Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/c2719d-8d77-4686-a2fb-7b4f09785f79/1/dnECLoKiznV3Drwajw1F9E8scxY.mft
File: dnECLoKiznV3Drwajw1F9E8scxY.mft (raw, json)
Hash identifier: 28EgO0pjSwhZpSWrgz+VG9rej0LctB94iE9pjakgd7g=
Subject key identifier: C1:99:40:81:33:01:34:98:1A:5B:62:B7:5F:FA:B3:3A:BC:12:0A:8D
Authority key identifier: 76:71:02:2E:82:A2:CE:75:77:0E:BC:1A:8F:0D:45:F4:4F:2C:73:16
Certificate issuer: /CN=7671022e82a2ce75770ebc1a8f0d45f44f2c7316
Certificate serial: 019877C03FCAA655A98FCF02919BAEAF1C51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dnECLoKiznV3Drwajw1F9E8scxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/c2719d-8d77-4686-a2fb-7b4f09785f79/1/dnECLoKiznV3Drwajw1F9E8scxY.mft
Manifest number: 1616
Signing time: Tue 05 Aug 2025 01:02:24 +0000
Manifest this update: Tue 05 Aug 2025 01:02:24 +0000
Manifest next update: Wed 06 Aug 2025 01:02:24 +0000
Files and hashes: 1: dnECLoKiznV3Drwajw1F9E8scxY.crl (hash: mrKxjMtX1Z2jJiclfe+DzhV7B7k4N5U8n4hKEsvReyk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/c2719d-8d77-4686-a2fb-7b4f09785f79/1/dnECLoKiznV3Drwajw1F9E8scxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/c2719d-8d77-4686-a2fb-7b4f09785f79/1/dnECLoKiznV3Drwajw1F9E8scxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/dnECLoKiznV3Drwajw1F9E8scxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 00:46:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:77:c0:3f:ca:a6:55:a9:8f:cf:02:91:9b:ae:af:1c:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7671022e82a2ce75770ebc1a8f0d45f44f2c7316
Validity
Not Before: Aug 5 01:02:24 2025 GMT
Not After : Aug 6 01:02:24 2025 GMT
Subject: CN=c1994081330134981a5b62b75ffab33abc120a8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:bc:cf:35:7d:1f:c3:14:7e:3e:70:6a:75:bf:
0c:0a:8b:d6:35:82:ea:73:35:b3:d1:2a:44:69:fd:
8d:d1:bc:42:b3:d7:3d:59:00:da:f3:a8:12:00:9b:
25:d8:75:65:d9:fd:f2:65:ac:7f:f2:fa:d0:b8:02:
8e:42:a3:d8:39:9f:e6:ab:30:06:ef:96:61:a9:ed:
62:12:67:3d:64:2d:04:2d:26:67:cc:c9:2b:54:ca:
5c:47:52:c2:3a:32:12:76:a7:2c:04:53:f3:89:63:
91:c6:bf:ab:67:50:b2:41:46:75:eb:68:93:7d:7f:
8b:03:5f:89:e5:5b:cb:4c:ba:a8:93:5b:68:2d:6d:
53:5d:57:fb:f5:2d:85:92:92:91:7c:a2:f5:f3:0b:
16:05:b9:25:ba:2c:12:15:4d:ca:c6:c1:da:bb:3e:
4d:ed:c5:f8:06:6f:8f:43:d0:e2:79:38:1c:7f:e7:
0a:9c:13:1a:b8:91:a0:fd:9b:1c:ac:65:3d:74:64:
27:bc:90:e8:ed:81:d0:1d:5f:9e:33:f5:f7:79:27:
35:e9:81:71:69:ed:d2:c3:f2:4e:f9:bd:25:6c:71:
ef:c3:7b:83:4d:e1:8f:91:9e:90:fa:c9:18:60:22:
bb:77:df:24:6d:6f:5a:db:71:4d:bd:c0:ef:39:73:
44:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:99:40:81:33:01:34:98:1A:5B:62:B7:5F:FA:B3:3A:BC:12:0A:8D
X509v3 Authority Key Identifier:
keyid:76:71:02:2E:82:A2:CE:75:77:0E:BC:1A:8F:0D:45:F4:4F:2C:73:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dnECLoKiznV3Drwajw1F9E8scxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/c2719d-8d77-4686-a2fb-7b4f09785f79/1/dnECLoKiznV3Drwajw1F9E8scxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/c2719d-8d77-4686-a2fb-7b4f09785f79/1/dnECLoKiznV3Drwajw1F9E8scxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:ae:fe:d7:61:24:7d:7f:f5:79:25:72:f2:41:b1:c3:b3:f2:
50:9c:05:91:59:09:de:79:b1:8f:b0:fb:04:b0:83:5c:ce:32:
87:38:e7:22:b9:5a:11:54:ec:a6:ea:2c:eb:dd:4b:4a:62:4f:
6d:b7:54:b0:ab:7a:3e:b4:91:4f:ff:62:34:d7:2c:b6:1d:a2:
b1:d9:ad:16:ff:e0:3e:3c:ca:cc:33:32:05:08:fa:89:9c:8a:
fd:65:c9:a5:53:e3:10:6c:e2:7e:df:1f:0d:99:7a:14:ae:18:
b6:47:e1:0c:21:b8:6d:2b:f0:1f:32:e1:2d:80:7b:0e:75:e7:
a0:fe:8a:d8:a9:33:28:29:b9:49:f8:c3:a5:fa:3b:9a:5f:09:
4a:e1:c9:75:ad:7e:a1:2d:8b:a5:3a:08:e2:ec:5c:ee:6a:56:
f8:1b:9c:94:bf:10:72:40:a9:e0:75:97:30:db:3e:49:cc:3a:
1a:fc:55:ad:32:51:84:3c:9b:c0:1f:0e:5c:bd:18:7a:fc:1c:
a7:0d:0f:6f:14:3d:0c:ce:c3:d5:08:91:9d:76:90:bd:02:31:
74:b9:e5:41:be:8f:8e:b1:47:48:c5:dd:bd:8c:4f:3f:e7:a9:
bd:b8:65:36:2e:7c:b9:c9:43:b0:43:9a:c9:cb:ef:4f:02:fa:
1e:bb:05:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 08:19:56 2025 by rpki-client