Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/2e03af-83a4-4c9f-911a-d5844b3c5177/1/dC5XHQAG_n9mCwMIzMYaFpnjSRc.mft
File: dC5XHQAG_n9mCwMIzMYaFpnjSRc.mft (raw, json)
Hash identifier: eiVMYKWdeDrtZVYgyqMO3dmUUR+pBn+5Rl6212wHfJA=
Subject key identifier: 73:0F:0C:F4:47:5F:56:7B:65:18:22:33:6F:B0:3F:C3:28:9D:F0:BF
Authority key identifier: 74:2E:57:1D:00:06:FE:7F:66:0B:03:08:CC:C6:1A:16:99:E3:49:17
Certificate issuer: /CN=742e571d0006fe7f660b0308ccc61a1699e34917
Certificate serial: 0198D660C9B514B68152BE07A8EF02107DDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dC5XHQAG_n9mCwMIzMYaFpnjSRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/2e03af-83a4-4c9f-911a-d5844b3c5177/1/dC5XHQAG_n9mCwMIzMYaFpnjSRc.mft
Manifest number: 1647
Signing time: Sat 23 Aug 2025 10:02:04 +0000
Manifest this update: Sat 23 Aug 2025 10:02:04 +0000
Manifest next update: Sun 24 Aug 2025 10:02:04 +0000
Files and hashes: 1: dC5XHQAG_n9mCwMIzMYaFpnjSRc.crl (hash: buIu9MoCSs3fyYOLN26v6FM3MPVvvuNJWepU2fzyheI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/2e03af-83a4-4c9f-911a-d5844b3c5177/1/dC5XHQAG_n9mCwMIzMYaFpnjSRc.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/2e03af-83a4-4c9f-911a-d5844b3c5177/1/dC5XHQAG_n9mCwMIzMYaFpnjSRc.mft
rsync://rpki.ripe.net/repository/DEFAULT/dC5XHQAG_n9mCwMIzMYaFpnjSRc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:02:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:c9:b5:14:b6:81:52:be:07:a8:ef:02:10:7d:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=742e571d0006fe7f660b0308ccc61a1699e34917
Validity
Not Before: Aug 23 10:02:04 2025 GMT
Not After : Aug 24 10:02:04 2025 GMT
Subject: CN=730f0cf4475f567b651822336fb03fc3289df0bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:b0:93:60:ef:4f:c6:1a:3a:b1:35:a5:4b:0c:
df:76:d3:a7:6b:79:a6:b8:4f:8e:72:b0:62:fa:b2:
c0:c2:0c:62:23:bb:bf:0a:ae:01:f3:ed:68:d4:e7:
6b:ce:23:d0:97:22:7b:d8:e8:98:43:b0:a1:5a:79:
a6:1c:8c:7c:3d:be:f9:df:4c:8e:1a:57:af:b2:8f:
a3:5e:40:f6:95:ae:24:aa:08:f6:41:53:07:8a:a8:
c3:9f:ab:9b:26:56:1a:1e:32:46:f6:91:f6:a2:35:
b2:b0:ec:35:38:ce:a5:43:0d:49:ae:74:73:09:03:
e2:a6:a5:90:99:62:ad:7e:f7:8f:bb:3a:bb:de:c6:
42:0b:02:3c:82:b4:37:9d:53:a4:25:af:43:a9:00:
da:a7:e2:ee:f5:0b:6b:1a:aa:aa:62:85:53:dd:e4:
90:33:29:2a:a7:7b:ed:e9:19:2e:c2:3f:3f:25:4c:
ae:3b:c4:6c:85:9e:f3:4e:7c:ea:64:7c:99:92:01:
3d:64:2f:2f:9e:bd:7d:0e:ec:a7:d3:d6:46:1c:c4:
2f:06:84:41:e8:88:b3:e4:6a:35:bc:bf:43:42:3a:
c4:a1:92:d2:5d:67:7e:5d:fa:a1:c2:b4:30:85:33:
f5:0d:36:b2:9f:1d:f0:2e:68:c2:04:52:b5:ea:bb:
fe:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:0F:0C:F4:47:5F:56:7B:65:18:22:33:6F:B0:3F:C3:28:9D:F0:BF
X509v3 Authority Key Identifier:
keyid:74:2E:57:1D:00:06:FE:7F:66:0B:03:08:CC:C6:1A:16:99:E3:49:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dC5XHQAG_n9mCwMIzMYaFpnjSRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/2e03af-83a4-4c9f-911a-d5844b3c5177/1/dC5XHQAG_n9mCwMIzMYaFpnjSRc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/2e03af-83a4-4c9f-911a-d5844b3c5177/1/dC5XHQAG_n9mCwMIzMYaFpnjSRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d5:8b:6e:df:1b:37:83:2a:60:46:9d:74:4a:ac:6b:d1:b6:13:
da:4c:94:0b:cf:a8:22:c9:52:5c:87:29:8a:04:41:41:3f:6b:
44:c0:a2:8b:db:cd:85:17:a2:9c:e6:a1:50:72:29:79:29:ca:
d3:0a:7a:ec:51:78:ab:6b:35:60:17:91:9f:f2:12:c1:85:75:
4f:35:e8:40:9a:33:b4:cb:aa:dd:b7:85:2d:c2:af:0a:a6:55:
45:63:34:b9:61:e0:4b:d2:a6:b1:25:bb:33:b1:55:de:97:58:
d0:a5:51:fc:dd:91:51:c4:bd:3b:90:08:5b:8b:f5:87:03:ef:
97:52:51:db:f1:9f:b4:a1:df:2b:e5:fd:5d:d8:30:c3:10:af:
f6:3b:cc:36:4f:4b:1b:ab:9b:46:79:ab:3c:55:d9:43:b1:ef:
37:15:d7:96:ae:60:ca:16:e5:58:32:98:2c:57:9f:8d:b1:1f:
e4:f9:7f:57:28:a8:c7:18:1c:c2:56:19:0b:ac:33:ad:7f:37:
29:66:17:72:aa:e0:ba:b2:d7:43:08:ac:94:90:68:ce:21:d1:
21:91:0c:5e:70:ea:25:7b:1a:03:df:52:02:ab:5f:94:e2:56:
4a:6b:b4:b6:4c:f8:ce:7f:e0:8c:1a:31:3f:6e:24:f8:a5:01:
91:66:bc:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:06:57 2025 by rpki-client