Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/d531a8-02ae-4b0b-8f44-5287698aff3c/1/dLCDZQKVGJ8AmqdMEsvGHuI_p1M.mft
File: dLCDZQKVGJ8AmqdMEsvGHuI_p1M.mft (raw, json)
Hash identifier: NyTQ/TCObY/BF9dlI6pUFBfDK9c6Gs33jTnRpFO0LX0=
Subject key identifier: E2:D8:AA:4C:A8:69:BB:82:82:9A:57:28:1B:64:66:F3:B6:F5:AA:29
Authority key identifier: 74:B0:83:65:02:95:18:9F:00:9A:A7:4C:12:CB:C6:1E:E2:3F:A7:53
Certificate issuer: /CN=74b083650295189f009aa74c12cbc61ee23fa753
Certificate serial: 019873E32A46475250E90C86CC70CF2C0406
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dLCDZQKVGJ8AmqdMEsvGHuI_p1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/d531a8-02ae-4b0b-8f44-5287698aff3c/1/dLCDZQKVGJ8AmqdMEsvGHuI_p1M.mft
Manifest number: 1615
Signing time: Mon 04 Aug 2025 07:02:03 +0000
Manifest this update: Mon 04 Aug 2025 07:02:03 +0000
Manifest next update: Tue 05 Aug 2025 07:02:03 +0000
Files and hashes: 1: dLCDZQKVGJ8AmqdMEsvGHuI_p1M.crl (hash: qbbVupnHtzuiskCezZueCfnAo10AQoWbvl2yJM6pK/g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/d531a8-02ae-4b0b-8f44-5287698aff3c/1/dLCDZQKVGJ8AmqdMEsvGHuI_p1M.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/d531a8-02ae-4b0b-8f44-5287698aff3c/1/dLCDZQKVGJ8AmqdMEsvGHuI_p1M.mft
rsync://rpki.ripe.net/repository/DEFAULT/dLCDZQKVGJ8AmqdMEsvGHuI_p1M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 07:02:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:2a:46:47:52:50:e9:0c:86:cc:70:cf:2c:04:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74b083650295189f009aa74c12cbc61ee23fa753
Validity
Not Before: Aug 4 07:02:03 2025 GMT
Not After : Aug 5 07:02:03 2025 GMT
Subject: CN=e2d8aa4ca869bb82829a57281b6466f3b6f5aa29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:18:00:ff:71:bc:a7:5f:f0:25:c8:d0:01:9e:
ff:26:e8:fe:f6:dc:7e:03:6d:8d:1a:35:4d:e4:e0:
7b:67:72:d9:e9:39:9c:fb:56:3b:c5:4c:fe:f7:a7:
f9:41:25:46:cf:b0:5b:21:7f:89:4e:bc:23:2a:90:
19:65:b7:e0:16:33:68:53:bd:2e:e0:0c:40:3f:99:
b7:d5:43:d1:97:1a:f8:44:a7:64:8f:73:a1:26:f6:
f5:93:b7:09:20:cd:57:0b:ae:9e:88:7f:dc:7f:2f:
ae:bc:a8:ed:e3:65:11:08:75:3e:c3:03:2d:68:b2:
d3:d1:45:c1:6a:ce:61:24:8f:2c:3f:2d:52:ef:42:
81:bc:19:8b:17:0d:77:45:a7:3b:d8:62:bf:36:d3:
e2:af:33:c0:17:16:26:dd:09:71:bb:2a:3d:56:ef:
1f:dc:2d:03:19:72:d8:5f:5f:c6:2d:1c:47:f6:78:
ef:62:57:d3:e7:fd:12:86:1c:06:38:3e:eb:52:d8:
79:bf:dd:0e:05:2f:dd:9c:97:bb:40:7c:0b:0d:2d:
fa:67:37:d1:cc:d1:c0:62:76:9a:bb:fd:22:21:94:
fa:eb:7c:40:5a:ec:5d:93:84:99:89:22:91:5d:30:
d0:93:fc:1e:52:9d:47:19:b2:a5:eb:62:2c:d8:ac:
e2:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:D8:AA:4C:A8:69:BB:82:82:9A:57:28:1B:64:66:F3:B6:F5:AA:29
X509v3 Authority Key Identifier:
keyid:74:B0:83:65:02:95:18:9F:00:9A:A7:4C:12:CB:C6:1E:E2:3F:A7:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dLCDZQKVGJ8AmqdMEsvGHuI_p1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d531a8-02ae-4b0b-8f44-5287698aff3c/1/dLCDZQKVGJ8AmqdMEsvGHuI_p1M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d531a8-02ae-4b0b-8f44-5287698aff3c/1/dLCDZQKVGJ8AmqdMEsvGHuI_p1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:1b:28:ff:cc:0e:0e:a1:95:7c:d9:40:71:49:47:a2:55:63:
0b:41:f3:ab:83:79:14:08:76:42:17:69:ba:d7:52:46:f4:88:
16:44:82:0e:2d:fa:e2:dc:a4:2a:64:c2:65:d9:45:69:44:68:
89:71:22:a8:21:10:44:61:6d:3c:4b:c0:12:c9:8f:bb:c6:88:
eb:9f:22:2e:90:63:46:c2:a3:e5:5f:b1:4a:39:c1:34:12:3b:
3b:78:89:d8:2d:ed:51:19:f9:59:3e:de:1d:65:ca:4d:2d:19:
55:7b:b8:e4:0f:19:d3:fe:c2:b7:9a:00:d1:83:ac:76:c4:22:
b2:96:13:7a:f7:d0:ba:8a:96:cb:82:6b:d7:73:30:ed:94:69:
9e:ea:ee:03:a6:1d:e3:b2:0e:b8:4a:0e:4d:be:41:33:3c:81:
4c:76:f5:0b:da:37:40:d3:58:8e:99:15:b9:7e:38:b6:34:35:
fd:54:90:7c:49:da:48:51:e2:fc:a5:50:f2:c3:bf:f3:f0:38:
f3:1d:7c:95:7f:5f:e9:16:97:16:c1:fd:0e:54:1c:0f:d5:02:
81:0e:60:5d:1c:fe:06:6d:39:95:b0:ca:9f:0a:d2:d1:69:58:
df:a4:46:ba:f3:c1:96:a0:b4:f3:b7:0d:b5:f7:10:f2:22:16:
3d:86:73:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:09:06 2025 by rpki-client