Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/2c8dbc-40ae-49c6-8dd3-c25debcb1197/1/DudNGMQEmi2bgSwqWFXP63Wvpmc.mft
File: DudNGMQEmi2bgSwqWFXP63Wvpmc.mft (raw, json)
Hash identifier: AQwGBVKwCbJ7Xo5L50Yfqm9vS61vgfQKFceEBjUVuWI=
Subject key identifier: 3A:14:90:CE:92:3E:5A:9F:88:E8:B9:C3:13:80:CD:7B:E1:AD:F2:64
Authority key identifier: 0E:E7:4D:18:C4:04:9A:2D:9B:81:2C:2A:58:55:CF:EB:75:AF:A6:67
Certificate issuer: /CN=0ee74d18c4049a2d9b812c2a5855cfeb75afa667
Certificate serial: 0198745060D4535A148285F17FEB79973B29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DudNGMQEmi2bgSwqWFXP63Wvpmc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/2c8dbc-40ae-49c6-8dd3-c25debcb1197/1/DudNGMQEmi2bgSwqWFXP63Wvpmc.mft
Manifest number: 1613
Signing time: Mon 04 Aug 2025 09:01:21 +0000
Manifest this update: Mon 04 Aug 2025 09:01:21 +0000
Manifest next update: Tue 05 Aug 2025 09:01:21 +0000
Files and hashes: 1: DudNGMQEmi2bgSwqWFXP63Wvpmc.crl (hash: cXcudaN/RTUvD6AUzihyQM/+Z4UTYpkXUs0r78BQWzM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/2c8dbc-40ae-49c6-8dd3-c25debcb1197/1/DudNGMQEmi2bgSwqWFXP63Wvpmc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/2c8dbc-40ae-49c6-8dd3-c25debcb1197/1/DudNGMQEmi2bgSwqWFXP63Wvpmc.mft
rsync://rpki.ripe.net/repository/DEFAULT/DudNGMQEmi2bgSwqWFXP63Wvpmc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 09:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:60:d4:53:5a:14:82:85:f1:7f:eb:79:97:3b:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ee74d18c4049a2d9b812c2a5855cfeb75afa667
Validity
Not Before: Aug 4 09:01:21 2025 GMT
Not After : Aug 5 09:01:21 2025 GMT
Subject: CN=3a1490ce923e5a9f88e8b9c31380cd7be1adf264
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:09:10:67:55:c0:54:58:ca:4d:96:68:81:ad:
6a:7c:95:80:9a:73:14:56:a7:d6:04:42:b9:ac:f4:
ef:0c:7a:52:88:69:32:8a:0d:80:e2:65:85:96:8a:
c7:73:2c:9d:b2:63:ea:c1:0d:b7:bb:51:ad:e9:98:
e2:40:b8:f7:9d:20:87:e7:ad:6d:0f:d9:e1:16:ae:
b3:50:5c:f9:ce:c1:92:99:49:c7:49:63:77:02:2c:
3c:0a:a6:0a:db:1d:27:24:95:48:e1:50:0f:02:01:
25:63:60:f0:c7:3a:69:d7:32:c6:91:21:5d:92:f0:
b7:97:05:ee:12:20:91:21:a2:33:12:85:1b:24:6f:
03:61:8d:93:88:99:48:37:c9:ff:c4:33:18:ad:b4:
a4:4b:f1:a0:d0:7b:03:c2:c1:df:8b:1b:4f:a2:e7:
f1:a1:b7:5d:84:79:fc:db:68:02:de:a6:ac:ab:25:
eb:dd:fa:a2:4f:e5:df:96:99:d3:ed:38:bd:48:86:
b3:eb:03:44:6b:8e:14:98:14:ab:1a:2d:6c:86:c2:
5a:1b:37:13:ce:2c:b0:d9:4b:35:83:08:1b:22:cc:
3d:cd:ae:b9:3e:0b:03:40:5f:64:e7:60:8b:59:91:
f2:82:87:50:51:df:cf:43:19:36:5e:81:e2:94:aa:
60:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:14:90:CE:92:3E:5A:9F:88:E8:B9:C3:13:80:CD:7B:E1:AD:F2:64
X509v3 Authority Key Identifier:
keyid:0E:E7:4D:18:C4:04:9A:2D:9B:81:2C:2A:58:55:CF:EB:75:AF:A6:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DudNGMQEmi2bgSwqWFXP63Wvpmc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/2c8dbc-40ae-49c6-8dd3-c25debcb1197/1/DudNGMQEmi2bgSwqWFXP63Wvpmc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/2c8dbc-40ae-49c6-8dd3-c25debcb1197/1/DudNGMQEmi2bgSwqWFXP63Wvpmc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:24:d0:19:a0:90:2d:f8:30:37:9b:d2:06:f8:34:1e:c0:cc:
4d:dd:e9:9a:4d:a0:e9:43:8f:f0:0d:0c:fd:e5:e7:40:e3:0b:
c3:3d:0f:c6:fb:39:82:99:3e:5e:8c:a9:f6:c7:4c:0e:5d:2c:
a6:3f:e7:d1:90:b0:a1:87:cb:73:96:ef:80:2a:cc:f7:64:8f:
44:38:9a:25:41:ad:c3:fe:d5:95:dc:90:cb:01:93:3c:e3:95:
6c:4a:8a:7f:31:fc:a8:2c:05:e8:56:1b:d2:a9:35:23:a1:b7:
64:e9:a5:89:aa:73:1e:39:90:4c:57:4f:6d:bf:ae:a9:35:95:
d6:26:01:71:0d:9e:7e:c6:11:ae:e1:2e:58:3a:fe:29:3c:0c:
ef:97:dc:e5:df:80:86:fb:2c:31:cb:42:64:f7:fb:b2:0d:ac:
29:8b:da:cd:40:25:88:63:1a:47:bf:e9:2a:1a:32:00:15:e3:
f6:c9:90:be:f6:c8:97:d2:65:36:cf:db:c3:b3:f3:77:70:c3:
7a:d2:b7:b4:10:fd:0e:9f:64:80:49:b0:ed:3b:0a:90:33:0b:
e7:ff:bc:94:3f:3f:09:80:b8:73:4f:a8:45:e6:c9:c1:22:ef:
0c:86:5c:b2:98:4a:70:b7:3e:c1:39:ce:05:ee:0d:4f:c8:00:
6e:bc:1f:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:03:28 2025 by rpki-client