Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/2754de-a5d5-487f-9fdd-c33b3644dd3f/1/dcqnmRKIh2aA16yQqFafP8IDh_o.mft
File: dcqnmRKIh2aA16yQqFafP8IDh_o.mft (raw, json)
Hash identifier: QHp19D+c27k1JIgZd0JZ754dRM2ZKV8A35kXJb809nA=
Subject key identifier: 20:92:BB:FC:3A:F6:1F:25:8B:10:96:EE:07:EB:12:3B:64:60:42:55
Authority key identifier: 75:CA:A7:99:12:88:87:66:80:D7:AC:90:A8:56:9F:3F:C2:03:87:FA
Certificate issuer: /CN=75caa7991288876680d7ac90a8569f3fc20387fa
Certificate serial: 0198D4E07D5186764B4AEC73E5215F084C99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dcqnmRKIh2aA16yQqFafP8IDh_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/2754de-a5d5-487f-9fdd-c33b3644dd3f/1/dcqnmRKIh2aA16yQqFafP8IDh_o.mft
Manifest number: 1646
Signing time: Sat 23 Aug 2025 03:02:18 +0000
Manifest this update: Sat 23 Aug 2025 03:02:18 +0000
Manifest next update: Sun 24 Aug 2025 03:02:18 +0000
Files and hashes: 1: dcqnmRKIh2aA16yQqFafP8IDh_o.crl (hash: 6Wzc1LUN7hgcfv2awZLOviVJDidQr01m0PRvcYEar78=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/2754de-a5d5-487f-9fdd-c33b3644dd3f/1/dcqnmRKIh2aA16yQqFafP8IDh_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/2754de-a5d5-487f-9fdd-c33b3644dd3f/1/dcqnmRKIh2aA16yQqFafP8IDh_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/dcqnmRKIh2aA16yQqFafP8IDh_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:7d:51:86:76:4b:4a:ec:73:e5:21:5f:08:4c:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75caa7991288876680d7ac90a8569f3fc20387fa
Validity
Not Before: Aug 23 03:02:18 2025 GMT
Not After : Aug 24 03:02:18 2025 GMT
Subject: CN=2092bbfc3af61f258b1096ee07eb123b64604255
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:b1:7d:a6:e0:90:1a:b8:6e:03:c2:eb:48:94:
24:5a:af:ca:00:51:7a:d0:da:d3:b8:1c:39:15:8f:
95:0c:95:aa:27:4e:43:9a:12:b8:55:9a:9d:ee:c7:
e0:fb:ea:f4:6b:f9:b3:71:c9:e5:49:c2:bc:45:34:
de:f8:32:e3:a7:c5:84:85:5a:b7:1b:d1:d8:a7:f3:
9d:7f:2b:71:58:f4:d5:0e:08:15:32:45:54:b6:31:
74:44:e2:0e:01:89:68:93:87:0a:e1:10:db:6c:67:
b0:e4:c6:a3:2f:7c:44:e6:1b:df:d1:64:f5:98:92:
bf:b6:28:06:5e:d0:d3:3f:e4:b2:a5:45:a1:8f:00:
d6:75:b3:f2:fd:ff:20:ef:71:2d:4c:c4:69:a7:ab:
fa:ec:11:66:38:56:e9:aa:82:5d:de:f7:f6:fa:be:
07:0f:a4:ae:ee:ec:d5:58:5b:df:8b:d8:64:39:a4:
65:79:99:6d:a5:21:6a:38:e7:14:b6:e9:7f:36:66:
d0:37:da:08:2b:d7:30:cc:5b:e3:98:c4:38:72:70:
11:34:ed:12:02:e5:6c:79:02:1c:6e:a3:dc:96:f5:
93:8c:fe:97:e2:ad:ff:5f:32:c9:df:f2:76:5d:25:
17:2a:f1:64:17:cf:f4:14:79:53:39:3b:bb:ce:aa:
31:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:92:BB:FC:3A:F6:1F:25:8B:10:96:EE:07:EB:12:3B:64:60:42:55
X509v3 Authority Key Identifier:
keyid:75:CA:A7:99:12:88:87:66:80:D7:AC:90:A8:56:9F:3F:C2:03:87:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dcqnmRKIh2aA16yQqFafP8IDh_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/2754de-a5d5-487f-9fdd-c33b3644dd3f/1/dcqnmRKIh2aA16yQqFafP8IDh_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/2754de-a5d5-487f-9fdd-c33b3644dd3f/1/dcqnmRKIh2aA16yQqFafP8IDh_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:81:8c:63:7c:57:86:5d:b7:26:c3:18:6a:a0:83:74:a4:89:
e6:b6:3d:e4:9c:fa:d9:21:b5:80:fd:3a:63:8f:38:6c:43:4f:
68:bd:43:c2:f0:26:5d:98:8d:30:21:28:d0:f8:a1:c2:9b:6f:
04:42:94:d6:a2:a9:92:5d:c4:09:34:91:ae:21:04:c1:ef:bc:
91:63:41:ff:35:6e:4a:ad:60:f4:3d:43:68:74:b0:1b:dc:73:
7b:ce:79:bb:0a:09:b5:be:c6:db:ac:9c:fd:b8:0d:27:74:f7:
bf:be:b5:e5:cb:ee:d8:c0:e9:07:f9:95:c7:2a:4d:72:56:0a:
b3:f0:14:52:f6:a7:ee:05:84:49:68:30:f7:fe:e8:3d:11:95:
6b:90:a8:7b:a2:57:a6:85:34:97:f2:e0:f5:cf:a0:2f:e9:18:
a0:a3:d6:49:2c:e9:ac:f9:24:fd:a5:db:e9:fc:8f:70:ee:30:
5e:69:17:5d:15:91:ed:ac:87:2a:27:e8:49:c8:1a:b1:a4:b6:
f9:cd:86:ae:00:0f:99:83:db:6f:b2:e2:0c:d3:35:ea:6f:1a:
45:1f:56:6d:ae:c4:46:48:59:f8:3f:68:95:b5:7a:e1:d8:1c:
c4:2f:1a:99:17:04:54:76:7b:cb:3b:e0:5e:11:ad:ad:36:b8:
40:46:be:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjU4H1RhnZLSuxz5SFfCEyZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1Y2FhNzk5MTI4ODg3NjY4MGQ3YWM5MGE4NTY5ZjNmYzIw
Mzg3ZmEwHhcNMjUwODIzMDMwMjE4WhcNMjUwODI0MDMwMjE4WjAzMTEwLwYDVQQD
EygyMDkyYmJmYzNhZjYxZjI1OGIxMDk2ZWUwN2ViMTIzYjY0NjA0MjU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnLF9puCQGrhuA8LrSJQkWq/KAFF6
0NrTuBw5FY+VDJWqJ05DmhK4VZqd7sfg++r0a/mzccnlScK8RTTe+DLjp8WEhVq3
G9HYp/OdfytxWPTVDggVMkVUtjF0ROIOAYlok4cK4RDbbGew5MajL3xE5hvf0WT1
mJK/tigGXtDTP+SypUWhjwDWdbPy/f8g73EtTMRpp6v67BFmOFbpqoJd3vf2+r4H
D6Su7uzVWFvfi9hkOaRleZltpSFqOOcUtul/NmbQN9oIK9cwzFvjmMQ4cnARNO0S
AuVseQIcbqPclvWTjP6X4q3/XzLJ3/J2XSUXKvFkF8/0FHlTOTu7zqox3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCCSu/w69h8lixCW7gfrEjtkYEJVMB8GA1UdIwQY
MBaAFHXKp5kSiIdmgNeskKhWnz/CA4f6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGNxbm1SS0loMmFBMTZ5UXFGYWZQOElEaF9vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy8yNzU0ZGUtYTVkNS00ODdmLTlmZGQt
YzMzYjM2NDRkZDNmLzEvZGNxbm1SS0loMmFBMTZ5UXFGYWZQOElEaF9vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy8yNzU0ZGUtYTVkNS00ODdmLTlmZGQtYzMzYjM2NDRkZDNm
LzEvZGNxbm1SS0loMmFBMTZ5UXFGYWZQOElEaF9vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALIGMY3xX
hl23JsMYaqCDdKSJ5rY95Jz62SG1gP06Y484bENPaL1DwvAmXZiNMCEo0Pihwptv
BEKU1qKpkl3ECTSRriEEwe+8kWNB/zVuSq1g9D1DaHSwG9xze855uwoJtb7G26yc
/bgNJ3T3v7615cvu2MDpB/mVxypNclYKs/AUUvan7gWESWgw9/7oPRGVa5Coe6JX
poU0l/Lg9c+gL+kYoKPWSSzprPkk/aXb6fyPcO4wXmkXXRWR7ayHKifoScgasaS2
+c2GrgAPmYPbb7LiDNM16m8aRR9Wba7ERkhZ+D9olbV64dgcxC8amRcEVHZ7yzvg
XhGtrTa4QEa+Lw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:50:16 2025 by rpki-client