Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/2f4796-4512-464d-b9de-880f8238fe0b/1/Dp842O8xOufFpwiU9m6HGjMYA_8.mft
File: Dp842O8xOufFpwiU9m6HGjMYA_8.mft (raw, json)
Hash identifier: wAQc2OUtE7efkxm25qHWtSGR/eHr/tvJ5GUjjlJ1Qao=
Subject key identifier: 71:C8:FD:90:BA:74:48:96:64:9D:1E:04:03:28:9B:A1:02:03:68:5F
Authority key identifier: 0E:9F:38:D8:EF:31:3A:E7:C5:A7:08:94:F6:6E:87:1A:33:18:03:FF
Certificate issuer: /CN=0e9f38d8ef313ae7c5a70894f66e871a331803ff
Certificate serial: 019894B8406BDBF4A4F028F58D7CFE3B9484
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dp842O8xOufFpwiU9m6HGjMYA_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/2f4796-4512-464d-b9de-880f8238fe0b/1/Dp842O8xOufFpwiU9m6HGjMYA_8.mft
Manifest number: 1625
Signing time: Sun 10 Aug 2025 16:02:39 +0000
Manifest this update: Sun 10 Aug 2025 16:02:39 +0000
Manifest next update: Mon 11 Aug 2025 16:02:39 +0000
Files and hashes: 1: Dp842O8xOufFpwiU9m6HGjMYA_8.crl (hash: aGCxLB8FSq8uOzQKezuEjttBjUB2psezPWpP0zg4qZg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/2f4796-4512-464d-b9de-880f8238fe0b/1/Dp842O8xOufFpwiU9m6HGjMYA_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/2f4796-4512-464d-b9de-880f8238fe0b/1/Dp842O8xOufFpwiU9m6HGjMYA_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dp842O8xOufFpwiU9m6HGjMYA_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 16:02:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:94:b8:40:6b:db:f4:a4:f0:28:f5:8d:7c:fe:3b:94:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e9f38d8ef313ae7c5a70894f66e871a331803ff
Validity
Not Before: Aug 10 16:02:39 2025 GMT
Not After : Aug 11 16:02:39 2025 GMT
Subject: CN=71c8fd90ba744896649d1e0403289ba10203685f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:af:5e:7c:ba:5e:48:3f:49:a6:a9:78:27:76:
a4:1f:ce:fd:5e:27:75:78:bc:0b:72:8d:37:bc:bc:
3e:2f:c8:98:01:c5:75:f0:dd:b7:e1:4f:d3:66:aa:
1d:f7:4a:d0:a7:42:2a:b2:cb:aa:bf:64:2f:63:c0:
36:38:7c:e1:e0:a3:f6:c4:40:20:b1:1c:9b:a4:81:
1d:4c:22:df:da:01:b4:f1:da:7f:76:ce:44:ee:df:
d1:6f:2f:fb:ea:35:d8:0a:15:d3:8d:27:f3:12:6e:
b2:7d:3c:74:f9:b1:ce:5a:7e:cc:f7:06:dc:7e:1b:
fc:f5:26:cd:ca:23:8e:b7:c0:60:fe:69:80:30:e5:
f6:e7:57:50:de:03:9e:f7:ea:10:4c:a6:f2:88:c9:
45:f8:48:a3:9e:8d:d3:02:1b:98:23:b4:45:15:e1:
c8:b0:8a:a6:0b:6d:c3:b6:10:47:d0:ab:61:16:e4:
68:7b:8a:a2:04:72:3a:c7:5a:1f:71:37:a1:16:be:
a1:36:ed:5d:cd:28:ff:d7:2b:a5:f3:e3:0b:ea:f1:
ad:23:ee:e0:eb:16:cf:e1:1d:41:05:66:f3:06:d0:
fc:35:e9:e1:c1:41:7c:c9:a6:bf:dd:24:69:4e:43:
cd:14:8b:a5:2e:fb:9a:7d:10:d9:d6:95:96:b9:d4:
4d:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:C8:FD:90:BA:74:48:96:64:9D:1E:04:03:28:9B:A1:02:03:68:5F
X509v3 Authority Key Identifier:
keyid:0E:9F:38:D8:EF:31:3A:E7:C5:A7:08:94:F6:6E:87:1A:33:18:03:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dp842O8xOufFpwiU9m6HGjMYA_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/2f4796-4512-464d-b9de-880f8238fe0b/1/Dp842O8xOufFpwiU9m6HGjMYA_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/2f4796-4512-464d-b9de-880f8238fe0b/1/Dp842O8xOufFpwiU9m6HGjMYA_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:b5:70:70:10:51:85:76:91:3e:4a:e1:cc:67:21:10:7b:e9:
0d:ac:52:17:6b:98:83:53:41:2f:e6:40:e8:af:ef:fc:d2:56:
42:43:62:67:a8:1b:84:6a:16:fc:c8:cc:ba:3e:53:f1:b7:76:
48:23:38:6c:2b:cc:36:a2:22:03:27:0b:e6:8e:39:1b:01:65:
5f:5a:ba:90:b4:30:a8:d3:f2:3a:06:be:a1:5e:c8:bf:ca:12:
e0:69:3f:08:0b:0e:f6:97:c6:e6:ac:2a:08:bb:d9:06:fd:8b:
b3:e0:b6:c1:7d:c0:5f:84:86:e7:30:0c:6e:92:3f:22:c4:cd:
df:cd:61:2b:8a:98:c3:38:a1:c4:7a:c3:f7:3d:2e:29:ac:fb:
3b:44:6b:72:5e:5d:a2:6a:f8:e6:79:65:ea:62:32:21:30:bd:
92:c1:05:9e:23:96:f6:8c:42:92:79:10:ab:a8:a4:55:ea:60:
d8:cc:56:66:ef:f0:22:77:91:63:c7:1b:9e:a9:d2:8f:9a:fa:
0a:13:95:71:54:eb:2c:a4:e3:83:9b:74:46:af:96:55:46:e6:
0d:5a:d6:0b:e6:fe:02:dd:67:92:e0:d8:3d:0b:08:3d:f0:eb:
1a:03:e6:f3:e8:9e:f6:c2:96:08:a3:b1:73:1f:28:47:f3:30:
2a:9a:07:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 18:15:29 2025 by rpki-client