Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/0467dc-ccf3-4331-957c-158606318525/1/dYOxUbdLsu2w9c5rbpux4MPQrRs.mft
File: dYOxUbdLsu2w9c5rbpux4MPQrRs.mft (raw, json)
Hash identifier: 9LytvJnvIh8tRPWFA6+X6vwLnfhc3pt3JTZ/8fcdUyQ=
Subject key identifier: 30:82:E1:D4:F7:D5:37:C5:88:26:D4:E7:26:21:54:AB:08:54:15:2E
Authority key identifier: 75:83:B1:51:B7:4B:B2:ED:B0:F5:CE:6B:6E:9B:B1:E0:C3:D0:AD:1B
Certificate issuer: /CN=7583b151b74bb2edb0f5ce6b6e9bb1e0c3d0ad1b
Certificate serial: 0198D4E090B965F4735090C974A1D010BF4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dYOxUbdLsu2w9c5rbpux4MPQrRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/0467dc-ccf3-4331-957c-158606318525/1/dYOxUbdLsu2w9c5rbpux4MPQrRs.mft
Manifest number: 1646
Signing time: Sat 23 Aug 2025 03:02:23 +0000
Manifest this update: Sat 23 Aug 2025 03:02:23 +0000
Manifest next update: Sun 24 Aug 2025 03:02:23 +0000
Files and hashes: 1: dYOxUbdLsu2w9c5rbpux4MPQrRs.crl (hash: DjT9NntmzcxC0SI95AoJ+0BM/zxsH8ABC/KTwMdt6wU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/0467dc-ccf3-4331-957c-158606318525/1/dYOxUbdLsu2w9c5rbpux4MPQrRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/0467dc-ccf3-4331-957c-158606318525/1/dYOxUbdLsu2w9c5rbpux4MPQrRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/dYOxUbdLsu2w9c5rbpux4MPQrRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:90:b9:65:f4:73:50:90:c9:74:a1:d0:10:bf:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7583b151b74bb2edb0f5ce6b6e9bb1e0c3d0ad1b
Validity
Not Before: Aug 23 03:02:23 2025 GMT
Not After : Aug 24 03:02:23 2025 GMT
Subject: CN=3082e1d4f7d537c58826d4e7262154ab0854152e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:1a:f7:b8:89:1c:20:46:23:70:73:57:53:0d:
ce:c7:0c:26:c1:30:f4:0d:b6:e3:7a:5b:2e:71:32:
46:c5:50:3f:31:14:1d:82:0b:b9:92:ff:ef:27:fd:
0a:21:5f:03:41:71:1a:34:77:c8:3c:31:95:6e:cd:
ad:5d:37:3d:a7:32:e7:ff:1f:2b:f3:33:6d:0e:8d:
23:05:bb:47:9c:c7:7e:41:57:c7:85:a9:e3:e8:53:
9d:1a:b2:02:93:4e:aa:fb:35:f1:d0:e2:a4:2d:17:
51:c2:80:ba:63:91:ac:b5:5b:7e:71:c4:fd:85:17:
f4:85:10:d2:2a:8c:97:86:24:48:49:28:68:87:29:
e6:1c:24:0b:68:9f:b4:82:00:db:06:a4:cb:2e:bd:
41:96:ff:5a:80:45:75:18:f7:af:cd:69:2f:0d:8f:
70:94:b9:54:5c:e8:24:7e:bf:9d:53:78:c8:2f:d8:
62:b1:e4:49:4a:ee:69:a4:9e:35:6c:be:db:5b:81:
f1:51:0b:03:73:32:87:a9:a3:6b:1b:12:da:3c:9f:
8e:5a:f8:eb:72:e1:83:ee:8c:f9:ab:a9:1b:1f:d0:
b1:7e:de:f8:30:9c:e5:7a:27:da:f2:6f:6c:c4:84:
4f:96:2c:81:19:41:7e:e5:02:0c:b1:4e:f7:c2:aa:
5a:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:82:E1:D4:F7:D5:37:C5:88:26:D4:E7:26:21:54:AB:08:54:15:2E
X509v3 Authority Key Identifier:
keyid:75:83:B1:51:B7:4B:B2:ED:B0:F5:CE:6B:6E:9B:B1:E0:C3:D0:AD:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dYOxUbdLsu2w9c5rbpux4MPQrRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/0467dc-ccf3-4331-957c-158606318525/1/dYOxUbdLsu2w9c5rbpux4MPQrRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/0467dc-ccf3-4331-957c-158606318525/1/dYOxUbdLsu2w9c5rbpux4MPQrRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:e4:59:88:14:72:72:84:de:29:34:4c:6b:5c:7a:f1:0f:45:
95:aa:b1:74:82:1d:2d:d6:dd:08:66:0d:83:9d:d4:eb:2c:6f:
d3:ce:72:b1:6d:13:19:18:c0:ac:4a:8b:6a:63:1a:89:e2:0f:
70:ef:8b:ed:58:28:8f:30:18:a7:a4:a0:6d:17:c3:8c:0e:f3:
a6:47:ad:8c:77:e6:8e:32:ad:de:95:61:55:a6:db:0f:0e:17:
cc:00:8b:cd:3d:40:6e:e8:5d:dc:a8:f9:33:06:18:e8:5f:c8:
a5:e3:c6:8a:0d:52:2f:91:41:12:1b:69:b9:74:57:a6:65:0e:
fb:8d:62:04:d1:5a:6c:bd:73:08:ac:6a:d0:8a:00:07:ad:bf:
87:da:67:8a:dc:bd:f5:68:10:ad:ae:2e:98:87:5d:e6:0a:4a:
86:9e:6f:86:e5:41:a0:b5:03:d7:b3:94:f8:34:35:c3:9d:7d:
98:d9:d6:5e:47:42:6d:61:f2:f3:a7:65:f2:2b:e4:1d:e9:88:
77:cc:f4:88:ad:56:d5:a4:5c:be:07:23:55:4b:de:27:6c:76:
c9:d5:47:df:d2:cf:6e:c7:83:51:01:3a:20:20:c6:cf:8c:bb:
50:11:cb:73:00:bd:19:0e:d9:86:1b:fa:3f:16:91:2b:90:58:
ce:d7:ea:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:33:52 2025 by rpki-client