Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/2e03af-83a4-4c9f-911a-d5844b3c5177/1/dC5XHQAG_n9mCwMIzMYaFpnjSRc.mft
File: dC5XHQAG_n9mCwMIzMYaFpnjSRc.mft (raw, json)
Hash identifier: 74zZXKYAFSz01rBAjAJh4yuBAMSIdGrlUGSpdLteBYo=
Subject key identifier: B2:74:94:19:FE:A7:C4:50:55:F5:EC:EC:EE:0C:3B:0C:5D:99:2D:D2
Authority key identifier: 74:2E:57:1D:00:06:FE:7F:66:0B:03:08:CC:C6:1A:16:99:E3:49:17
Certificate issuer: /CN=742e571d0006fe7f660b0308ccc61a1699e34917
Certificate serial: 019873E4110B9B4284AC8315F9277C7752BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dC5XHQAG_n9mCwMIzMYaFpnjSRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/2e03af-83a4-4c9f-911a-d5844b3c5177/1/dC5XHQAG_n9mCwMIzMYaFpnjSRc.mft
Manifest number: 1614
Signing time: Mon 04 Aug 2025 07:03:02 +0000
Manifest this update: Mon 04 Aug 2025 07:03:02 +0000
Manifest next update: Tue 05 Aug 2025 07:03:02 +0000
Files and hashes: 1: dC5XHQAG_n9mCwMIzMYaFpnjSRc.crl (hash: 0CSeE/2t9Vk9s+G7k3QSBzPukrZkjlSAK8F61pSZKvo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/2e03af-83a4-4c9f-911a-d5844b3c5177/1/dC5XHQAG_n9mCwMIzMYaFpnjSRc.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/2e03af-83a4-4c9f-911a-d5844b3c5177/1/dC5XHQAG_n9mCwMIzMYaFpnjSRc.mft
rsync://rpki.ripe.net/repository/DEFAULT/dC5XHQAG_n9mCwMIzMYaFpnjSRc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 07:03:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e4:11:0b:9b:42:84:ac:83:15:f9:27:7c:77:52:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=742e571d0006fe7f660b0308ccc61a1699e34917
Validity
Not Before: Aug 4 07:03:02 2025 GMT
Not After : Aug 5 07:03:02 2025 GMT
Subject: CN=b2749419fea7c45055f5ececee0c3b0c5d992dd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:4f:b4:41:41:e8:f0:03:85:a5:6e:c5:5c:ab:
de:15:e3:dc:5a:d8:c3:b3:8f:8b:3a:a4:bc:1a:57:
ba:06:76:95:76:e3:5c:a4:7a:16:81:39:39:5a:83:
73:97:e5:d0:8c:f8:4f:22:1b:fd:da:cf:6a:2f:da:
25:8d:16:a8:53:6d:03:8a:5d:9e:36:df:49:72:a3:
c1:a7:48:4b:6e:a7:f4:13:ac:bc:19:dd:8f:5f:e8:
a5:60:19:a4:99:1d:ba:2c:04:cc:87:51:f8:a6:bf:
dd:c1:9b:3d:b7:73:3f:9c:4c:45:c8:e7:1f:09:7d:
dd:e0:d3:96:98:4d:f4:ff:a2:68:62:0f:29:2e:1b:
86:28:32:f9:12:89:c4:2d:b4:d7:84:e0:61:71:a8:
43:8d:00:6a:99:8b:f6:4c:ef:01:70:51:32:64:6f:
b6:41:08:9e:1d:73:ce:90:3e:0b:62:c1:56:eb:38:
97:af:4e:75:46:28:34:0a:17:b2:93:ba:e1:76:aa:
e4:ae:7e:e9:ec:5d:d9:4e:be:81:58:11:48:ca:61:
8d:3f:f6:36:ce:5a:60:ff:ba:0f:c2:77:91:c7:f8:
b2:6a:ea:08:b7:9b:bd:6f:0d:18:94:fe:fb:90:db:
c4:94:e5:0e:81:53:c4:89:c1:00:6c:ba:a5:ac:4f:
6f:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:74:94:19:FE:A7:C4:50:55:F5:EC:EC:EE:0C:3B:0C:5D:99:2D:D2
X509v3 Authority Key Identifier:
keyid:74:2E:57:1D:00:06:FE:7F:66:0B:03:08:CC:C6:1A:16:99:E3:49:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dC5XHQAG_n9mCwMIzMYaFpnjSRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/2e03af-83a4-4c9f-911a-d5844b3c5177/1/dC5XHQAG_n9mCwMIzMYaFpnjSRc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/2e03af-83a4-4c9f-911a-d5844b3c5177/1/dC5XHQAG_n9mCwMIzMYaFpnjSRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:6c:07:62:0e:8d:fe:dc:fd:06:66:d9:60:5f:ad:0c:0a:99:
35:4e:5c:33:4c:d5:01:74:d3:f2:41:f2:e5:9e:f0:17:7d:1b:
2a:05:91:81:94:64:68:ab:a7:f3:e9:56:53:17:fa:c5:56:8f:
bb:fa:16:a3:92:a1:65:38:f7:78:3f:ab:8b:9f:66:b7:94:f7:
90:c2:e6:69:dd:41:78:be:00:74:15:66:da:1c:02:bd:d0:2f:
a0:95:84:57:e6:44:94:07:68:19:2b:c7:f5:d7:99:8c:67:f4:
24:3e:c7:33:5b:46:82:26:5c:9a:8f:a5:07:5d:28:87:7b:38:
80:89:ca:b0:39:de:21:12:fb:f0:06:c9:3a:df:f3:e4:6d:cb:
70:9c:d3:e8:46:2f:ca:ee:3d:fb:bf:74:ed:bb:b4:fe:4e:f8:
0a:ec:3b:96:89:26:29:a4:c5:c9:5e:ba:39:66:8d:3f:0d:c3:
c6:ce:bd:95:60:51:83:7d:23:ba:4b:27:8f:ad:8b:b1:32:8d:
81:64:ac:77:21:7b:34:3d:b2:05:d9:39:c8:ad:f0:80:a5:fa:
af:e8:a0:50:88:95:24:49:55:f0:2e:b4:cf:c3:18:61:54:e9:
27:0c:d4:48:44:9a:4c:88:be:56:f5:a8:ab:00:3a:a6:fb:5b:
cb:53:e3:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:00:40 2025 by rpki-client