Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/3c0f04-8caf-49d4-aab7-59e611d76574/1/4DkMHDYd8FIkN2EI7_myDcLuAmU.mft
File: 4DkMHDYd8FIkN2EI7_myDcLuAmU.mft (raw, json)
Hash identifier: DQfF88SVRVB17DOtYDNMatKJPOVgUYg8QXPACCF45W4=
Subject key identifier: 1D:A8:E4:7E:46:6D:53:6B:CB:99:71:FB:35:7D:ED:90:0A:79:A9:FC
Authority key identifier: E0:39:0C:1C:36:1D:F0:52:24:37:61:08:EF:F9:B2:0D:C2:EE:02:65
Certificate issuer: /CN=e0390c1c361df05224376108eff9b20dc2ee0265
Certificate serial: 0198D4E0613281D1B57A030B82E3E2423117
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4DkMHDYd8FIkN2EI7_myDcLuAmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/3c0f04-8caf-49d4-aab7-59e611d76574/1/4DkMHDYd8FIkN2EI7_myDcLuAmU.mft
Manifest number: 1646
Signing time: Sat 23 Aug 2025 03:02:11 +0000
Manifest this update: Sat 23 Aug 2025 03:02:11 +0000
Manifest next update: Sun 24 Aug 2025 03:02:11 +0000
Files and hashes: 1: 4DkMHDYd8FIkN2EI7_myDcLuAmU.crl (hash: vQGChnY/JPSUWRJUY+jzYFFAwYpNv/N8c83YwVt5+ZI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/3c0f04-8caf-49d4-aab7-59e611d76574/1/4DkMHDYd8FIkN2EI7_myDcLuAmU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/3c0f04-8caf-49d4-aab7-59e611d76574/1/4DkMHDYd8FIkN2EI7_myDcLuAmU.mft
rsync://rpki.ripe.net/repository/DEFAULT/4DkMHDYd8FIkN2EI7_myDcLuAmU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:61:32:81:d1:b5:7a:03:0b:82:e3:e2:42:31:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0390c1c361df05224376108eff9b20dc2ee0265
Validity
Not Before: Aug 23 03:02:11 2025 GMT
Not After : Aug 24 03:02:11 2025 GMT
Subject: CN=1da8e47e466d536bcb9971fb357ded900a79a9fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:20:0a:63:2a:2c:50:7d:48:8d:71:da:be:03:
8c:e4:6d:f2:4e:8a:75:4c:60:a8:bf:0f:eb:0f:66:
0d:f2:05:60:dc:cc:a2:0c:5d:dd:e0:91:9f:89:41:
52:3e:cc:14:03:1d:a6:58:31:e9:4a:f3:c2:18:83:
74:2e:b3:ff:6d:40:ec:d3:d2:97:fa:30:28:66:1b:
a8:77:31:d2:22:60:00:90:f6:a8:a6:32:01:cd:b2:
c9:bf:4a:8f:0c:e7:e5:ec:dc:8e:3e:34:43:22:a2:
65:f7:db:90:36:91:c5:d2:f7:0f:28:9f:87:68:c2:
b7:46:f7:04:b4:49:8e:59:46:36:2d:b9:bf:48:60:
d9:89:a8:51:7c:b1:35:3b:d2:87:46:f8:6e:f1:8a:
3f:08:21:1a:56:15:63:5d:94:08:7d:fa:0c:8b:9a:
63:3b:3b:51:28:46:7b:4c:83:2c:8f:49:52:56:1e:
ab:c2:0f:41:8f:30:3e:85:46:57:22:ed:12:a3:80:
df:ce:78:a5:34:ff:6a:d3:4e:9a:09:ae:27:62:b9:
10:40:e3:b5:80:32:a3:79:55:a1:b1:c7:fd:d2:ce:
70:68:16:68:b5:a6:ac:e6:c9:09:0b:d9:4e:5c:12:
0a:8a:0b:28:60:06:56:49:80:56:9f:01:46:8c:22:
77:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:A8:E4:7E:46:6D:53:6B:CB:99:71:FB:35:7D:ED:90:0A:79:A9:FC
X509v3 Authority Key Identifier:
keyid:E0:39:0C:1C:36:1D:F0:52:24:37:61:08:EF:F9:B2:0D:C2:EE:02:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4DkMHDYd8FIkN2EI7_myDcLuAmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/3c0f04-8caf-49d4-aab7-59e611d76574/1/4DkMHDYd8FIkN2EI7_myDcLuAmU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/3c0f04-8caf-49d4-aab7-59e611d76574/1/4DkMHDYd8FIkN2EI7_myDcLuAmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:06:2e:ef:66:9c:2f:d4:bd:ec:4d:1e:1c:29:3f:9a:e1:5f:
56:5c:47:d2:07:e6:d6:eb:fd:91:0e:57:df:c8:e8:2c:99:fd:
99:d8:f2:c8:78:20:4c:8d:ad:35:01:14:ed:3a:e9:44:7b:00:
a9:0b:f7:c7:18:7a:e2:ee:d3:f1:26:fc:69:e6:ca:13:99:ad:
0f:44:60:3a:13:a3:90:58:b6:a5:5d:bc:65:c3:b0:3d:79:6d:
90:cf:76:21:26:c6:d3:09:3d:42:38:10:82:ca:54:9e:58:1c:
75:79:be:da:83:f4:a7:5d:98:25:ad:d2:9e:9f:37:34:a8:2c:
b0:80:dc:b6:5c:1d:92:77:71:23:7d:c4:f5:e0:0c:6e:e6:58:
2c:20:a0:ea:c9:a3:a3:9b:de:db:76:a9:65:c8:7e:2b:54:cf:
12:3d:ec:31:53:78:f2:e7:89:2c:bb:5e:39:1f:f3:7b:c2:44:
78:4e:5d:98:5e:c0:6c:17:9d:7d:23:b7:8b:1d:ce:68:6e:f3:
ab:f4:9c:dd:a3:7d:db:50:67:c7:43:e7:a1:f0:ea:b3:9c:26:
64:8d:00:eb:c4:b1:8b:1a:b9:ef:57:fb:e7:55:d3:6c:48:c0:
56:39:0b:0d:51:0e:76:ae:2d:e3:99:06:93:13:f4:49:72:b4:
9d:84:25:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:35:15 2025 by rpki-client