Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/cf3c6e-4836-4415-91d4-f8bac4fb8f8a/1/DDvIzqseeTohA5zQseVHLHJkH2g.mft
File: DDvIzqseeTohA5zQseVHLHJkH2g.mft (raw, json)
Hash identifier: FRO94vSLnb61dsq7/12WRTFZXwB4pzFbYhTRa5A4MCE=
Subject key identifier: B1:49:C5:47:AF:64:20:24:A7:83:C9:01:96:6C:09:8C:6C:0E:A6:ED
Authority key identifier: 0C:3B:C8:CE:AB:1E:79:3A:21:03:9C:D0:B1:E5:47:2C:72:64:1F:68
Certificate issuer: /CN=0c3bc8ceab1e793a21039cd0b1e5472c72641f68
Certificate serial: 0198843126584F3F7A7120730D591F3CE55D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DDvIzqseeTohA5zQseVHLHJkH2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/cf3c6e-4836-4415-91d4-f8bac4fb8f8a/1/DDvIzqseeTohA5zQseVHLHJkH2g.mft
Manifest number: 161D
Signing time: Thu 07 Aug 2025 11:01:10 +0000
Manifest this update: Thu 07 Aug 2025 11:01:10 +0000
Manifest next update: Fri 08 Aug 2025 11:01:10 +0000
Files and hashes: 1: DDvIzqseeTohA5zQseVHLHJkH2g.crl (hash: NCN8+2OPbJJ2Ke9Xz7w+aIVfVabcremtImOjGDYoxbc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/cf3c6e-4836-4415-91d4-f8bac4fb8f8a/1/DDvIzqseeTohA5zQseVHLHJkH2g.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/cf3c6e-4836-4415-91d4-f8bac4fb8f8a/1/DDvIzqseeTohA5zQseVHLHJkH2g.mft
rsync://rpki.ripe.net/repository/DEFAULT/DDvIzqseeTohA5zQseVHLHJkH2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:84:31:26:58:4f:3f:7a:71:20:73:0d:59:1f:3c:e5:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c3bc8ceab1e793a21039cd0b1e5472c72641f68
Validity
Not Before: Aug 7 11:01:10 2025 GMT
Not After : Aug 8 11:01:10 2025 GMT
Subject: CN=b149c547af642024a783c901966c098c6c0ea6ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:74:31:f6:2a:8d:64:3a:e0:8d:df:a2:08:39:
26:f7:ac:7f:3b:c1:9b:7c:26:0f:fe:ad:45:aa:8f:
84:82:f8:be:e3:ce:72:da:68:4d:fe:04:17:e8:f9:
a2:04:69:af:c2:bb:16:16:a0:65:8b:58:91:c8:38:
f9:1b:8f:2f:51:32:ef:51:c9:8a:f6:7f:8d:c1:04:
5d:e4:c9:c2:1c:59:81:7c:0a:4d:a2:29:0b:3b:8c:
41:7a:bd:49:31:41:bb:be:d2:13:6f:00:b7:36:5a:
6d:8f:79:6e:66:a4:56:ad:cb:81:30:cf:80:c7:d5:
44:22:3c:b9:40:3f:53:70:87:60:dd:c3:2d:3a:33:
d1:30:a0:82:88:9e:20:99:10:0a:40:c9:fe:6e:3d:
11:8d:a8:7a:bd:01:96:11:cc:ac:ad:75:4f:c6:65:
a6:ce:4f:3a:12:ed:ea:cb:6f:f4:0b:bc:81:8c:be:
34:08:ac:f0:38:20:33:37:0b:c0:db:bf:78:03:63:
6c:e5:44:cc:3e:9c:b5:35:ca:50:25:b1:d9:e1:3c:
06:c2:2d:54:ee:5d:69:a0:9a:c0:c5:88:08:bf:7f:
96:2d:83:1d:fc:5b:47:5d:cd:77:b1:41:02:92:cb:
e7:82:d8:ef:1c:97:36:ed:96:0c:6c:bb:01:e4:dd:
1a:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:49:C5:47:AF:64:20:24:A7:83:C9:01:96:6C:09:8C:6C:0E:A6:ED
X509v3 Authority Key Identifier:
keyid:0C:3B:C8:CE:AB:1E:79:3A:21:03:9C:D0:B1:E5:47:2C:72:64:1F:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DDvIzqseeTohA5zQseVHLHJkH2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/cf3c6e-4836-4415-91d4-f8bac4fb8f8a/1/DDvIzqseeTohA5zQseVHLHJkH2g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/cf3c6e-4836-4415-91d4-f8bac4fb8f8a/1/DDvIzqseeTohA5zQseVHLHJkH2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:2e:b4:f1:d5:1a:5b:20:bb:26:ca:01:60:d4:47:d0:59:1d:
87:b9:67:c1:89:13:1b:fa:3c:df:1a:9e:b8:3b:f9:30:7f:36:
30:2b:97:d3:23:46:4a:c5:78:0f:fd:6d:ea:37:7b:7b:81:3c:
ba:ca:a1:9a:7a:14:8d:a4:40:ea:38:5d:d4:46:d9:a4:c6:1b:
b5:b8:6a:07:66:df:5d:09:4c:c7:d0:65:e9:c7:c8:d4:56:2c:
f0:9a:67:e1:4a:ce:2e:b8:02:34:fd:4c:31:22:f7:e8:67:e9:
d4:43:4d:32:49:70:be:25:7e:18:bc:6c:c5:a3:92:bb:3a:89:
56:60:e5:3f:ad:0a:9d:d3:ec:b2:93:5e:78:c1:83:a2:13:a5:
63:7f:dd:1a:60:2d:92:72:69:4b:5d:3a:77:1e:2e:19:9f:14:
bf:3b:20:ed:85:2a:28:c4:e3:48:8f:4c:bb:81:52:5a:54:e2:
f3:ea:52:00:51:34:40:87:14:8e:c3:74:e9:88:a8:13:a7:e2:
06:23:e5:b7:89:3b:7e:7d:b6:41:b5:b2:da:4f:5d:d4:bb:51:
75:f4:9d:de:17:a3:57:27:e3:01:de:7d:86:29:71:f3:fe:8e:
d8:e5:ea:4e:37:7f:b0:35:81:64:49:ab:e5:f2:bf:ff:c2:14:
89:f4:36:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 14:44:06 2025 by rpki-client