Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/4a1238-cb64-4a46-af95-65be44d0dbd4/1/Dchx21CYv4OP_qmaAvZ5Nos-GrI.mft
File: Dchx21CYv4OP_qmaAvZ5Nos-GrI.mft (raw, json)
Hash identifier: g1k4PUMDobDqG8hsQHFguKxIc7Ihet7jx4rjHTCGL5c=
Subject key identifier: CC:74:2B:AD:08:29:B8:88:B4:69:50:32:BE:A7:D8:F2:B1:48:C4:16
Authority key identifier: 0D:C8:71:DB:50:98:BF:83:8F:FE:A9:9A:02:F6:79:36:8B:3E:1A:B2
Certificate issuer: /CN=0dc871db5098bf838ffea99a02f679368b3e1ab2
Certificate serial: 019883FA2699F0481EF4B52A851EB1E79AD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dchx21CYv4OP_qmaAvZ5Nos-GrI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/4a1238-cb64-4a46-af95-65be44d0dbd4/1/Dchx21CYv4OP_qmaAvZ5Nos-GrI.mft
Manifest number: 161C
Signing time: Thu 07 Aug 2025 10:01:05 +0000
Manifest this update: Thu 07 Aug 2025 10:01:05 +0000
Manifest next update: Fri 08 Aug 2025 10:01:05 +0000
Files and hashes: 1: Dchx21CYv4OP_qmaAvZ5Nos-GrI.crl (hash: DU1fZgJIswDgUYLBUmUz8aCwuX/s8ujM6r84q1CpMO8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/4a1238-cb64-4a46-af95-65be44d0dbd4/1/Dchx21CYv4OP_qmaAvZ5Nos-GrI.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/4a1238-cb64-4a46-af95-65be44d0dbd4/1/Dchx21CYv4OP_qmaAvZ5Nos-GrI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dchx21CYv4OP_qmaAvZ5Nos-GrI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:83:fa:26:99:f0:48:1e:f4:b5:2a:85:1e:b1:e7:9a:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dc871db5098bf838ffea99a02f679368b3e1ab2
Validity
Not Before: Aug 7 10:01:05 2025 GMT
Not After : Aug 8 10:01:05 2025 GMT
Subject: CN=cc742bad0829b888b4695032bea7d8f2b148c416
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:22:89:da:0e:37:b8:77:3f:f3:d7:8f:22:5e:
ab:a1:60:31:dd:b0:59:78:e0:a3:ea:68:33:61:25:
03:37:df:1f:8e:8d:0a:c1:48:dc:5e:d0:2e:3d:d0:
e3:b5:95:b4:0f:9e:bb:b2:6c:37:35:6a:51:e2:57:
b9:4e:9e:a6:97:e0:11:e8:0a:74:3e:22:dd:6b:1c:
ed:06:3b:9d:5f:57:17:46:81:a7:c5:fd:3e:a5:ad:
46:78:11:c1:45:dc:3e:42:e9:3d:60:b3:49:2d:0d:
48:96:78:4b:90:9e:38:71:d9:57:d2:31:a4:7c:3b:
fe:45:25:b2:72:9b:44:1c:6d:d9:fd:51:bf:93:e6:
98:d7:79:2e:2d:fc:bd:ac:51:41:92:d6:e5:d7:ee:
5f:4d:b2:c0:6f:45:12:41:1c:ba:b5:30:8a:eb:4c:
c1:94:ac:54:73:33:fa:1f:5c:f7:8e:37:b9:25:45:
ee:ff:70:ff:4e:9d:39:9e:09:eb:e3:9a:39:a3:6e:
4f:80:bc:46:75:86:0f:83:32:48:cf:34:b1:85:ba:
17:a3:d1:9d:16:90:9f:54:3b:a4:39:93:25:42:ce:
8a:9c:14:52:75:fd:ef:69:3d:c5:1f:84:59:d6:30:
d2:78:fa:6d:77:55:d9:5a:ec:7a:8e:a5:3c:19:41:
96:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:74:2B:AD:08:29:B8:88:B4:69:50:32:BE:A7:D8:F2:B1:48:C4:16
X509v3 Authority Key Identifier:
keyid:0D:C8:71:DB:50:98:BF:83:8F:FE:A9:9A:02:F6:79:36:8B:3E:1A:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dchx21CYv4OP_qmaAvZ5Nos-GrI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/4a1238-cb64-4a46-af95-65be44d0dbd4/1/Dchx21CYv4OP_qmaAvZ5Nos-GrI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/4a1238-cb64-4a46-af95-65be44d0dbd4/1/Dchx21CYv4OP_qmaAvZ5Nos-GrI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:0d:94:74:55:c9:3e:e4:bd:41:89:ff:9e:48:9e:14:36:fb:
1f:76:d9:60:9a:43:47:6d:f8:a6:f7:85:21:db:39:eb:31:62:
d5:41:40:5e:90:30:ae:5e:5a:f8:1f:b4:26:ab:06:0f:01:97:
ba:e4:25:a2:06:15:7a:9f:b0:91:ea:1b:28:4a:4b:be:db:62:
78:48:87:3a:fa:1c:87:81:5f:34:63:b3:33:13:c1:ed:b4:f0:
19:49:84:53:5f:40:b5:60:b5:34:27:f4:5c:c9:5d:91:6c:20:
4b:78:2b:78:9c:68:ce:c8:2d:e3:46:1c:5b:fd:0d:c5:5d:7b:
b2:11:d4:fb:06:5f:dc:8e:49:4f:74:9a:9f:81:7a:02:62:19:
77:6e:0e:35:0e:27:c6:5a:4b:ae:6c:f4:5a:24:54:75:78:b4:
4c:b5:21:76:84:c6:9c:94:ea:0c:1b:9c:93:77:85:88:2b:9e:
36:42:f7:79:9e:8b:03:7f:46:a1:21:de:c4:a4:41:04:a5:88:
37:48:4d:a5:2e:db:a5:a3:34:e4:a5:f5:25:9a:2e:17:83:31:
63:db:7f:18:bc:9e:65:06:17:21:bf:ce:f3:5c:f4:ff:c1:1b:
a1:e2:96:d0:19:e2:8a:77:de:ee:4a:4f:ed:45:ba:58:58:55:
4a:4e:47:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 17:39:26 2025 by rpki-client