Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/2891f6-7861-4037-8008-52cf0195838b/1/dBkW6TW7TmhYsdIjYVrONp7SaB4.mft
File: dBkW6TW7TmhYsdIjYVrONp7SaB4.mft (raw, json)
Hash identifier: JSVyRp5k65r0Ex6VaQVi/1kXtcHDDMvcdBUFwP9Ph9s=
Subject key identifier: 73:37:97:B7:69:64:F3:7A:4C:DB:0C:CD:A5:34:0F:30:D6:3D:BD:0D
Authority key identifier: 74:19:16:E9:35:BB:4E:68:58:B1:D2:23:61:5A:CE:36:9E:D2:68:1E
Certificate issuer: /CN=741916e935bb4e6858b1d223615ace369ed2681e
Certificate serial: 01989F39E83B37BA1DD5550E56284F5F4BBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dBkW6TW7TmhYsdIjYVrONp7SaB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/2891f6-7861-4037-8008-52cf0195838b/1/dBkW6TW7TmhYsdIjYVrONp7SaB4.mft
Manifest number: 162B
Signing time: Tue 12 Aug 2025 17:00:28 +0000
Manifest this update: Tue 12 Aug 2025 17:00:28 +0000
Manifest next update: Wed 13 Aug 2025 17:00:28 +0000
Files and hashes: 1: dBkW6TW7TmhYsdIjYVrONp7SaB4.crl (hash: pMovTFYaKtuI1cCQ/TYE8CxZ/ZCo3uX3Kfx5MYQsjWs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/2891f6-7861-4037-8008-52cf0195838b/1/dBkW6TW7TmhYsdIjYVrONp7SaB4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/2891f6-7861-4037-8008-52cf0195838b/1/dBkW6TW7TmhYsdIjYVrONp7SaB4.mft
rsync://rpki.ripe.net/repository/DEFAULT/dBkW6TW7TmhYsdIjYVrONp7SaB4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 13:24:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9f:39:e8:3b:37:ba:1d:d5:55:0e:56:28:4f:5f:4b:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=741916e935bb4e6858b1d223615ace369ed2681e
Validity
Not Before: Aug 12 17:00:28 2025 GMT
Not After : Aug 13 17:00:28 2025 GMT
Subject: CN=733797b76964f37a4cdb0ccda5340f30d63dbd0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a9:98:b5:a0:c6:5f:0d:f5:74:56:10:0c:31:
f4:06:64:f0:a8:e5:03:c7:6b:5f:73:36:4c:6e:ac:
73:8a:21:ce:d7:2c:20:27:7b:5d:d0:dc:10:d0:20:
fb:e4:e0:56:21:b0:fc:97:0f:3d:e9:7f:c3:13:a0:
3d:43:24:2c:96:ea:bf:91:f6:7e:a1:6a:09:19:4b:
84:4c:c6:6b:7b:d9:fc:e2:9f:f3:0b:15:96:c1:13:
c3:b0:0d:ae:46:c6:b9:1d:d2:1b:78:e5:2e:98:43:
ea:b3:0d:0e:16:4d:09:52:4e:6c:aa:6d:3f:c4:71:
8c:16:90:0e:ff:e7:12:ce:b7:0e:ea:a2:99:e2:fe:
03:02:cf:e3:42:65:db:c9:e9:f5:0a:e4:2e:5b:e1:
88:16:48:b8:e4:a5:36:6b:55:04:32:bd:f1:66:a2:
df:8a:ac:02:e3:5e:b6:9a:33:be:23:25:36:76:71:
a0:6a:81:91:99:d8:0b:3e:81:b0:06:15:95:61:1a:
94:54:28:a4:d7:d2:2b:1b:f6:f2:32:eb:8d:ed:b1:
09:b0:26:ad:2a:a6:7f:bd:73:3b:f1:8c:44:cd:58:
bd:3d:1e:09:ff:32:bf:d8:c6:41:6a:2a:f6:bf:da:
47:67:a9:5a:ac:2e:0b:73:5f:02:26:5f:92:db:f1:
ed:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:37:97:B7:69:64:F3:7A:4C:DB:0C:CD:A5:34:0F:30:D6:3D:BD:0D
X509v3 Authority Key Identifier:
keyid:74:19:16:E9:35:BB:4E:68:58:B1:D2:23:61:5A:CE:36:9E:D2:68:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dBkW6TW7TmhYsdIjYVrONp7SaB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/2891f6-7861-4037-8008-52cf0195838b/1/dBkW6TW7TmhYsdIjYVrONp7SaB4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/2891f6-7861-4037-8008-52cf0195838b/1/dBkW6TW7TmhYsdIjYVrONp7SaB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:d1:1d:3f:bf:cf:72:58:22:5c:5f:8c:03:6c:c8:ac:d6:7e:
1f:8f:c1:e3:f4:18:8d:ed:d6:1a:54:8a:7d:eb:1b:57:b3:07:
7e:28:60:f1:80:96:a7:95:48:28:ee:c2:cf:f1:1d:f2:b4:9c:
63:1d:15:c1:4b:89:68:05:7d:cb:e9:32:b1:f2:b9:47:7d:05:
6f:64:0b:2d:2b:e6:07:b0:0c:8d:fb:23:cf:7c:4c:b4:e2:d3:
14:2d:6c:22:06:12:fb:f0:60:b2:50:3c:6f:1e:f8:83:db:5d:
fb:c0:25:33:5c:c2:0a:70:6c:11:d0:be:76:56:fa:f7:96:dc:
71:49:cf:8d:ed:26:7d:43:3e:0d:9d:31:c9:e3:3e:86:1d:bb:
7f:20:70:18:1f:7d:1e:d1:0b:7b:63:5c:04:35:e7:cc:c9:0d:
fe:50:7d:59:8d:4f:6f:ae:67:1b:d7:3b:cb:4f:52:90:4f:c4:
6d:d9:fc:33:ec:ab:54:d3:ec:ea:e4:1b:e7:3f:c6:1b:ea:ff:
cb:54:c0:95:fb:00:1f:4a:7e:75:cf:5e:7d:b0:ab:a3:d0:e9:
5c:72:69:1b:41:f8:1a:f2:d1:7b:9b:6a:ce:f8:32:92:4f:3f:
ee:50:b7:6e:13:f1:96:c4:e4:1a:f5:46:31:50:3d:d1:f4:09:
88:0f:dd:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 22:52:44 2025 by rpki-client