Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/6fd7e5-c2c9-490b-95e9-5faec5abaf1b/1/dXLJoQjOPeUtFuIR6AyV5cW1TIQ.mft
File: dXLJoQjOPeUtFuIR6AyV5cW1TIQ.mft (raw, json)
Hash identifier: fVN3iwA/jy/HfIuMi9EOqEDHCpKmE14QHQl+P9vETj8=
Subject key identifier: 13:30:B2:45:67:72:D3:91:E6:01:EB:7A:3A:C1:1D:28:08:8D:E3:36
Authority key identifier: 75:72:C9:A1:08:CE:3D:E5:2D:16:E2:11:E8:0C:95:E5:C5:B5:4C:84
Certificate issuer: /CN=7572c9a108ce3de52d16e211e80c95e5c5b54c84
Certificate serial: 019873E3FD56A7A10C7652F6CD15D1567838
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dXLJoQjOPeUtFuIR6AyV5cW1TIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/6fd7e5-c2c9-490b-95e9-5faec5abaf1b/1/dXLJoQjOPeUtFuIR6AyV5cW1TIQ.mft
Manifest number: 10CC
Signing time: Mon 04 Aug 2025 07:02:58 +0000
Manifest this update: Mon 04 Aug 2025 07:02:58 +0000
Manifest next update: Tue 05 Aug 2025 07:02:58 +0000
Files and hashes: 1: dXLJoQjOPeUtFuIR6AyV5cW1TIQ.crl (hash: xY2WNJINnDQ5xc+98t6trYRG96ZJx+CG2qYe9avUq/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/6fd7e5-c2c9-490b-95e9-5faec5abaf1b/1/dXLJoQjOPeUtFuIR6AyV5cW1TIQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/6fd7e5-c2c9-490b-95e9-5faec5abaf1b/1/dXLJoQjOPeUtFuIR6AyV5cW1TIQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/dXLJoQjOPeUtFuIR6AyV5cW1TIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 07:02:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:fd:56:a7:a1:0c:76:52:f6:cd:15:d1:56:78:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7572c9a108ce3de52d16e211e80c95e5c5b54c84
Validity
Not Before: Aug 4 07:02:58 2025 GMT
Not After : Aug 5 07:02:58 2025 GMT
Subject: CN=1330b2456772d391e601eb7a3ac11d28088de336
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:14:ad:d3:13:38:10:13:2f:c4:f7:df:f1:e3:
aa:01:27:c1:1e:b1:8b:15:95:07:51:31:16:bd:68:
4c:32:bb:3c:3d:db:55:66:32:78:d6:59:06:59:67:
c4:65:cd:68:e6:a9:17:c0:61:ef:9f:f3:15:42:9e:
a3:2f:fe:8f:a3:f4:07:fd:67:72:a6:80:ec:d3:8f:
e8:89:33:ce:19:92:39:88:24:42:0d:0c:78:67:01:
19:43:4c:30:fa:7b:32:54:24:95:4b:2c:8c:c3:20:
70:9a:04:8d:ba:e0:52:17:8b:19:25:24:33:d9:83:
ce:89:ac:30:b1:d8:b5:5e:f4:a3:eb:e6:4c:ff:8d:
4a:e5:69:c1:b5:f2:c8:76:20:50:36:46:22:33:80:
96:a9:4f:f3:ca:a8:08:46:b8:92:23:37:51:44:41:
91:d2:ca:e7:e2:3c:c3:47:4b:00:e9:7c:a0:6c:dd:
a9:28:a7:74:11:95:48:51:f0:dd:20:69:bd:99:8c:
70:e9:71:82:42:ff:6d:4b:0d:cc:ac:0d:47:cb:94:
13:53:fe:54:d9:7e:c7:67:4d:5b:bd:77:0a:0b:75:
60:ff:14:fb:54:9c:da:0e:c2:63:e0:0b:e8:f3:6d:
39:0e:52:4b:33:97:17:96:f1:7f:d4:03:bb:1c:88:
b5:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:30:B2:45:67:72:D3:91:E6:01:EB:7A:3A:C1:1D:28:08:8D:E3:36
X509v3 Authority Key Identifier:
keyid:75:72:C9:A1:08:CE:3D:E5:2D:16:E2:11:E8:0C:95:E5:C5:B5:4C:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dXLJoQjOPeUtFuIR6AyV5cW1TIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/6fd7e5-c2c9-490b-95e9-5faec5abaf1b/1/dXLJoQjOPeUtFuIR6AyV5cW1TIQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/6fd7e5-c2c9-490b-95e9-5faec5abaf1b/1/dXLJoQjOPeUtFuIR6AyV5cW1TIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e0:7d:2c:1a:ec:16:ee:c9:d3:d8:62:c5:a0:de:a2:13:18:22:
7f:cb:51:0f:cd:39:16:e0:ea:6d:08:2c:75:af:75:74:46:3c:
e5:97:de:66:1f:08:ca:0c:5b:67:e4:00:68:a4:3a:31:1e:9c:
86:a4:b3:fa:2d:36:6a:9f:a4:18:39:c9:18:be:8b:3d:a0:f2:
68:5c:0a:18:3c:aa:e5:dd:09:19:ab:6c:51:10:ce:56:31:67:
be:0b:1e:06:a9:56:e9:82:dc:d3:1f:9a:a4:5f:19:31:11:99:
1d:05:2e:d5:00:c2:64:6b:a7:2b:21:65:4a:f2:19:d3:14:81:
64:78:ad:b9:f6:b7:64:db:5c:09:fb:4b:5c:32:15:70:bb:c2:
ed:6a:8d:15:09:92:51:f2:6c:22:34:12:f7:05:8d:6e:1b:c3:
e1:02:cb:ce:5f:fc:4c:02:33:3d:22:67:4c:f3:b1:36:52:6a:
9a:11:cf:95:2f:5e:e1:63:c6:91:06:22:dc:df:6e:ae:f2:00:
ea:7c:db:61:c0:77:09:98:c0:c2:e4:ca:de:fc:88:0e:e1:4d:
5d:cc:d2:45:66:2f:c1:50:c4:bf:1e:ba:85:8f:a4:29:34:b7:
67:12:1f:4c:06:05:4f:7f:94:1b:f4:e2:95:99:bf:ab:fe:08:
76:68:9f:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:36:55 2025 by rpki-client