Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/49d813-2d9e-44b6-97ba-ea9c2c5222fb/1/dCadQgSZl1rpNPNM45WTgRTJuns.mft
File: dCadQgSZl1rpNPNM45WTgRTJuns.mft (raw, json)
Hash identifier: gwc29JsrBRCz3dAfPzOFuYLsle22qmJSr1LnSI05Eoo=
Subject key identifier: AB:58:A4:10:7C:E8:F7:1D:5E:DB:48:39:33:F2:37:6F:10:9A:6F:91
Authority key identifier: 74:26:9D:42:04:99:97:5A:E9:34:F3:4C:E3:95:93:81:14:C9:BA:7B
Certificate issuer: /CN=74269d420499975ae934f34ce395938114c9ba7b
Certificate serial: 01989E5FB504FC32EE0FA9E33C69EB67C4E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dCadQgSZl1rpNPNM45WTgRTJuns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/49d813-2d9e-44b6-97ba-ea9c2c5222fb/1/dCadQgSZl1rpNPNM45WTgRTJuns.mft
Manifest number: 1181
Signing time: Tue 12 Aug 2025 13:02:08 +0000
Manifest this update: Tue 12 Aug 2025 13:02:08 +0000
Manifest next update: Wed 13 Aug 2025 13:02:08 +0000
Files and hashes: 1: dCadQgSZl1rpNPNM45WTgRTJuns.crl (hash: AUD+KFIae1IEqru0rar1plMMGvdW1X2T2A7H04LtEiY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/49d813-2d9e-44b6-97ba-ea9c2c5222fb/1/dCadQgSZl1rpNPNM45WTgRTJuns.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/49d813-2d9e-44b6-97ba-ea9c2c5222fb/1/dCadQgSZl1rpNPNM45WTgRTJuns.mft
rsync://rpki.ripe.net/repository/DEFAULT/dCadQgSZl1rpNPNM45WTgRTJuns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 13:02:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9e:5f:b5:04:fc:32:ee:0f:a9:e3:3c:69:eb:67:c4:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74269d420499975ae934f34ce395938114c9ba7b
Validity
Not Before: Aug 12 13:02:08 2025 GMT
Not After : Aug 13 13:02:08 2025 GMT
Subject: CN=ab58a4107ce8f71d5edb483933f2376f109a6f91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:cf:4c:24:84:a4:1a:5b:35:48:d7:93:f4:51:
25:33:3f:53:f1:91:cc:84:a9:0a:0d:2e:c3:e2:e2:
e9:b3:27:af:4d:30:0c:c1:f5:8f:44:75:64:b6:34:
f3:ca:1b:9f:5a:06:52:2f:26:8c:5a:14:9d:2c:26:
3c:6f:d7:0e:6a:fe:24:d3:73:c0:c8:55:88:32:b6:
b9:db:cc:dc:61:d9:85:31:39:5a:42:ad:28:7e:43:
fd:3d:a4:c2:a2:64:d1:2f:5e:45:ff:20:fe:9b:a1:
7b:65:50:0f:f1:4a:9c:b9:69:3d:07:2c:04:4f:20:
cf:df:71:b7:f0:db:76:1f:c2:13:d4:c1:4d:b7:2b:
d7:c4:13:9c:40:f5:8a:e8:b1:86:8e:ce:c9:bf:35:
5b:85:ae:26:72:19:97:60:5a:6e:c8:fa:4b:46:62:
ff:da:4d:95:d1:dc:64:13:e8:d1:55:14:71:78:fe:
2e:75:7d:44:96:11:ee:50:0d:e1:b5:72:aa:b5:36:
02:e5:2c:4d:7c:a5:1c:82:26:7e:16:cf:de:6e:0f:
c7:b6:d6:c5:67:f8:d6:be:e5:f6:6e:bc:49:9d:79:
c9:3b:fa:51:39:90:75:e7:e9:9d:99:3f:4c:fb:66:
7d:3d:32:11:d0:cb:18:f0:3e:01:db:60:ab:a5:5e:
95:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:58:A4:10:7C:E8:F7:1D:5E:DB:48:39:33:F2:37:6F:10:9A:6F:91
X509v3 Authority Key Identifier:
keyid:74:26:9D:42:04:99:97:5A:E9:34:F3:4C:E3:95:93:81:14:C9:BA:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dCadQgSZl1rpNPNM45WTgRTJuns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/49d813-2d9e-44b6-97ba-ea9c2c5222fb/1/dCadQgSZl1rpNPNM45WTgRTJuns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/49d813-2d9e-44b6-97ba-ea9c2c5222fb/1/dCadQgSZl1rpNPNM45WTgRTJuns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:b5:f9:2f:00:2d:6e:b8:8d:e5:97:07:d6:26:2b:81:9c:68:
14:fb:4e:37:64:dd:a4:74:eb:89:5e:36:c7:a0:e7:5a:fa:ce:
c8:96:cb:1f:f9:15:88:e3:e3:3f:a5:fe:37:4b:c5:df:90:96:
d8:72:20:dc:15:d1:5e:ef:7c:2c:ee:df:c3:9b:2f:4b:68:29:
3d:92:2d:38:be:5a:85:85:70:13:01:04:9c:46:ff:d9:57:93:
5b:3e:a9:46:45:b2:1f:b8:9d:1f:4c:2e:59:96:dc:9b:90:8c:
aa:29:8f:07:b2:3f:77:d0:57:ef:81:c2:96:0f:38:d7:b5:42:
e4:c6:f5:a8:9f:4d:b4:ce:67:cf:8c:6d:2f:d6:ac:7f:88:07:
06:6f:bd:53:eb:e8:ef:a9:8d:2d:01:d8:02:77:46:4f:68:80:
7c:bf:7b:5d:af:b7:92:e9:8c:4a:e2:68:ac:f7:2d:b7:be:47:
c4:03:e8:de:cb:d9:4b:82:d5:16:e5:f5:51:50:63:80:06:15:
4e:7a:31:51:c2:38:de:5e:53:bb:fb:7c:66:02:f9:8d:39:ad:
e6:af:ea:a1:6d:a1:d0:e8:a0:4f:06:c8:48:83:a6:7c:5e:fd:
7e:12:16:69:5b:0f:c6:71:4f:e1:62:c8:61:a0:ec:ce:52:cc:
3f:25:66:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 18:14:31 2025 by rpki-client