Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/e3bbdf-9585-46e5-b5cc-f68a59d2fe0d/1/dUxXhm6Xqtqtdd7MadDfBy1Qbuc.mft
File: dUxXhm6Xqtqtdd7MadDfBy1Qbuc.mft (raw, json)
Hash identifier: TOyCqjXnnkaC/ae+oh3Bwj6+npXJRClA21MLaOmYPaw=
Subject key identifier: 33:17:DF:F8:FA:48:18:5B:88:00:60:7A:F8:36:61:D8:19:BA:6E:66
Authority key identifier: 75:4C:57:86:6E:97:AA:DA:AD:75:DE:CC:69:D0:DF:07:2D:50:6E:E7
Certificate issuer: /CN=754c57866e97aadaad75decc69d0df072d506ee7
Certificate serial: 0198D5F142A0B4B65B815CE8472FA5880559
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dUxXhm6Xqtqtdd7MadDfBy1Qbuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/e3bbdf-9585-46e5-b5cc-f68a59d2fe0d/1/dUxXhm6Xqtqtdd7MadDfBy1Qbuc.mft
Manifest number: 0126
Signing time: Sat 23 Aug 2025 08:00:14 +0000
Manifest this update: Sat 23 Aug 2025 08:00:14 +0000
Manifest next update: Sun 24 Aug 2025 08:00:14 +0000
Files and hashes: 1: dUxXhm6Xqtqtdd7MadDfBy1Qbuc.crl (hash: +qP4GeAd8QeryStUJQv+8C6EoRCUb7KnZDeajihxEaI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/e3bbdf-9585-46e5-b5cc-f68a59d2fe0d/1/dUxXhm6Xqtqtdd7MadDfBy1Qbuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/e3bbdf-9585-46e5-b5cc-f68a59d2fe0d/1/dUxXhm6Xqtqtdd7MadDfBy1Qbuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/dUxXhm6Xqtqtdd7MadDfBy1Qbuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:42:a0:b4:b6:5b:81:5c:e8:47:2f:a5:88:05:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=754c57866e97aadaad75decc69d0df072d506ee7
Validity
Not Before: Aug 23 08:00:14 2025 GMT
Not After : Aug 24 08:00:14 2025 GMT
Subject: CN=3317dff8fa48185b8800607af83661d819ba6e66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:5a:1c:40:34:11:98:27:83:8d:40:94:84:e9:
d8:61:16:0c:80:12:59:1a:7d:9e:86:aa:95:6f:0e:
bc:56:ca:4d:c1:be:51:83:1e:a3:2c:5e:4e:44:c3:
e3:cb:31:54:7e:52:84:3d:6d:94:49:49:5c:7f:3e:
56:a8:d0:d3:fd:9b:c1:cd:70:96:06:6b:9d:8b:81:
cf:a1:dc:35:13:20:42:57:31:b6:86:52:d5:1e:bd:
03:76:c9:b6:f2:2c:c7:60:d3:d2:10:1e:19:af:e8:
b8:3c:32:80:fd:6d:56:46:89:6c:f9:38:75:96:c9:
34:4a:a3:62:30:45:8d:0c:4d:fd:34:af:e4:f8:8c:
29:24:02:11:89:c2:86:16:f8:a0:eb:e1:ce:02:a3:
00:81:0a:a5:f4:7f:65:84:41:f6:32:45:55:89:aa:
14:bf:f6:74:9b:c5:1e:da:e4:15:d8:d9:08:4e:a7:
0c:11:40:3c:62:7a:18:d4:8b:5a:03:2a:12:82:c2:
22:b1:8f:92:a4:1b:48:7d:ac:ae:14:53:15:9e:84:
1f:88:1d:85:15:b7:66:41:30:07:b3:46:d5:7b:fe:
9f:1e:01:be:af:3b:20:30:78:08:d7:b3:23:a7:5a:
76:5a:38:8a:90:e3:70:21:79:10:a4:e5:9c:4b:dd:
48:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:17:DF:F8:FA:48:18:5B:88:00:60:7A:F8:36:61:D8:19:BA:6E:66
X509v3 Authority Key Identifier:
keyid:75:4C:57:86:6E:97:AA:DA:AD:75:DE:CC:69:D0:DF:07:2D:50:6E:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dUxXhm6Xqtqtdd7MadDfBy1Qbuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/e3bbdf-9585-46e5-b5cc-f68a59d2fe0d/1/dUxXhm6Xqtqtdd7MadDfBy1Qbuc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/e3bbdf-9585-46e5-b5cc-f68a59d2fe0d/1/dUxXhm6Xqtqtdd7MadDfBy1Qbuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:da:46:af:93:3b:84:28:89:bd:0f:d9:e7:29:41:df:0a:af:
0d:10:b2:70:b6:0a:b2:34:ba:7f:36:1a:7d:d8:79:a8:e9:47:
fc:97:e4:07:33:fa:be:1a:b0:bd:1c:bb:c0:ef:e8:30:b9:88:
be:49:2d:12:61:00:e7:1b:44:d2:11:94:fb:80:6d:26:70:0c:
c6:f8:03:17:6f:2c:9c:b5:d6:9a:90:e6:0f:30:bb:9d:2e:a6:
0f:46:e4:21:e3:b4:57:66:06:5a:a5:d6:8d:bd:f2:a2:a7:d8:
51:a6:8f:f4:b6:64:8d:18:90:a3:77:34:85:40:2c:c6:22:8d:
8f:b9:b1:29:db:4b:b9:a5:b1:0c:7f:8c:27:7d:f5:39:75:29:
15:5b:14:e5:6e:94:9d:1a:9d:fd:1e:3a:8a:43:cb:40:f6:f6:
c5:fb:e3:83:39:e7:ed:33:51:5d:9b:5e:d5:f6:c1:e6:be:56:
23:bc:ae:d3:03:cd:d8:b7:27:f8:7d:c5:82:d4:77:39:8d:36:
dd:51:a5:44:c3:b3:67:4a:79:2d:32:84:34:c3:4b:b3:9b:9a:
cc:ca:11:b4:e7:03:38:7d:a1:fe:c9:1b:24:8f:1d:87:ea:7d:
7d:d0:d2:a7:e4:93:d5:9f:4a:95:8b:96:6b:d7:c7:33:c8:2f:
7e:a2:43:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:32:06 2025 by rpki-client