
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/e9447a-1e5c-4b1e-8056-3449f33a1842/1/DR7vsZI4vpruN5lb700q_Ref8sw.mft
File: DR7vsZI4vpruN5lb700q_Ref8sw.mft (raw, json)
Hash identifier: EF43BcukVF0LEI5HPVG41zQc19gdNLvcPUBJQ6bESaM=
Subject key identifier: DB:48:0A:4A:32:B3:92:42:51:DA:B1:37:D8:40:1B:C9:03:F9:96:E3
Authority key identifier: 0D:1E:EF:B1:92:38:BE:9A:EE:37:99:5B:EF:4D:2A:FD:17:9F:F2:CC
Certificate issuer: /CN=0d1eefb19238be9aee37995bef4d2afd179ff2cc
Certificate serial: 019875D1F0B18C32C37A84BAEBA287831BA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DR7vsZI4vpruN5lb700q_Ref8sw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/e9447a-1e5c-4b1e-8056-3449f33a1842/1/DR7vsZI4vpruN5lb700q_Ref8sw.mft
Manifest number: 0CBC
Signing time: Mon 04 Aug 2025 16:02:29 +0000
Manifest this update: Mon 04 Aug 2025 16:02:29 +0000
Manifest next update: Tue 05 Aug 2025 16:02:29 +0000
Files and hashes: 1: DR7vsZI4vpruN5lb700q_Ref8sw.crl (hash: QH4jLvO0wuxxxhqy1bN8g6eHrYOBVJAAVjeKqGShhYQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/e9447a-1e5c-4b1e-8056-3449f33a1842/1/DR7vsZI4vpruN5lb700q_Ref8sw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/e9447a-1e5c-4b1e-8056-3449f33a1842/1/DR7vsZI4vpruN5lb700q_Ref8sw.mft
rsync://rpki.ripe.net/repository/DEFAULT/DR7vsZI4vpruN5lb700q_Ref8sw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:75:d1:f0:b1:8c:32:c3:7a:84:ba:eb:a2:87:83:1b:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d1eefb19238be9aee37995bef4d2afd179ff2cc
Validity
Not Before: Aug 4 16:02:29 2025 GMT
Not After : Aug 5 16:02:29 2025 GMT
Subject: CN=db480a4a32b3924251dab137d8401bc903f996e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c1:2e:12:b2:ec:b7:ca:a0:bb:72:b0:93:1f:
d6:85:2a:f8:1a:fe:b9:c1:d0:f3:70:02:0b:3c:19:
11:14:e5:39:7d:41:8f:d6:53:fd:c8:7b:6f:d9:d8:
c1:0e:90:85:99:92:91:0d:5a:97:53:4a:b1:66:d2:
ef:8c:83:b6:93:86:1d:c9:f6:5b:52:e7:6c:65:c7:
d2:cd:59:1c:54:a5:83:29:d9:fc:4e:f4:6d:e3:9a:
9a:7f:08:4e:3f:50:c2:7e:45:d8:16:0c:0e:4f:e0:
ed:f8:46:32:86:7a:01:51:73:f3:e1:9c:8a:e8:3c:
19:f8:05:5d:03:46:f5:54:67:5c:c3:e6:14:bc:c9:
97:ec:b7:d5:6f:4c:d7:4e:cd:49:8e:49:d6:1b:55:
5a:7b:e5:2d:0c:bb:8c:5f:6c:6a:53:56:01:5f:46:
14:87:10:61:a4:ee:0b:c2:74:47:92:f3:a3:ef:39:
52:ba:06:8c:2f:06:64:ee:6f:9c:82:d4:ae:8d:d7:
02:b9:d0:b2:f2:a6:dd:de:85:fd:16:2b:02:9f:6e:
cb:f9:b6:db:6a:d5:7b:81:4b:ca:00:b5:9e:ca:94:
a1:d3:86:30:eb:18:22:c2:b8:e2:09:85:df:c1:94:
1d:7a:14:b3:1f:f9:6c:f3:2c:fc:e8:d6:12:09:c4:
c8:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:48:0A:4A:32:B3:92:42:51:DA:B1:37:D8:40:1B:C9:03:F9:96:E3
X509v3 Authority Key Identifier:
keyid:0D:1E:EF:B1:92:38:BE:9A:EE:37:99:5B:EF:4D:2A:FD:17:9F:F2:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DR7vsZI4vpruN5lb700q_Ref8sw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/e9447a-1e5c-4b1e-8056-3449f33a1842/1/DR7vsZI4vpruN5lb700q_Ref8sw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/e9447a-1e5c-4b1e-8056-3449f33a1842/1/DR7vsZI4vpruN5lb700q_Ref8sw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:08:4f:65:7f:ce:68:51:b5:19:32:72:da:63:4c:23:18:d3:
ee:57:d3:b7:ab:d1:1e:a6:cc:83:9d:04:40:53:db:ad:fc:c7:
c6:ae:c4:57:c0:95:8c:3a:51:e4:fa:9f:fa:e2:10:37:b0:2c:
77:c6:f9:bf:12:44:ba:18:b6:5d:b5:f3:6b:aa:46:57:6b:55:
71:2d:8c:0f:58:48:d5:f3:e6:8a:2a:10:72:a2:8d:11:14:78:
6c:95:b1:44:2b:01:ba:7a:c3:5c:84:cf:35:6a:67:4e:ce:8a:
2b:26:1f:f4:1c:b5:ec:1f:59:fa:4a:4e:48:aa:a1:77:63:b4:
8d:9a:99:90:3d:e6:ec:b3:66:35:ac:c0:25:1f:6f:14:42:88:
88:0a:8c:5a:b3:a4:a0:39:ee:80:14:5a:4a:09:7f:c1:c4:fe:
4d:fd:fd:a3:3d:1f:05:62:d5:bd:31:36:08:f0:4b:cb:e7:f4:
be:4c:1c:48:e0:09:8f:a6:a5:93:bd:aa:62:82:41:b9:93:ce:
67:c3:68:9d:7e:0c:bb:d8:9b:98:17:d7:7b:f9:41:dc:ce:3e:
3b:bc:b4:70:07:f1:1a:c7:e0:79:45:e4:03:dc:e6:2f:85:99:
b0:c4:10:3d:3e:db:dd:b0:af:55:3e:d3:23:1c:fd:43:f6:35:
77:01:ce:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 21:52:49 2025 by rpki-client