Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/e3bbdf-9585-46e5-b5cc-f68a59d2fe0d/1/dUxXhm6Xqtqtdd7MadDfBy1Qbuc.mft
File: dUxXhm6Xqtqtdd7MadDfBy1Qbuc.mft (raw, json)
Hash identifier: e3g2v8/118/0Cmr49a9qoquIghanAPr5bZbShKIfP+Q=
Subject key identifier: 8F:E5:80:C3:AE:55:11:07:64:99:83:1A:B5:7F:CA:12:5F:8B:4A:2D
Authority key identifier: 75:4C:57:86:6E:97:AA:DA:AD:75:DE:CC:69:D0:DF:07:2D:50:6E:E7
Certificate issuer: /CN=754c57866e97aadaad75decc69d0df072d506ee7
Certificate serial: 01989FDECDAF8640B44370190FD0F7CB94C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dUxXhm6Xqtqtdd7MadDfBy1Qbuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/e3bbdf-9585-46e5-b5cc-f68a59d2fe0d/1/dUxXhm6Xqtqtdd7MadDfBy1Qbuc.mft
Manifest number: 010A
Signing time: Tue 12 Aug 2025 20:00:35 +0000
Manifest this update: Tue 12 Aug 2025 20:00:35 +0000
Manifest next update: Wed 13 Aug 2025 20:00:35 +0000
Files and hashes: 1: dUxXhm6Xqtqtdd7MadDfBy1Qbuc.crl (hash: NpBHCJgOhL3WfNuG15bfU5qSmFKGq2wGseTFeZtDxbM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/e3bbdf-9585-46e5-b5cc-f68a59d2fe0d/1/dUxXhm6Xqtqtdd7MadDfBy1Qbuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/e3bbdf-9585-46e5-b5cc-f68a59d2fe0d/1/dUxXhm6Xqtqtdd7MadDfBy1Qbuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/dUxXhm6Xqtqtdd7MadDfBy1Qbuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 20:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9f:de:cd:af:86:40:b4:43:70:19:0f:d0:f7:cb:94:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=754c57866e97aadaad75decc69d0df072d506ee7
Validity
Not Before: Aug 12 20:00:35 2025 GMT
Not After : Aug 13 20:00:35 2025 GMT
Subject: CN=8fe580c3ae5511076499831ab57fca125f8b4a2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:11:0e:9f:a1:d0:9e:34:84:f5:c5:0a:01:1b:
d3:c9:c7:f9:bc:d9:8f:cc:59:8a:be:4f:4b:ac:04:
d8:5f:e8:cb:8f:5e:67:d9:e1:60:fd:6e:fb:f2:6d:
00:c0:aa:21:7d:31:7d:f4:4c:43:d7:57:a8:82:d4:
0b:19:2b:00:ca:9e:c9:98:64:97:59:82:d1:43:00:
2a:bb:3d:d3:0f:eb:54:9b:e1:96:3d:37:e7:90:2a:
01:51:94:bb:ae:38:14:ce:67:7d:41:40:cf:18:ba:
c9:52:0d:34:90:7b:61:a1:9a:79:cf:41:f7:d1:13:
f4:5a:bb:4c:da:34:cd:ed:ef:ec:2d:14:44:f5:fc:
10:97:2d:fc:87:5f:51:0f:51:f8:ac:41:62:7a:8a:
71:4d:be:26:42:91:41:b7:49:e3:74:cf:58:47:96:
76:ec:70:ac:2e:81:8e:63:99:6a:06:f4:18:da:ad:
d7:02:66:15:08:f6:76:fc:53:b7:50:de:28:c1:17:
e9:ad:8d:8a:06:eb:dc:5a:67:d7:60:30:25:34:37:
48:3b:b2:db:6d:b6:b2:a3:b3:8d:6c:5d:32:82:48:
63:16:2e:be:87:b2:6f:d0:c4:4d:cd:30:9a:cc:9a:
c0:4d:2e:2c:49:11:23:4d:4b:e6:b0:4a:d9:79:b3:
86:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:E5:80:C3:AE:55:11:07:64:99:83:1A:B5:7F:CA:12:5F:8B:4A:2D
X509v3 Authority Key Identifier:
keyid:75:4C:57:86:6E:97:AA:DA:AD:75:DE:CC:69:D0:DF:07:2D:50:6E:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dUxXhm6Xqtqtdd7MadDfBy1Qbuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/e3bbdf-9585-46e5-b5cc-f68a59d2fe0d/1/dUxXhm6Xqtqtdd7MadDfBy1Qbuc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/e3bbdf-9585-46e5-b5cc-f68a59d2fe0d/1/dUxXhm6Xqtqtdd7MadDfBy1Qbuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:35:1a:56:c5:b4:49:19:18:b2:4c:7e:fb:fc:1d:d9:36:dc:
2b:d4:e2:6b:64:03:cb:50:22:53:c5:22:07:f9:d5:02:bd:d6:
4a:cf:e5:f1:e2:6d:1d:04:54:58:c9:af:b6:4d:42:1a:6d:3a:
c1:3d:66:73:fd:76:8e:e7:90:48:de:1d:99:4e:36:b5:2b:00:
0c:58:54:8a:bf:90:0c:d2:ac:7a:9e:c5:a1:92:ea:dc:2d:6c:
01:a1:bd:aa:fd:94:94:0f:df:fa:35:cc:f7:ad:d0:f8:07:d4:
3c:c8:33:19:85:6c:ce:21:63:cf:8e:3c:a3:44:2d:08:f7:52:
69:71:b2:57:45:01:c9:fc:f4:b4:5c:97:c8:19:d0:26:67:9f:
ee:42:b8:9f:94:19:7d:bf:08:d7:88:ec:1d:b1:74:a9:41:1c:
e9:0e:66:f0:f9:fa:a6:ca:3b:53:d4:ea:31:68:9f:71:54:15:
c9:80:6f:2f:32:18:f7:30:61:04:c8:f9:ef:6e:50:95:99:9f:
36:d3:f3:67:bf:4a:56:85:f0:1e:ca:f8:a5:e6:98:f6:a7:90:
4f:c0:72:41:4b:66:18:89:62:ce:f6:bc:71:97:8e:64:b6:6c:
e7:d5:cc:cd:24:e6:66:8f:af:84:b6:94:bd:be:c1:89:16:25:
01:bb:69:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 02:42:02 2025 by rpki-client