
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/6e1003-819a-4392-938a-5ae53c21b8cd/1/rD5tWdR-c37cMaZfMQUUzUuV04c.mft
File: rD5tWdR-c37cMaZfMQUUzUuV04c.mft (raw, json)
Hash identifier: hotdSWAx9dofwbhb7P0u4VxfWr2lJ55d34ZNDpl00dc=
Subject key identifier: 9B:57:D2:B5:5D:C6:B2:CC:81:07:DC:02:D9:35:F4:46:8A:D9:70:85
Authority key identifier: AC:3E:6D:59:D4:7E:73:7E:DC:31:A6:5F:31:05:14:CD:4B:95:D3:87
Certificate issuer: /CN=ac3e6d59d47e737edc31a65f310514cd4b95d387
Certificate serial: 01987DF860D11647027F8BADA1EC273B41CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rD5tWdR-c37cMaZfMQUUzUuV04c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/6e1003-819a-4392-938a-5ae53c21b8cd/1/rD5tWdR-c37cMaZfMQUUzUuV04c.mft
Manifest number: 1617
Signing time: Wed 06 Aug 2025 06:01:26 +0000
Manifest this update: Wed 06 Aug 2025 06:01:26 +0000
Manifest next update: Thu 07 Aug 2025 06:01:26 +0000
Files and hashes: 1: rD5tWdR-c37cMaZfMQUUzUuV04c.crl (hash: zQSDm3PUqO3CHcOPH87ZvjOmWosTidxps/9CO2OMQz4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/6e1003-819a-4392-938a-5ae53c21b8cd/1/rD5tWdR-c37cMaZfMQUUzUuV04c.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/6e1003-819a-4392-938a-5ae53c21b8cd/1/rD5tWdR-c37cMaZfMQUUzUuV04c.mft
rsync://rpki.ripe.net/repository/DEFAULT/rD5tWdR-c37cMaZfMQUUzUuV04c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 06:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:f8:60:d1:16:47:02:7f:8b:ad:a1:ec:27:3b:41:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac3e6d59d47e737edc31a65f310514cd4b95d387
Validity
Not Before: Aug 6 06:01:26 2025 GMT
Not After : Aug 7 06:01:26 2025 GMT
Subject: CN=9b57d2b55dc6b2cc8107dc02d935f4468ad97085
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:15:0b:59:ee:fe:dd:0c:04:57:5f:d4:5b:9a:
4c:6a:32:80:06:50:7a:96:cc:38:bd:1a:04:2e:a3:
aa:b4:80:a0:81:01:54:43:f0:38:ef:39:a0:50:48:
86:8c:1a:49:4b:e6:f1:27:06:24:a6:96:88:17:54:
f5:f3:91:7d:5f:3c:a0:a6:37:87:53:50:1f:24:1b:
61:c5:f3:14:e8:f5:8c:95:11:94:17:f2:43:55:4f:
bc:fd:31:08:6b:e0:d8:c7:bc:e2:9f:0d:62:fd:10:
3f:f1:32:b4:44:8c:b6:7d:34:f4:39:bc:dc:dc:15:
fe:cd:e0:a7:11:3d:65:e8:9c:14:17:1b:ec:61:65:
38:30:de:6d:7a:89:ed:d8:54:65:f6:f8:1d:01:ff:
f9:ea:1a:16:c8:68:2f:c3:20:d3:c4:33:4a:21:c3:
81:a0:db:68:7e:0c:3f:67:06:0e:71:9b:79:3d:03:
4f:68:14:af:2d:b1:e6:59:1a:46:41:b0:ba:61:19:
68:3d:9b:19:74:1d:c6:71:20:ad:3d:e6:4c:54:91:
1b:62:f2:3a:0d:1e:69:0a:7e:13:71:89:d4:dd:1f:
00:16:ad:d3:a2:5d:65:9a:2b:82:0b:f4:59:e8:9c:
b9:c2:f3:c5:15:c0:69:86:ca:8b:fb:d7:4b:c4:20:
50:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:57:D2:B5:5D:C6:B2:CC:81:07:DC:02:D9:35:F4:46:8A:D9:70:85
X509v3 Authority Key Identifier:
keyid:AC:3E:6D:59:D4:7E:73:7E:DC:31:A6:5F:31:05:14:CD:4B:95:D3:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rD5tWdR-c37cMaZfMQUUzUuV04c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/6e1003-819a-4392-938a-5ae53c21b8cd/1/rD5tWdR-c37cMaZfMQUUzUuV04c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/6e1003-819a-4392-938a-5ae53c21b8cd/1/rD5tWdR-c37cMaZfMQUUzUuV04c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:28:3e:5b:d2:8c:45:84:65:ab:be:33:8e:10:3d:5a:ea:e6:
ad:4f:ef:01:09:1d:52:15:46:9e:5b:7a:48:93:fa:67:6e:09:
d9:bd:e8:16:79:42:be:23:72:2d:3f:10:19:23:c5:02:ec:38:
86:36:bd:39:56:b5:a6:f8:e8:8e:d5:ba:2f:2d:85:b3:7c:df:
15:c8:5e:88:33:fe:f4:0d:ad:fc:31:ab:ae:1a:a3:fa:0f:da:
d4:23:a0:28:4b:67:fd:35:76:9b:c7:b6:ac:1f:dd:92:0c:13:
8d:33:c1:79:ab:10:e8:34:6d:55:c3:0c:0b:58:3a:9f:88:ed:
48:a3:1d:10:30:58:10:56:25:38:54:ee:f5:15:a6:f7:39:0d:
fa:fb:c0:b6:32:08:2e:d6:ee:4b:08:c1:19:43:c0:84:dd:54:
e5:39:a7:86:e2:19:90:57:3d:93:de:8a:14:da:10:c2:84:9e:
cc:49:fc:50:74:d3:01:39:05:c5:2a:86:dd:38:3a:eb:0d:b3:
9d:44:a5:22:c0:31:d3:4f:5b:b7:ae:5d:d5:2e:aa:aa:6a:c2:
c6:d5:ee:98:72:e8:b5:f1:8c:ff:f7:af:97:a6:57:33:dc:5c:
fc:f1:ef:43:3e:5a:ba:7e:2b:b0:b8:8c:31:10:69:a5:06:b2:
c6:bb:ea:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 11:25:33 2025 by rpki-client