Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/d29d3f-1696-4ed4-96d2-e7eb817ede30/1/Da7a5Z2cmvUe9UivsMlkOM73IRw.mft
File: Da7a5Z2cmvUe9UivsMlkOM73IRw.mft (raw, json)
Hash identifier: 3SnCCxZHntNHHZkwXYbBQATYhYYxgJ49v3VMNGxLpJY=
Subject key identifier: C9:64:B5:86:24:47:84:F0:1D:B1:B9:CF:82:87:F2:97:A2:84:E5:94
Authority key identifier: 0D:AE:DA:E5:9D:9C:9A:F5:1E:F5:48:AF:B0:C9:64:38:CE:F7:21:1C
Certificate issuer: /CN=0daedae59d9c9af51ef548afb0c96438cef7211c
Certificate serial: 0198D51636A37EF33D5D9C5A48238EB71728
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Da7a5Z2cmvUe9UivsMlkOM73IRw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/d29d3f-1696-4ed4-96d2-e7eb817ede30/1/Da7a5Z2cmvUe9UivsMlkOM73IRw.mft
Manifest number: 1646
Signing time: Sat 23 Aug 2025 04:00:59 +0000
Manifest this update: Sat 23 Aug 2025 04:00:59 +0000
Manifest next update: Sun 24 Aug 2025 04:00:59 +0000
Files and hashes: 1: Da7a5Z2cmvUe9UivsMlkOM73IRw.crl (hash: HWhSgcckveAUe9IE25QUbVhdX9IpFeU8on8SEFqhqy8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/d29d3f-1696-4ed4-96d2-e7eb817ede30/1/Da7a5Z2cmvUe9UivsMlkOM73IRw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/d29d3f-1696-4ed4-96d2-e7eb817ede30/1/Da7a5Z2cmvUe9UivsMlkOM73IRw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Da7a5Z2cmvUe9UivsMlkOM73IRw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:16:36:a3:7e:f3:3d:5d:9c:5a:48:23:8e:b7:17:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0daedae59d9c9af51ef548afb0c96438cef7211c
Validity
Not Before: Aug 23 04:00:59 2025 GMT
Not After : Aug 24 04:00:59 2025 GMT
Subject: CN=c964b586244784f01db1b9cf8287f297a284e594
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:b9:d8:44:87:3f:8d:c2:83:e5:41:29:95:4d:
02:1d:15:16:9e:e7:36:9b:b9:5c:fd:b5:f3:ec:92:
f2:27:89:46:7b:6f:a1:90:d2:88:de:3a:17:63:89:
82:f2:a5:67:56:ad:cc:1b:a3:e3:d0:4d:2a:c5:a7:
f8:0f:21:3c:b5:72:ea:44:21:0a:d5:6b:b7:9a:ce:
00:95:f3:7b:65:4a:31:e5:b0:c9:23:cb:36:97:97:
de:02:bf:b8:07:15:a0:f2:20:10:85:63:b5:4a:29:
3c:5d:63:1d:b2:fb:ca:7b:9f:ae:8f:7f:a6:9f:14:
9d:74:d9:b7:12:36:ca:df:7c:af:21:c9:4e:ba:f6:
ab:4c:40:11:ea:94:ad:f8:fd:5f:54:83:07:df:d3:
d5:97:18:fb:e8:61:1c:d9:98:1a:33:7e:88:f3:e8:
e2:ed:4a:0e:87:17:ec:27:9d:df:69:44:47:28:f3:
6a:3e:ff:cd:24:2f:a5:03:70:b9:c4:c6:1c:6c:20:
8f:4c:71:42:24:2f:51:31:e8:6c:b3:a1:98:fe:86:
1f:f0:ce:5d:65:ad:25:7c:e6:ef:5d:e8:aa:a0:75:
06:ae:38:86:26:f4:10:47:cb:f2:9c:c3:6a:9e:5f:
25:db:79:70:1a:92:11:3f:ff:04:e1:26:1b:f4:d6:
cc:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:64:B5:86:24:47:84:F0:1D:B1:B9:CF:82:87:F2:97:A2:84:E5:94
X509v3 Authority Key Identifier:
keyid:0D:AE:DA:E5:9D:9C:9A:F5:1E:F5:48:AF:B0:C9:64:38:CE:F7:21:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Da7a5Z2cmvUe9UivsMlkOM73IRw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d29d3f-1696-4ed4-96d2-e7eb817ede30/1/Da7a5Z2cmvUe9UivsMlkOM73IRw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d29d3f-1696-4ed4-96d2-e7eb817ede30/1/Da7a5Z2cmvUe9UivsMlkOM73IRw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:bc:43:7d:e0:25:e6:24:10:d1:a8:36:91:7a:cf:36:36:07:
a9:ef:76:cd:49:1a:b3:bb:f6:d9:3e:eb:db:a7:66:ff:b7:5b:
71:cd:2c:99:8c:2b:ff:2f:ae:5d:34:4c:d6:17:09:5b:cc:7a:
5b:93:38:62:ba:80:0e:7b:f5:d0:f6:e3:07:ca:1d:af:98:98:
00:7f:d1:e0:5c:d6:3d:5d:4b:fd:5f:74:5b:78:ec:ba:27:6f:
44:7f:bf:4b:90:b7:71:38:bf:fa:3b:b6:8d:f5:85:10:cc:f3:
4f:4a:82:2c:4a:2e:90:87:f6:12:d8:6e:a7:08:4f:04:ad:5e:
99:78:e6:cd:88:0a:ca:75:2d:60:ad:fe:4b:ab:b0:b1:20:e1:
aa:c2:b9:b5:10:16:17:da:3c:21:7c:14:a8:1b:9e:42:41:39:
23:f5:b1:0a:a1:46:a4:f6:9f:90:3b:c6:7a:42:83:4c:e2:87:
00:0d:0d:12:36:14:70:01:f5:a2:03:a7:f8:6f:b6:23:36:5b:
b9:06:d6:81:da:be:7b:45:3c:2f:74:22:87:8c:ba:04:4e:8e:
ad:97:37:a8:f2:ff:4a:b3:58:d7:d4:4e:ec:8e:a4:24:59:ed:
a2:8d:9c:38:e0:0d:d6:be:6f:54:4c:e6:da:bb:30:2b:e6:28:
4b:4c:67:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:09:30 2025 by rpki-client