Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/c16043-a3de-4ab3-9e56-8265a96e420d/1/dUE1hHAyFWSttCp213OuPK57vVY.mft
File: dUE1hHAyFWSttCp213OuPK57vVY.mft (raw, json)
Hash identifier: 1lNjNl21xeNcNltmP1VG1AAoa7/4RPh5Ab3s8s5u3Ew=
Subject key identifier: 67:09:C8:F9:4A:EC:38:D3:CE:D0:68:11:71:E0:6E:2C:D7:BC:78:01
Authority key identifier: 75:41:35:84:70:32:15:64:AD:B4:2A:76:D7:73:AE:3C:AE:7B:BD:56
Certificate issuer: /CN=7541358470321564adb42a76d773ae3cae7bbd56
Certificate serial: 0198D65FEC2FA7E8C1AE71E6B7E405FF0E61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dUE1hHAyFWSttCp213OuPK57vVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/c16043-a3de-4ab3-9e56-8265a96e420d/1/dUE1hHAyFWSttCp213OuPK57vVY.mft
Manifest number: 0495
Signing time: Sat 23 Aug 2025 10:01:07 +0000
Manifest this update: Sat 23 Aug 2025 10:01:07 +0000
Manifest next update: Sun 24 Aug 2025 10:01:07 +0000
Files and hashes: 1: dUE1hHAyFWSttCp213OuPK57vVY.crl (hash: I+Z+OcMXko3UXJbRjjICCvIdo3vRz1DVD53j9hCENgI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/c16043-a3de-4ab3-9e56-8265a96e420d/1/dUE1hHAyFWSttCp213OuPK57vVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/c16043-a3de-4ab3-9e56-8265a96e420d/1/dUE1hHAyFWSttCp213OuPK57vVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/dUE1hHAyFWSttCp213OuPK57vVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:ec:2f:a7:e8:c1:ae:71:e6:b7:e4:05:ff:0e:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7541358470321564adb42a76d773ae3cae7bbd56
Validity
Not Before: Aug 23 10:01:07 2025 GMT
Not After : Aug 24 10:01:07 2025 GMT
Subject: CN=6709c8f94aec38d3ced0681171e06e2cd7bc7801
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:49:2e:b5:18:50:7d:b1:8e:e3:c0:dd:24:d2:
6d:bf:f1:e5:f0:83:59:53:c2:68:73:be:d8:27:b0:
13:80:f2:3d:4b:13:e0:61:a8:91:50:29:73:12:2e:
5a:bc:06:ae:f3:dc:be:a5:71:57:1d:81:e1:ff:d8:
c0:76:4b:fa:84:48:33:a5:6f:f7:85:5e:ec:2e:8a:
6e:cb:11:eb:b5:83:fd:c4:37:c2:2c:48:0d:2c:23:
5e:40:43:0d:6f:fc:19:f3:bd:95:86:38:4d:27:a3:
16:56:f9:b9:40:52:c6:bb:77:7d:d6:60:95:ec:4f:
5c:37:a0:50:61:1a:7c:7c:8b:6f:ed:e4:ea:9c:3a:
df:eb:37:58:bc:66:a1:c3:9b:7a:5a:bf:ba:0d:bd:
cd:d3:1f:1c:72:e6:06:d0:19:b6:ae:c5:fc:15:4c:
66:54:27:7c:13:5b:88:ec:f7:95:1c:d3:e6:8a:03:
7d:fd:a8:e2:1d:4d:a1:dc:59:c9:9f:87:a5:8c:2f:
80:46:45:23:fe:b8:7e:d0:57:6b:68:1f:2f:a9:72:
71:9e:03:5a:37:7d:f3:c2:1b:a2:21:65:b5:23:d0:
5f:2d:ea:1b:08:e2:e0:ab:a5:1f:b2:03:6a:74:9f:
36:25:9d:83:65:4c:f6:d8:cc:0e:6a:79:17:c7:ca:
46:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:09:C8:F9:4A:EC:38:D3:CE:D0:68:11:71:E0:6E:2C:D7:BC:78:01
X509v3 Authority Key Identifier:
keyid:75:41:35:84:70:32:15:64:AD:B4:2A:76:D7:73:AE:3C:AE:7B:BD:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dUE1hHAyFWSttCp213OuPK57vVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c16043-a3de-4ab3-9e56-8265a96e420d/1/dUE1hHAyFWSttCp213OuPK57vVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c16043-a3de-4ab3-9e56-8265a96e420d/1/dUE1hHAyFWSttCp213OuPK57vVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:ec:a6:c6:de:ed:86:8d:5a:aa:61:1b:6d:8d:cd:cf:3c:a2:
a6:8a:ea:86:bf:f9:e8:e4:ac:1a:ee:ed:d2:52:bf:a7:b1:d6:
ae:cd:b4:0a:44:f9:c4:37:b8:c7:db:5f:77:38:fb:2b:66:ba:
80:70:fa:9b:7c:a1:09:66:c5:70:2a:6c:cc:65:0b:a5:31:ff:
37:f1:35:26:be:86:8f:72:f6:b0:b5:d9:6c:fe:16:cb:c5:b4:
3b:f7:a2:7d:b7:25:75:1b:75:f2:7a:f1:5b:a5:82:83:ba:28:
71:a2:d6:e7:45:36:12:5e:b7:39:c5:87:ca:b2:b9:84:e9:a5:
4d:de:e6:fc:3e:f8:d4:d0:5e:65:36:76:5b:0b:7e:c7:99:0e:
71:6e:25:11:85:94:35:7d:3b:13:73:ce:80:8d:7c:89:63:d5:
9e:d5:c7:f6:03:17:07:db:90:ec:d1:6c:72:07:a1:05:c0:a7:
e6:b7:f6:f6:df:f7:2d:f2:59:81:52:c3:aa:bd:ab:d4:34:5f:
5e:10:e2:9a:aa:a7:7b:f4:ac:1e:72:4f:c7:d1:10:7c:40:ff:
bb:38:51:a9:82:01:a1:fd:53:37:8f:98:09:60:82:6d:fb:9d:
c7:4d:29:54:d0:b0:15:ef:e8:ba:1c:27:a2:6f:c8:59:dd:ab:
64:19:f2:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:12:38 2025 by rpki-client