Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/c16043-a3de-4ab3-9e56-8265a96e420d/1/dUE1hHAyFWSttCp213OuPK57vVY.mft
File: dUE1hHAyFWSttCp213OuPK57vVY.mft (raw, json)
Hash identifier: l0hLPP8E5bbWiWiPg6fGEubmm8OtAHecsTyvTyWD4Yc=
Subject key identifier: 58:DC:D3:48:D6:3A:94:5D:27:AE:D0:2B:BE:F3:85:83:0F:DB:1F:9B
Authority key identifier: 75:41:35:84:70:32:15:64:AD:B4:2A:76:D7:73:AE:3C:AE:7B:BD:56
Certificate issuer: /CN=7541358470321564adb42a76d773ae3cae7bbd56
Certificate serial: 01988CFE0A49AE1B1A40859C2E19C762B285
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dUE1hHAyFWSttCp213OuPK57vVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/c16043-a3de-4ab3-9e56-8265a96e420d/1/dUE1hHAyFWSttCp213OuPK57vVY.mft
Manifest number: 046F
Signing time: Sat 09 Aug 2025 04:01:55 +0000
Manifest this update: Sat 09 Aug 2025 04:01:55 +0000
Manifest next update: Sun 10 Aug 2025 04:01:55 +0000
Files and hashes: 1: dUE1hHAyFWSttCp213OuPK57vVY.crl (hash: gkwO01e6Tad5ij406HbWrq5BvgVXnSxNfXVEj1TFVJQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/c16043-a3de-4ab3-9e56-8265a96e420d/1/dUE1hHAyFWSttCp213OuPK57vVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/c16043-a3de-4ab3-9e56-8265a96e420d/1/dUE1hHAyFWSttCp213OuPK57vVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/dUE1hHAyFWSttCp213OuPK57vVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 04:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8c:fe:0a:49:ae:1b:1a:40:85:9c:2e:19:c7:62:b2:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7541358470321564adb42a76d773ae3cae7bbd56
Validity
Not Before: Aug 9 04:01:55 2025 GMT
Not After : Aug 10 04:01:55 2025 GMT
Subject: CN=58dcd348d63a945d27aed02bbef385830fdb1f9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:cf:1b:86:a9:97:2d:2d:2a:dd:b1:a0:64:a9:
22:38:05:a3:44:5c:50:91:79:6d:97:f5:7a:c0:dd:
82:4b:2c:a0:1f:97:19:52:17:ed:53:5f:3a:e9:48:
4b:85:ec:0e:27:70:90:79:57:2e:33:e7:c6:06:ed:
70:65:40:a0:ad:7e:86:fc:91:e9:61:f1:cb:a4:86:
a9:73:d1:17:90:d5:d7:f8:cb:ce:3d:6a:05:85:93:
9e:e8:93:b2:07:97:d8:79:27:b6:32:fb:68:83:7c:
72:d8:b4:8a:44:c7:6b:97:89:b4:cb:4a:d0:66:58:
f1:34:13:0e:89:dd:24:3d:4a:04:75:7a:9e:0d:64:
d9:04:3d:a5:85:6e:8c:f9:fe:5e:b4:ac:3b:df:82:
6d:9e:83:e8:d2:23:0e:37:22:13:c1:48:c0:d0:18:
73:21:ed:6a:da:90:83:5e:64:f5:63:e5:c5:06:c2:
b1:de:24:dc:05:10:f8:99:2b:80:30:06:15:14:c2:
1b:f3:12:09:46:dd:3b:61:84:f8:a5:bb:32:42:01:
0b:ac:4f:ad:d7:71:cc:e8:97:46:fb:ea:c8:fe:c7:
06:4c:ab:f8:b2:64:58:36:42:e1:3f:1c:18:b6:02:
97:c0:69:51:67:01:12:9e:04:b8:84:2a:14:9d:bf:
c0:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:DC:D3:48:D6:3A:94:5D:27:AE:D0:2B:BE:F3:85:83:0F:DB:1F:9B
X509v3 Authority Key Identifier:
keyid:75:41:35:84:70:32:15:64:AD:B4:2A:76:D7:73:AE:3C:AE:7B:BD:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dUE1hHAyFWSttCp213OuPK57vVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c16043-a3de-4ab3-9e56-8265a96e420d/1/dUE1hHAyFWSttCp213OuPK57vVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c16043-a3de-4ab3-9e56-8265a96e420d/1/dUE1hHAyFWSttCp213OuPK57vVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:3c:40:71:d5:14:5c:c5:87:9f:35:da:d8:a8:56:d7:5b:f5:
67:da:25:10:84:a6:99:39:6d:95:2e:98:64:e9:ee:8c:52:54:
3b:d1:66:fc:29:66:9f:f8:a9:de:04:98:d3:e8:a4:59:04:87:
04:26:3b:ca:36:87:fb:27:c7:65:a1:77:ea:98:5c:87:9a:14:
f1:58:d5:c2:e5:ba:22:f6:cd:97:b5:e3:c4:01:91:25:7b:f6:
b7:95:9e:5b:c1:8d:df:04:80:b0:58:d3:9f:aa:16:0c:96:78:
fb:38:7d:10:62:d7:3e:ed:d0:61:71:5f:05:bf:de:40:26:9d:
a7:6a:da:61:e1:df:e8:a0:03:78:f4:f0:4c:10:b8:7e:23:33:
40:ab:56:ba:2a:b7:1d:d4:0c:22:8b:c5:07:fc:60:66:0c:cc:
80:56:31:2a:2c:34:ad:ac:a2:ca:72:fd:da:e2:fb:2a:4b:e1:
05:0a:31:c6:00:f9:6d:c7:22:d4:48:a3:7a:1d:ca:36:e3:39:
65:40:f6:76:88:86:08:8d:ae:61:67:f1:11:c0:4e:cf:54:77:
f9:e8:46:00:3b:c1:90:c8:83:36:83:6e:71:26:21:1a:1a:05:
00:e7:89:55:b3:d0:1d:11:18:eb:54:ad:6e:3a:61:e4:c4:42:
e2:65:e3:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 14:17:04 2025 by rpki-client