Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/bd1b8f-d065-4cc7-9a1f-45ab3f520f00/1/DZxWoYyYei0aLnBEt-MbMhv3rBY.mft
File: DZxWoYyYei0aLnBEt-MbMhv3rBY.mft (raw, json)
Hash identifier: 8kOY5TPWKNdfPbxPA5XaiVc3SEsVq6v2y6f9vvC4yhw=
Subject key identifier: 07:A5:09:5D:A0:16:98:E0:D3:CB:A4:C6:9C:27:28:5F:6F:45:56:AB
Authority key identifier: 0D:9C:56:A1:8C:98:7A:2D:1A:2E:70:44:B7:E3:1B:32:1B:F7:AC:16
Certificate issuer: /CN=0d9c56a18c987a2d1a2e7044b7e31b321bf7ac16
Certificate serial: 0198D6604FD4D3F44476B991639D999433A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DZxWoYyYei0aLnBEt-MbMhv3rBY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/bd1b8f-d065-4cc7-9a1f-45ab3f520f00/1/DZxWoYyYei0aLnBEt-MbMhv3rBY.mft
Manifest number: 07DB
Signing time: Sat 23 Aug 2025 10:01:32 +0000
Manifest this update: Sat 23 Aug 2025 10:01:32 +0000
Manifest next update: Sun 24 Aug 2025 10:01:32 +0000
Files and hashes: 1: DZxWoYyYei0aLnBEt-MbMhv3rBY.crl (hash: qsbsj7EzUBKszrOwIw4eSJsp7IKqnXyhq7vFofIPYeM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/bd1b8f-d065-4cc7-9a1f-45ab3f520f00/1/DZxWoYyYei0aLnBEt-MbMhv3rBY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/bd1b8f-d065-4cc7-9a1f-45ab3f520f00/1/DZxWoYyYei0aLnBEt-MbMhv3rBY.mft
rsync://rpki.ripe.net/repository/DEFAULT/DZxWoYyYei0aLnBEt-MbMhv3rBY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:4f:d4:d3:f4:44:76:b9:91:63:9d:99:94:33:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d9c56a18c987a2d1a2e7044b7e31b321bf7ac16
Validity
Not Before: Aug 23 10:01:32 2025 GMT
Not After : Aug 24 10:01:32 2025 GMT
Subject: CN=07a5095da01698e0d3cba4c69c27285f6f4556ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:1e:57:a3:60:11:01:a2:78:73:e4:75:3b:f6:
88:8b:29:ac:1a:5b:05:5b:6c:df:a6:8d:3a:18:4d:
5c:e6:c0:5a:9e:e1:b9:66:ed:24:c8:db:be:62:d0:
77:69:43:f1:52:d2:eb:74:dd:08:89:79:ba:a4:76:
ee:df:98:90:33:5f:c3:cf:4b:02:d7:e3:1d:8a:40:
5c:bd:ba:5e:f5:9d:c9:26:f3:55:a6:26:69:3d:75:
7f:a7:f7:3f:86:1a:66:e8:dc:f6:43:a5:8e:37:25:
b5:0e:5d:b6:1d:bb:ff:7f:e2:38:f2:12:e1:64:31:
80:42:b3:4a:fa:89:46:db:9d:22:c7:02:df:88:38:
e0:ff:74:f2:85:1a:92:00:ae:a1:36:8c:d3:14:a1:
52:37:3c:8d:1a:29:ac:7b:40:12:f1:bb:1e:55:97:
81:96:1c:dc:71:4d:0d:e9:a1:5c:f0:ae:29:b6:de:
8f:8f:75:f0:3e:1b:7a:6e:cd:b4:66:7c:97:e9:c1:
b4:f3:d7:31:d9:33:68:f8:70:ad:e8:2c:af:26:15:
44:b4:50:97:cd:92:0e:07:b4:28:2e:ce:ed:27:a6:
bb:e0:bc:84:a9:5d:b0:20:a9:29:9f:63:56:55:64:
b5:35:34:89:86:fc:a2:ac:e9:00:89:59:5f:49:69:
83:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:A5:09:5D:A0:16:98:E0:D3:CB:A4:C6:9C:27:28:5F:6F:45:56:AB
X509v3 Authority Key Identifier:
keyid:0D:9C:56:A1:8C:98:7A:2D:1A:2E:70:44:B7:E3:1B:32:1B:F7:AC:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DZxWoYyYei0aLnBEt-MbMhv3rBY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/bd1b8f-d065-4cc7-9a1f-45ab3f520f00/1/DZxWoYyYei0aLnBEt-MbMhv3rBY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/bd1b8f-d065-4cc7-9a1f-45ab3f520f00/1/DZxWoYyYei0aLnBEt-MbMhv3rBY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:ab:9d:40:73:84:45:db:40:eb:b8:4e:0d:3c:ff:39:c8:02:
b4:b9:71:59:e5:24:22:af:9e:04:a3:eb:0c:b4:d6:c9:50:33:
06:c3:bc:3e:1a:2e:d5:da:a3:1a:74:e1:15:b6:0f:1e:e9:e3:
21:50:40:d4:79:75:cd:15:36:26:4a:50:42:93:13:f1:89:fe:
0f:3a:b0:0e:1a:70:9c:19:b6:09:9c:77:2a:82:1d:0c:88:4f:
61:fe:6c:cc:44:f5:80:98:fd:14:c0:c2:ce:d6:e6:3c:a0:bd:
e4:e4:42:30:5c:ca:7f:79:5c:b2:e8:12:7a:96:2b:52:c2:34:
0b:81:83:9d:8f:f5:63:76:3b:7c:92:88:98:ab:8a:c3:f7:a7:
91:3e:c9:b5:21:0c:0e:b5:e5:33:ab:f8:b1:ce:17:bd:3e:2f:
bb:1a:e3:29:4c:6e:cc:1e:b0:54:df:f1:69:b0:9a:c7:0f:46:
bb:b7:3b:e8:72:87:3b:f0:45:dd:9d:07:8e:d2:59:ee:9c:5d:
aa:14:76:bd:d2:71:28:62:7e:df:74:eb:02:62:83:b2:c7:61:
d9:dd:b9:9b:58:0c:37:f9:09:42:dd:36:63:8e:99:6d:6b:9f:
f4:57:fd:dc:f5:cf:39:d9:6c:9e:4f:9a:8e:ca:53:19:09:12:
29:d6:6e:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:05:16 2025 by rpki-client