Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/53b489-ab48-49fe-9d01-a0e37f25a515/1/DIdKX1JzTiYOe_pNRRFK3ZJ341M.mft
File: DIdKX1JzTiYOe_pNRRFK3ZJ341M.mft (raw, json)
Hash identifier: TGrSF+zexqv/N1ckMFAfEhxvcYOBajIYgXaYAGWewa4=
Subject key identifier: 7E:A4:65:A1:B8:7A:4A:E1:DB:A6:84:FC:D2:5D:3B:50:EB:F7:E1:36
Authority key identifier: 0C:87:4A:5F:52:73:4E:26:0E:7B:FA:4D:45:11:4A:DD:92:77:E3:53
Certificate issuer: /CN=0c874a5f52734e260e7bfa4d45114add9277e353
Certificate serial: 01988355353590B3BAFE2E16DC7AC688417A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DIdKX1JzTiYOe_pNRRFK3ZJ341M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/53b489-ab48-49fe-9d01-a0e37f25a515/1/DIdKX1JzTiYOe_pNRRFK3ZJ341M.mft
Manifest number: 080B
Signing time: Thu 07 Aug 2025 07:00:56 +0000
Manifest this update: Thu 07 Aug 2025 07:00:56 +0000
Manifest next update: Fri 08 Aug 2025 07:00:56 +0000
Files and hashes: 1: DIdKX1JzTiYOe_pNRRFK3ZJ341M.crl (hash: LLxRK5GScHM0OO5ZKQunq2zPK2qLxfyCYjLcIgUB+yo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/53b489-ab48-49fe-9d01-a0e37f25a515/1/DIdKX1JzTiYOe_pNRRFK3ZJ341M.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/53b489-ab48-49fe-9d01-a0e37f25a515/1/DIdKX1JzTiYOe_pNRRFK3ZJ341M.mft
rsync://rpki.ripe.net/repository/DEFAULT/DIdKX1JzTiYOe_pNRRFK3ZJ341M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 07:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:83:55:35:35:90:b3:ba:fe:2e:16:dc:7a:c6:88:41:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c874a5f52734e260e7bfa4d45114add9277e353
Validity
Not Before: Aug 7 07:00:56 2025 GMT
Not After : Aug 8 07:00:56 2025 GMT
Subject: CN=7ea465a1b87a4ae1dba684fcd25d3b50ebf7e136
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ca:19:f7:22:97:a0:9f:f5:f7:10:98:c8:b9:
c0:65:f9:3e:1a:5b:da:e7:ba:78:ff:41:79:2b:d1:
60:18:0f:df:6b:6f:74:54:e9:ab:a3:a5:88:68:5d:
97:08:4e:63:0d:9c:6c:89:1b:63:b9:2f:fb:f0:13:
84:63:f7:5f:a5:af:cb:6b:d3:36:bf:ff:02:ea:20:
7d:33:df:9f:3b:f4:1a:b2:17:16:b2:0f:40:18:79:
0d:ad:6d:f4:90:ff:82:6f:60:d8:7c:ab:cb:0f:0f:
66:5d:6a:aa:55:32:60:c4:41:24:27:0b:4b:dd:2e:
09:d2:59:8b:fe:83:04:bf:db:88:f2:91:a9:0c:c0:
d4:61:1f:b9:78:95:e9:1d:9f:19:4b:c7:ac:73:5e:
dd:da:fa:00:36:5b:9e:db:ef:f6:5b:b0:e0:c1:ab:
00:a5:15:91:20:97:a1:d8:10:76:cc:80:b1:02:60:
18:cf:55:15:fd:f3:7a:90:7b:76:98:72:90:52:e0:
78:a4:e8:e4:1e:c0:f6:6c:67:1e:8e:a3:0a:e2:f6:
59:58:5b:6c:e3:89:b6:aa:64:7f:93:cd:16:82:5c:
ac:e0:f3:72:2e:57:5a:90:1d:83:c6:e4:d5:57:7a:
ae:70:19:40:2f:85:11:64:22:08:94:be:5c:af:e0:
ba:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:A4:65:A1:B8:7A:4A:E1:DB:A6:84:FC:D2:5D:3B:50:EB:F7:E1:36
X509v3 Authority Key Identifier:
keyid:0C:87:4A:5F:52:73:4E:26:0E:7B:FA:4D:45:11:4A:DD:92:77:E3:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DIdKX1JzTiYOe_pNRRFK3ZJ341M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/53b489-ab48-49fe-9d01-a0e37f25a515/1/DIdKX1JzTiYOe_pNRRFK3ZJ341M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/53b489-ab48-49fe-9d01-a0e37f25a515/1/DIdKX1JzTiYOe_pNRRFK3ZJ341M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:cc:e3:6d:85:ac:f6:cc:b1:9e:0c:a1:4a:30:9a:0a:9d:43:
70:76:4c:eb:19:7a:bf:54:df:91:fd:1a:e5:e2:55:68:3c:ca:
81:c2:db:73:73:a3:ee:87:c6:54:ec:37:65:fb:e4:5d:bc:bf:
8f:8c:2c:43:3a:21:a4:ca:a8:32:84:73:5b:25:19:17:5b:90:
71:88:3a:68:7e:7f:8f:90:08:a7:d2:7d:4a:35:09:14:3f:31:
88:54:c1:43:a1:f2:a4:21:19:76:c8:62:ce:e1:8e:89:af:e3:
28:c0:aa:31:22:0c:f4:db:63:3e:19:3c:eb:c8:c4:7b:67:a9:
c9:8c:43:c3:ca:9e:27:7a:5c:23:ee:48:ab:6a:a1:c0:79:ba:
1f:78:62:47:aa:80:5a:35:b0:65:c2:9f:aa:3e:53:c9:1a:cc:
3e:15:37:b2:4a:f9:75:d7:db:0b:d5:16:24:c6:14:52:02:50:
d2:34:56:8f:a1:40:41:7a:95:e5:eb:ac:c6:77:d3:78:d6:00:
3f:f8:c4:8c:ac:a1:b1:49:bf:b6:17:f0:c9:a0:a3:18:2a:3b:
0b:02:a3:ff:e3:e3:07:2d:f7:9e:aa:61:d9:28:61:4a:cf:db:
5c:86:34:50:3d:00:a3:15:3e:df:fe:f9:b8:41:30:2d:28:87:
1e:d2:ae:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 11:07:13 2025 by rpki-client