Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/697564-0025-4f92-8dfd-ce1c03400d4d/1/dCMNFC7sf2qZsNtAlvk6BCBIP-Y.mft
File: dCMNFC7sf2qZsNtAlvk6BCBIP-Y.mft (raw, json)
Hash identifier: DIf+MYgUvBQl4vrhgUUvXe9lNEaTz2b6XaGAz6fcWLY=
Subject key identifier: 92:79:C2:E4:C2:05:F6:C6:7E:FD:2D:34:8F:46:6C:72:03:5C:CC:A1
Authority key identifier: 74:23:0D:14:2E:EC:7F:6A:99:B0:DB:40:96:F9:3A:04:20:48:3F:E6
Certificate issuer: /CN=74230d142eec7f6a99b0db4096f93a0420483fe6
Certificate serial: 01988B106552A18CCE08F4139BB0E3FC1236
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dCMNFC7sf2qZsNtAlvk6BCBIP-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/697564-0025-4f92-8dfd-ce1c03400d4d/1/dCMNFC7sf2qZsNtAlvk6BCBIP-Y.mft
Manifest number: 0818
Signing time: Fri 08 Aug 2025 19:02:44 +0000
Manifest this update: Fri 08 Aug 2025 19:02:44 +0000
Manifest next update: Sat 09 Aug 2025 19:02:44 +0000
Files and hashes: 1: dCMNFC7sf2qZsNtAlvk6BCBIP-Y.crl (hash: B45XorJEcg+woihlB5V38r0Aw6ob2LhaZ6v7HtzuNW0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/697564-0025-4f92-8dfd-ce1c03400d4d/1/dCMNFC7sf2qZsNtAlvk6BCBIP-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/697564-0025-4f92-8dfd-ce1c03400d4d/1/dCMNFC7sf2qZsNtAlvk6BCBIP-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/dCMNFC7sf2qZsNtAlvk6BCBIP-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 19:02:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:10:65:52:a1:8c:ce:08:f4:13:9b:b0:e3:fc:12:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74230d142eec7f6a99b0db4096f93a0420483fe6
Validity
Not Before: Aug 8 19:02:44 2025 GMT
Not After : Aug 9 19:02:44 2025 GMT
Subject: CN=9279c2e4c205f6c67efd2d348f466c72035ccca1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:a8:88:43:b7:99:43:20:88:07:c2:be:7b:94:
cc:a5:2f:dc:dc:af:2b:6a:37:81:70:0c:39:bd:c4:
a4:53:62:bc:58:5d:34:5d:15:ab:8b:4d:63:30:41:
c1:66:bb:ba:c6:c2:1e:7d:d3:06:fa:ee:29:25:e0:
c9:08:31:78:e1:9d:66:a1:c2:e0:ce:2d:13:e8:28:
31:dd:f3:48:4b:15:55:d0:d0:b6:47:40:e5:07:5b:
15:73:10:0b:e8:6d:25:95:b3:7a:d2:3b:f0:7a:78:
1f:57:29:9b:f5:59:0c:00:bb:48:90:f6:16:9f:c6:
59:ee:0b:92:a5:99:a8:2c:a1:0f:92:bc:9f:6c:97:
46:85:e0:7e:14:c6:f7:f9:48:9b:54:cb:a8:d1:3b:
ef:d5:06:bd:57:bf:12:e7:64:21:52:b2:6c:1e:7e:
67:d6:cd:9c:b3:2b:24:42:4c:ac:d4:82:a1:50:25:
94:f3:8a:eb:b8:68:4e:bb:3d:43:bd:89:86:0a:96:
9d:13:f2:0a:04:5b:72:51:e9:41:03:ba:f4:d0:28:
ab:a6:4e:d9:a7:3c:34:a3:15:3b:c1:32:df:ef:d5:
6a:70:ab:cb:e2:0d:4d:ea:b5:76:39:d5:39:5c:e0:
64:e6:67:a3:fc:97:9c:23:03:11:09:41:6c:db:5d:
aa:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:79:C2:E4:C2:05:F6:C6:7E:FD:2D:34:8F:46:6C:72:03:5C:CC:A1
X509v3 Authority Key Identifier:
keyid:74:23:0D:14:2E:EC:7F:6A:99:B0:DB:40:96:F9:3A:04:20:48:3F:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dCMNFC7sf2qZsNtAlvk6BCBIP-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/697564-0025-4f92-8dfd-ce1c03400d4d/1/dCMNFC7sf2qZsNtAlvk6BCBIP-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/697564-0025-4f92-8dfd-ce1c03400d4d/1/dCMNFC7sf2qZsNtAlvk6BCBIP-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:7d:ff:23:a6:fb:1c:9a:bc:75:a8:9c:bc:3e:41:32:4e:56:
d6:25:0e:00:90:45:91:82:48:6e:a2:1c:26:0e:c6:46:27:9a:
38:5a:13:eb:da:5e:dd:8b:0e:42:45:84:f4:f9:34:84:8f:6f:
3e:2b:fb:c0:ab:14:0a:10:6a:32:7f:ef:ac:b7:3c:89:0b:ec:
6f:2c:91:72:28:17:a6:77:d4:96:2c:1a:85:76:23:ac:d3:32:
89:bd:ea:63:68:99:45:a2:c7:d3:84:a2:1d:85:6e:6c:04:7e:
e5:e2:02:02:18:60:47:67:8f:3c:18:1d:b3:c8:ac:d6:db:d8:
20:07:38:5f:44:62:59:c7:db:34:09:ef:69:7d:de:b9:bb:ee:
85:8b:cb:c0:30:9b:ab:9f:ec:0c:5b:50:92:ba:6e:c7:70:4b:
e2:b8:8d:d6:c0:b0:09:1c:55:38:ad:5a:af:c2:9b:18:47:7c:
76:34:7f:1e:8d:d4:a8:1b:25:53:53:37:95:4f:90:f6:2c:f4:
df:8c:f3:89:92:3b:68:98:68:99:22:d2:ac:6c:ee:2f:c8:13:
15:f3:e9:4d:fa:8b:48:45:43:02:88:a8:f5:22:a2:1c:d7:6f:
d0:a3:33:91:da:ff:4b:64:bd:c5:01:b4:3c:d1:03:e9:86:a5:
90:67:3c:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:17:35 2025 by rpki-client