02:12 +0000
Manifest next update: Sun 24 Aug 2025 01:02:12 +0000
Files and hashes: 1: dpcDbZO0rGcPD_xakM6ral-LwpU.crl (hash: swinIk3RU+0/kswaDTC4olTlmDW4GDwiKK7Syht52Ag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/2e805c-bced-4f54-b320-f9de59c37291/1/dpcDbZO0rGcPD_xakM6ral-LwpU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/2e805c-bced-4f54-b320-f9de59c37291/1/dpcDbZO0rGcPD_xakM6ral-LwpU.mft
rsync://rpki.ripe.net/repository/DEFAULT/dpcDbZO0rGcPD_xakM6ral-LwpU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:88:8b:8e:e8:da:bc:7b:6f:5c:1c:1a:3c:01:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7697036d93b4ac670f0ffc5a90ceab6a5f8bc295
Validity
Not Before: Aug 23 01:02:12 2025 GMT
Not After : Aug 24 01:02:12 2025 GMT
Subject: CN=af8cb0dfeff148fe9d97ab21c9063326b8605fab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:6d:10:59:15:18:71:69:eb:b4:cd:96:97:33:
f7:00:99:f7:b9:a3:ef:75:f1:9f:ed:96:b4:4f:cc:
c2:2d:1c:8e:9c:86:a4:d4:ce:3f:fc:c0:14:82:2b:
18:8d:79:0c:13:57:dc:90:f6:80:75:6b:17:4d:fb:
36:f0:7e:4c:05:1c:1c:07:e8:51:3f:3b:cb:bf:17:
11:ff:86:96:80:1d:45:29:80:7c:8b:14:f4:f9:d3:
40:1e:3b:22:73:2a:84:d6:11:a0:0c:af:13:bd:1e:
53:fe:7d:3c:eb:06:08:d9:76:72:dc:1e:22:6c:92:
70:7b:3c:0e:fb:7e:14:70:d6:41:6c:39:78:83:ae:
b9:4e:a1:28:5f:fd:d4:2f:32:8b:b0:a1:f3:29:46:
6c:41:df:21:bf:38:bb:d2:7b:82:33:68:22:50:44:
ba:32:18:54:16:92:9a:a8:67:c8:f8:96:30:c6:f8:
ee:c9:9e:c6:41:5b:e7:f6:94:d1:0e:9d:52:ca:d6:
d7:b7:bb:e8:55:ef:f6:41:0e:24:82:71:ec:cc:6f:
4f:4c:3e:b1:1d:c4:67:f3:e0:2e:12:3c:c5:e1:37:
11:2b:3b:64:c6:a3:e5:ac:5c:0a:0a:73:4d:e7:fd:
4f:70:a6:08:4b:31:1f:8b:fe:91:74:e7:fe:68:19:
e7:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:8C:B0:DF:EF:F1:48:FE:9D:97:AB:21:C9:06:33:26:B8:60:5F:AB
X509v3 Authority Key Identifier:
keyid:76:97:03:6D:93:B4:AC:67:0F:0F:FC:5A:90:CE:AB:6A:5F:8B:C2:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dpcDbZO0rGcPD_xakM6ral-LwpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2e805c-bced-4f54-b320-f9de59c37291/1/dpcDbZO0rGcPD_xakM6ral-LwpU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2e805c-bced-4f54-b320-f9de59c37291/1/dpcDbZO0rGcPD_xakM6ral-LwpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:23:3d:bb:f5:69:17:6e:25:c4:18:cb:1f:4f:fe:30:41:77:
c3:77:da:bf:6f:d8:26:c2:c1:eb:92:c2:d1:77:8e:5b:ba:a4:
20:7c:19:7c:89:84:f2:63:fe:6d:2c:72:1b:e2:fb:b9:33:52:
93:ed:fb:f8:9b:88:f5:16:b6:82:38:74:cb:03:c6:24:fd:a4:
4d:0a:0f:55:77:65:75:24:f4:e6:40:fe:54:55:56:bb:5d:2d:
39:af:95:96:42:2f:8b:fe:08:38:73:71:a7:55:4d:7a:6b:fa:
e1:eb:88:7e:6e:ac:be:db:2a:cb:92:39:ac:e4:a7:d4:d9:d3:
a1:a5:fa:31:f3:d8:ff:06:72:9f:2b:cd:49:ce:44:39:dc:78:
99:7b:df:4c:86:d1:cd:6b:9e:46:f5:12:0a:aa:48:2b:7a:c3:
3d:b2:c6:ae:b2:62:b3:4f:57:df:5c:0d:21:9f:91:6b:f4:19:
db:9a:af:d5:f3:8b:29:18:85:ee:3c:da:d4:90:b5:ae:77:6b:
0a:de:e8:08:1c:be:17:bf:b0:d3:27:a9:d1:bc:ae:42:ec:ff:
d3:d7:fe:c8:45:f6:71:f2:43:53:1f:24:85:85:71:37:3f:2d:
09:45:49:54:b3:bc:1d:f5:08:d5:15:78:c5:e2:01:39:76:17:
1f:44:11:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:39:49 2025 by rpki-client