Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/974816-f2e7-4f8a-86c9-f6f2c5850b51/1/dM1ajbKkgrSTFrdXO4pPh09uuxU.mft
File: dM1ajbKkgrSTFrdXO4pPh09uuxU.mft (raw, json)
Hash identifier: Wx4qLyKviGq3hCdsgCQ/b9NGD+CAMbXGE0dxY0lyO1o=
Subject key identifier: 60:62:5A:8F:C2:C9:0A:ED:6A:FC:28:0D:02:72:62:90:0B:5F:6B:8B
Authority key identifier: 74:CD:5A:8D:B2:A4:82:B4:93:16:B7:57:3B:8A:4F:87:4F:6E:BB:15
Certificate issuer: /CN=74cd5a8db2a482b49316b7573b8a4f874f6ebb15
Certificate serial: 0198D84F4D58D19F53B2778F2FB5F4A3BD06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dM1ajbKkgrSTFrdXO4pPh09uuxU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/974816-f2e7-4f8a-86c9-f6f2c5850b51/1/dM1ajbKkgrSTFrdXO4pPh09uuxU.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 19:02:12 +0000
Manifest this update: Sat 23 Aug 2025 19:02:12 +0000
Manifest next update: Sun 24 Aug 2025 19:02:12 +0000
Files and hashes: 1: dM1ajbKkgrSTFrdXO4pPh09uuxU.crl (hash: XxiIXV7t0PJmYqahPkOyxRogmmAX6EdsGDDV+1fPgnI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/974816-f2e7-4f8a-86c9-f6f2c5850b51/1/dM1ajbKkgrSTFrdXO4pPh09uuxU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/974816-f2e7-4f8a-86c9-f6f2c5850b51/1/dM1ajbKkgrSTFrdXO4pPh09uuxU.mft
rsync://rpki.ripe.net/repository/DEFAULT/dM1ajbKkgrSTFrdXO4pPh09uuxU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:4f:4d:58:d1:9f:53:b2:77:8f:2f:b5:f4:a3:bd:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74cd5a8db2a482b49316b7573b8a4f874f6ebb15
Validity
Not Before: Aug 23 19:02:12 2025 GMT
Not After : Aug 24 19:02:12 2025 GMT
Subject: CN=60625a8fc2c90aed6afc280d027262900b5f6b8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:19:43:68:ab:ce:78:21:c7:4e:3c:a0:ec:42:
bd:7a:79:46:01:61:7f:b2:d9:ed:71:82:b5:32:7e:
2e:b1:dc:a6:e6:ae:a2:79:b0:3b:1b:25:2d:9c:f3:
7e:e6:0b:32:72:92:0c:cc:2f:fb:fb:98:cb:b7:e6:
fd:db:91:e3:37:d4:2a:fb:68:e6:7e:0e:f6:de:d9:
fa:2e:05:9f:1b:d2:f6:6f:f5:a9:55:16:9e:5d:32:
b1:53:6e:04:d6:a9:ed:c2:97:84:a5:d0:f5:88:3f:
1c:28:91:f6:c8:5f:d4:04:fe:19:78:43:a0:6e:f7:
9e:52:ab:f2:9b:32:7b:96:81:3e:59:2a:43:36:69:
b1:50:59:3d:fb:96:56:4e:03:76:ad:72:28:5a:89:
3e:e3:7e:e7:ca:51:12:b9:4f:cb:c8:42:66:47:55:
67:b4:7d:65:80:45:44:53:76:f3:d9:ee:91:1f:10:
25:97:86:f2:cc:4b:1e:2f:15:7e:5e:ff:02:99:6c:
b9:7b:90:f2:af:2b:a0:90:a3:05:79:b2:08:3f:a4:
23:7f:a4:1f:c0:23:93:4e:81:2d:23:fd:92:56:f2:
27:f8:d7:35:95:a2:c1:d8:0a:43:73:a7:2e:cb:73:
9a:7e:99:24:d2:c1:36:2d:70:b6:40:44:e1:a6:36:
29:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:62:5A:8F:C2:C9:0A:ED:6A:FC:28:0D:02:72:62:90:0B:5F:6B:8B
X509v3 Authority Key Identifier:
keyid:74:CD:5A:8D:B2:A4:82:B4:93:16:B7:57:3B:8A:4F:87:4F:6E:BB:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dM1ajbKkgrSTFrdXO4pPh09uuxU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/974816-f2e7-4f8a-86c9-f6f2c5850b51/1/dM1ajbKkgrSTFrdXO4pPh09uuxU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/974816-f2e7-4f8a-86c9-f6f2c5850b51/1/dM1ajbKkgrSTFrdXO4pPh09uuxU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:e2:c8:c4:5a:f4:62:0b:8f:73:65:b1:e9:4a:e0:34:b2:db:
78:82:05:61:46:b8:b1:9b:df:7e:8f:e2:1a:1d:9d:85:d8:58:
91:95:fa:2c:66:ca:8e:78:58:e1:df:c0:e8:3a:93:56:cf:1b:
3b:dd:4c:c4:46:00:5a:9e:eb:74:90:37:6e:72:dc:58:6e:6d:
a2:78:e3:c5:72:8d:7b:0e:98:d4:a1:3d:de:6b:04:5b:c0:5b:
f3:19:e5:42:54:1b:6b:09:b2:a8:15:d5:71:54:b9:7b:a0:64:
28:2f:3c:e8:0e:3d:91:f4:c1:f0:08:d4:7c:1f:94:da:1c:14:
a8:bd:0d:66:85:0c:1a:25:89:d6:7d:1d:76:a9:36:a2:8c:05:
f3:b7:d7:47:ee:df:3e:66:3b:75:b2:3e:69:27:af:f9:dc:09:
41:29:8d:f2:a1:46:0c:99:4d:18:b2:52:d1:10:da:5f:59:bf:
f8:f8:39:a5:e9:c4:02:75:3c:5c:06:40:c3:47:8f:ec:3a:4b:
0c:68:38:c3:89:84:ca:70:0b:9b:4b:fc:79:bc:79:7d:b3:b9:
78:88:75:8e:66:76:35:c9:38:87:30:88:ca:d7:fa:bd:46:14:
2e:b4:52:f5:18:33:08:f7:0c:6f:a9:d6:f0:7c:a6:6d:36:13:
68:fb:76:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:21:56 2025 by rpki-client