Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/818ac5-93dd-40fd-bf6f-e04f8fcc2ca1/1/dXHIkpmbtFZLzkgMkhtv8XIF7MY.mft
File: dXHIkpmbtFZLzkgMkhtv8XIF7MY.mft (raw, json)
Hash identifier: Y5S83YrJDRsfs2knW3E8kFx7hjuN6DudWN3gegU17LA=
Subject key identifier: 0B:8B:A5:73:27:73:22:CD:AA:F6:80:0E:FC:A4:C4:85:72:41:6E:C7
Authority key identifier: 75:71:C8:92:99:9B:B4:56:4B:CE:48:0C:92:1B:6F:F1:72:05:EC:C6
Certificate issuer: /CN=7571c892999bb4564bce480c921b6ff17205ecc6
Certificate serial: 0198D73B75852051687CC87F885D5925F607
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dXHIkpmbtFZLzkgMkhtv8XIF7MY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/818ac5-93dd-40fd-bf6f-e04f8fcc2ca1/1/dXHIkpmbtFZLzkgMkhtv8XIF7MY.mft
Manifest number: 0629
Signing time: Sat 23 Aug 2025 14:00:54 +0000
Manifest this update: Sat 23 Aug 2025 14:00:54 +0000
Manifest next update: Sun 24 Aug 2025 14:00:54 +0000
Files and hashes: 1: dXHIkpmbtFZLzkgMkhtv8XIF7MY.crl (hash: sP44eOnLFxZm9Rz7lYiIckwaDZFX9grri2rGpgH1nxE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/818ac5-93dd-40fd-bf6f-e04f8fcc2ca1/1/dXHIkpmbtFZLzkgMkhtv8XIF7MY.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/818ac5-93dd-40fd-bf6f-e04f8fcc2ca1/1/dXHIkpmbtFZLzkgMkhtv8XIF7MY.mft
rsync://rpki.ripe.net/repository/DEFAULT/dXHIkpmbtFZLzkgMkhtv8XIF7MY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3b:75:85:20:51:68:7c:c8:7f:88:5d:59:25:f6:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7571c892999bb4564bce480c921b6ff17205ecc6
Validity
Not Before: Aug 23 14:00:54 2025 GMT
Not After : Aug 24 14:00:54 2025 GMT
Subject: CN=0b8ba573277322cdaaf6800efca4c48572416ec7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:a2:e0:64:28:da:a6:34:99:2c:78:d1:62:f1:
01:f3:d7:e0:43:79:a2:a5:11:dc:3f:57:e6:5b:ac:
2b:cd:04:fa:37:55:37:31:19:7f:6c:e9:81:4d:06:
0f:1e:aa:25:69:b2:44:59:ca:93:65:ec:a8:bd:1e:
74:76:4c:9a:7f:22:94:5b:63:66:af:69:a5:fa:40:
40:1c:0f:2d:9e:47:27:21:b6:8c:45:ff:a4:a3:bb:
12:4c:ef:95:c8:bc:26:73:82:50:5e:e9:36:6c:89:
2e:16:b9:2f:f9:3f:81:5d:cd:92:b1:fa:1a:e7:b7:
1f:ff:de:61:7c:3e:d7:32:65:b4:af:1e:e6:b2:8c:
86:63:5c:dc:20:5b:41:06:de:8b:d1:72:59:a8:ce:
a8:b8:56:be:19:a7:9c:2e:1a:d5:0d:3f:b5:12:6d:
61:e6:3c:f2:02:b5:5c:31:9b:9f:31:2f:69:b7:8d:
e1:b4:bf:a3:8c:64:11:55:5e:31:6e:33:7a:4a:2e:
03:64:94:a7:dc:9b:39:40:52:b2:5e:58:d8:d6:20:
77:60:58:6c:8f:dd:75:f9:c2:35:46:70:d3:71:70:
d4:58:6d:34:ad:11:ed:1c:ad:a3:ff:9f:33:66:51:
19:ef:56:c5:cc:aa:ce:34:57:2d:33:19:12:c3:28:
e4:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:8B:A5:73:27:73:22:CD:AA:F6:80:0E:FC:A4:C4:85:72:41:6E:C7
X509v3 Authority Key Identifier:
keyid:75:71:C8:92:99:9B:B4:56:4B:CE:48:0C:92:1B:6F:F1:72:05:EC:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dXHIkpmbtFZLzkgMkhtv8XIF7MY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/818ac5-93dd-40fd-bf6f-e04f8fcc2ca1/1/dXHIkpmbtFZLzkgMkhtv8XIF7MY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/818ac5-93dd-40fd-bf6f-e04f8fcc2ca1/1/dXHIkpmbtFZLzkgMkhtv8XIF7MY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:ff:a5:76:86:fc:0e:8f:77:1e:44:dd:dc:be:e6:e1:18:a1:
3c:b7:3c:47:df:9a:71:4e:1e:0f:56:d9:cf:1f:07:fd:a7:82:
f6:a9:9f:eb:e0:f5:b4:c3:79:92:c6:b8:62:c2:2a:74:b8:c2:
60:31:6b:30:37:81:23:fc:c6:8b:47:18:77:75:c1:14:bf:43:
94:91:1c:14:b2:57:b8:31:59:fc:01:55:fa:ee:29:96:b2:05:
a3:62:5a:94:02:66:e5:16:52:bb:62:99:89:2b:3b:8d:99:d4:
01:2c:cb:99:d3:7a:a4:ad:e5:40:30:1a:ed:b5:97:b3:4a:79:
00:90:99:81:7d:3c:a7:e1:ce:c4:37:7c:8c:9e:b2:6d:46:11:
d2:c2:87:3e:ac:95:57:fd:3d:67:65:5d:ae:13:e4:df:2e:24:
ba:52:ab:5d:ee:7a:8c:57:15:b7:c2:41:72:45:25:fb:63:b4:
9d:b2:ef:c5:9e:06:d2:ca:d3:2d:80:34:8c:c1:52:50:63:1a:
29:65:b1:2b:54:89:2e:39:02:59:79:6a:f5:a5:67:91:27:7d:
9f:1d:97:ff:84:ed:5b:02:2d:c4:1e:e9:18:92:27:9c:88:3c:
f6:d2:3e:28:e9:eb:b0:a4:66:d1:93:e4:91:de:50:d3:8b:2f:
ee:d2:4d:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:47:07 2025 by rpki-client