Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/26c68c-0482-4b62-b2af-4855366edfef/1/dZI-xUbfNx0J5oxrBgJeoxJhI0o.mft
File: dZI-xUbfNx0J5oxrBgJeoxJhI0o.mft (raw, json)
Hash identifier: xqhmZ+GrpkXtsTqBHNZQa+4dJT8VLM8DwNWZbBdqiWw=
Subject key identifier: 0A:A6:25:7C:FA:96:18:07:4E:E1:2A:29:48:D7:15:61:2A:78:CC:B7
Authority key identifier: 75:92:3E:C5:46:DF:37:1D:09:E6:8C:6B:06:02:5E:A3:12:61:23:4A
Certificate issuer: /CN=75923ec546df371d09e68c6b06025ea31261234a
Certificate serial: 0198D66098B0B73F18AF405AAF2A8737F25E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dZI-xUbfNx0J5oxrBgJeoxJhI0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/26c68c-0482-4b62-b2af-4855366edfef/1/dZI-xUbfNx0J5oxrBgJeoxJhI0o.mft
Manifest number: 1647
Signing time: Sat 23 Aug 2025 10:01:51 +0000
Manifest this update: Sat 23 Aug 2025 10:01:51 +0000
Manifest next update: Sun 24 Aug 2025 10:01:51 +0000
Files and hashes: 1: dZI-xUbfNx0J5oxrBgJeoxJhI0o.crl (hash: WYeav2Uh+7ZdDSeToS84N5Jdho5WlGO8C2nITMJhJKM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/26c68c-0482-4b62-b2af-4855366edfef/1/dZI-xUbfNx0J5oxrBgJeoxJhI0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/26c68c-0482-4b62-b2af-4855366edfef/1/dZI-xUbfNx0J5oxrBgJeoxJhI0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/dZI-xUbfNx0J5oxrBgJeoxJhI0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:98:b0:b7:3f:18:af:40:5a:af:2a:87:37:f2:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75923ec546df371d09e68c6b06025ea31261234a
Validity
Not Before: Aug 23 10:01:51 2025 GMT
Not After : Aug 24 10:01:51 2025 GMT
Subject: CN=0aa6257cfa9618074ee12a2948d715612a78ccb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:bf:81:d6:1d:9f:0c:0e:6c:8a:5a:a6:b4:42:
1e:36:9d:f6:94:91:bf:55:e3:b9:8a:d8:36:0e:61:
94:b7:38:2c:ca:39:92:e8:e1:ef:4d:12:66:04:df:
53:b2:4a:8d:15:39:bf:3a:5c:76:a4:f3:99:10:5d:
40:71:8c:c8:b9:ce:c9:7f:ac:6a:a7:55:44:1c:fb:
68:a8:a6:68:06:66:a0:7d:d0:e6:bb:58:14:ff:8b:
bf:e2:a2:43:06:f4:10:11:1b:4f:5c:16:aa:46:6a:
65:69:ac:53:41:a3:12:fe:8f:59:9d:f4:28:1f:81:
4f:56:ab:9d:8d:43:b7:f9:98:cb:df:23:c7:ad:95:
cf:13:a1:2a:2d:32:81:9a:98:37:23:9a:83:de:12:
fb:d1:5c:b0:67:b5:7c:80:f2:aa:c2:f4:dc:82:93:
38:96:52:02:52:60:09:16:11:1c:1d:55:2c:e5:0b:
69:bc:99:dd:0c:0b:77:46:82:5a:dc:28:97:2e:e8:
1a:85:3b:a1:57:45:da:e5:f5:27:71:19:c3:ae:2d:
62:ea:14:c2:f5:4a:7c:be:1f:be:0f:cd:aa:4f:97:
b7:da:45:b5:75:a3:4b:4c:64:6f:7d:ac:43:a8:ee:
a6:e5:73:03:a3:ae:73:62:35:4d:a1:46:d0:b9:84:
95:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:A6:25:7C:FA:96:18:07:4E:E1:2A:29:48:D7:15:61:2A:78:CC:B7
X509v3 Authority Key Identifier:
keyid:75:92:3E:C5:46:DF:37:1D:09:E6:8C:6B:06:02:5E:A3:12:61:23:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dZI-xUbfNx0J5oxrBgJeoxJhI0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/26c68c-0482-4b62-b2af-4855366edfef/1/dZI-xUbfNx0J5oxrBgJeoxJhI0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/26c68c-0482-4b62-b2af-4855366edfef/1/dZI-xUbfNx0J5oxrBgJeoxJhI0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:e1:23:17:04:e1:4d:fd:57:b6:17:51:28:3b:73:43:9c:3b:
5a:3d:55:5a:82:ee:73:6b:da:74:70:d1:77:c9:f6:4b:a2:dc:
0b:c6:b9:20:52:83:2e:09:fa:e9:c0:97:cb:64:14:ba:5b:9e:
99:4d:6f:2f:ea:22:5e:c7:da:6d:82:bd:79:b9:82:8c:0f:62:
b8:39:34:50:d7:28:0c:1d:2a:7c:cc:fd:73:d6:df:a4:22:e6:
14:3b:e6:a1:6f:d3:f8:7e:03:5d:91:51:13:8e:90:22:4f:16:
63:ef:2f:06:82:6b:a8:01:af:e5:ac:bb:bf:1c:8f:86:8f:4e:
26:1f:11:91:78:a0:e0:86:94:1d:71:cb:28:72:12:90:55:5a:
6f:a6:bc:54:95:fb:4f:fd:4a:67:bb:d1:52:4c:54:07:fd:3f:
b9:70:15:e5:e2:a8:50:82:9c:ce:05:b7:1d:42:ba:79:1e:b2:
c6:5a:ec:29:03:58:e7:af:92:74:32:e0:2b:c2:59:01:f2:1c:
b8:0f:ea:e7:70:44:27:0a:69:79:e7:70:7b:c2:d4:c1:d8:1e:
f8:5d:15:ea:79:cd:8a:51:f1:ff:61:72:0f:74:51:7e:f3:20:
ab:46:aa:dd:d6:3a:6f:e5:a4:b5:9a:37:ff:86:36:3b:bd:8f:
2e:c1:a7:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:33:41 2025 by rpki-client