
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/2754de-a5d5-487f-9fdd-c33b3644dd3f/1/dcqnmRKIh2aA16yQqFafP8IDh_o.mft
File: dcqnmRKIh2aA16yQqFafP8IDh_o.mft (raw, json)
Hash identifier: bjzb65tKji5Zz3ZMdBwX7Xr+BJ7wIsfs01z39lM/A2I=
Subject key identifier: 1E:23:BD:2A:E6:FA:C7:83:B6:6D:1F:CD:D8:6F:89:AF:AA:B1:28:9B
Authority key identifier: 75:CA:A7:99:12:88:87:66:80:D7:AC:90:A8:56:9F:3F:C2:03:87:FA
Certificate issuer: /CN=75caa7991288876680d7ac90a8569f3fc20387fa
Certificate serial: 01987450BE46F2AAA5E300E3CDFA78E41C8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dcqnmRKIh2aA16yQqFafP8IDh_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/2754de-a5d5-487f-9fdd-c33b3644dd3f/1/dcqnmRKIh2aA16yQqFafP8IDh_o.mft
Manifest number: 1614
Signing time: Mon 04 Aug 2025 09:01:45 +0000
Manifest this update: Mon 04 Aug 2025 09:01:45 +0000
Manifest next update: Tue 05 Aug 2025 09:01:45 +0000
Files and hashes: 1: dcqnmRKIh2aA16yQqFafP8IDh_o.crl (hash: 55ysUgG8nSpSVF16eVy7+KoFAvKpZAg+RLLGzfzz4JU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/2754de-a5d5-487f-9fdd-c33b3644dd3f/1/dcqnmRKIh2aA16yQqFafP8IDh_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/2754de-a5d5-487f-9fdd-c33b3644dd3f/1/dcqnmRKIh2aA16yQqFafP8IDh_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/dcqnmRKIh2aA16yQqFafP8IDh_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:be:46:f2:aa:a5:e3:00:e3:cd:fa:78:e4:1c:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75caa7991288876680d7ac90a8569f3fc20387fa
Validity
Not Before: Aug 4 09:01:45 2025 GMT
Not After : Aug 5 09:01:45 2025 GMT
Subject: CN=1e23bd2ae6fac783b66d1fcdd86f89afaab1289b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:12:94:7c:76:bc:cc:f5:65:78:63:bf:e3:67:
54:1e:f7:6a:33:e8:ee:6f:98:3a:59:40:06:91:a4:
b0:a9:24:d5:e1:c3:00:82:25:e6:7a:e2:71:b7:95:
f1:cd:c8:b3:78:15:61:2d:de:40:3a:9b:da:4f:e2:
81:ce:4e:4a:22:d8:be:c0:3e:4c:06:48:d4:3b:5d:
57:0a:19:08:02:8c:52:6e:10:f5:f5:da:3d:bd:35:
4d:b5:87:b1:bf:24:95:e8:3f:64:83:08:e6:ee:b3:
5b:ef:20:a9:2b:66:ba:1d:b4:f9:6f:69:2f:73:33:
dc:36:bb:0a:43:5a:bf:ea:33:69:17:98:5b:f0:a3:
2f:26:73:57:6e:19:6f:09:d0:f2:b2:6a:c7:a1:f8:
4c:51:cb:6b:99:ed:f1:c5:cf:99:e2:c6:82:9b:4c:
8b:af:08:ce:74:8a:86:a4:3e:c6:6f:4c:18:84:9e:
4f:2d:a1:6f:c0:bd:d1:04:5c:78:5d:78:7a:5b:45:
fd:e5:bf:ea:6b:9a:f9:9b:99:d8:f4:f2:da:83:aa:
24:c3:ce:72:20:3b:5d:4c:09:34:48:e3:dd:61:75:
c1:25:03:78:bf:66:e2:5c:86:0f:63:15:d4:23:f8:
be:b5:e2:42:28:19:7d:65:09:28:57:8d:ed:91:8f:
29:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:23:BD:2A:E6:FA:C7:83:B6:6D:1F:CD:D8:6F:89:AF:AA:B1:28:9B
X509v3 Authority Key Identifier:
keyid:75:CA:A7:99:12:88:87:66:80:D7:AC:90:A8:56:9F:3F:C2:03:87:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dcqnmRKIh2aA16yQqFafP8IDh_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/2754de-a5d5-487f-9fdd-c33b3644dd3f/1/dcqnmRKIh2aA16yQqFafP8IDh_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/2754de-a5d5-487f-9fdd-c33b3644dd3f/1/dcqnmRKIh2aA16yQqFafP8IDh_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:e5:41:92:e4:00:d8:71:80:73:0d:76:fb:08:e3:d9:f7:a9:
f3:fe:36:a6:e7:f4:f2:74:35:7f:3b:b4:d2:78:09:bd:70:64:
85:95:15:60:de:6b:8b:f4:ef:d8:89:24:2e:84:cc:5e:86:0b:
71:bc:49:0b:6a:89:ab:42:e1:2d:8e:09:9c:50:fe:9a:c7:d4:
6a:66:a4:27:f2:7d:90:ea:44:7f:7d:30:61:e5:ed:9b:2d:bb:
d2:7f:96:5e:ea:c0:61:03:09:ca:66:12:a2:41:07:5c:6c:2c:
7a:64:8b:6d:82:b0:27:db:9e:c3:20:42:c2:c9:31:3e:90:16:
bb:f7:f1:16:db:99:f1:66:5f:78:be:6a:22:2d:cb:99:10:33:
37:43:c3:a3:d3:ce:e0:3f:b6:60:59:4d:bc:28:4d:c4:71:7f:
0e:10:0d:cc:25:e1:74:ff:a7:08:ef:5b:9e:d1:a2:31:8d:16:
51:af:cb:c7:f6:08:6a:2c:6b:ac:bb:4f:cd:ab:d8:37:e2:20:
d8:72:e9:26:19:24:f9:7a:c3:97:0b:6c:07:48:5e:19:72:2c:
4c:10:50:b1:8f:24:e4:14:52:d6:01:96:b1:b4:ae:11:84:81:
b3:1b:b6:a4:18:6b:aa:86:be:18:72:7e:89:3b:26:d2:d4:4c:
b7:2a:6f:18
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh0UL5G8qql4wDjzfp45ByKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1Y2FhNzk5MTI4ODg3NjY4MGQ3YWM5MGE4NTY5ZjNmYzIw
Mzg3ZmEwHhcNMjUwODA0MDkwMTQ1WhcNMjUwODA1MDkwMTQ1WjAzMTEwLwYDVQQD
EygxZTIzYmQyYWU2ZmFjNzgzYjY2ZDFmY2RkODZmODlhZmFhYjEyODliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0xKUfHa8zPVleGO/42dUHvdqM+ju
b5g6WUAGkaSwqSTV4cMAgiXmeuJxt5XxzcizeBVhLd5AOpvaT+KBzk5KIti+wD5M
BkjUO11XChkIAoxSbhD19do9vTVNtYexvySV6D9kgwjm7rNb7yCpK2a6HbT5b2kv
czPcNrsKQ1q/6jNpF5hb8KMvJnNXbhlvCdDysmrHofhMUctrme3xxc+Z4saCm0yL
rwjOdIqGpD7Gb0wYhJ5PLaFvwL3RBFx4XXh6W0X95b/qa5r5m5nY9PLag6okw85y
IDtdTAk0SOPdYXXBJQN4v2biXIYPYxXUI/i+teJCKBl9ZQkoV43tkY8pMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB4jvSrm+seDtm0fzdhvia+qsSibMB8GA1UdIwQY
MBaAFHXKp5kSiIdmgNeskKhWnz/CA4f6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGNxbm1SS0loMmFBMTZ5UXFGYWZQOElEaF9vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy8yNzU0ZGUtYTVkNS00ODdmLTlmZGQt
YzMzYjM2NDRkZDNmLzEvZGNxbm1SS0loMmFBMTZ5UXFGYWZQOElEaF9vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy8yNzU0ZGUtYTVkNS00ODdmLTlmZGQtYzMzYjM2NDRkZDNm
LzEvZGNxbm1SS0loMmFBMTZ5UXFGYWZQOElEaF9vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFeVBkuQA
2HGAcw12+wjj2fep8/42puf08nQ1fzu00ngJvXBkhZUVYN5ri/Tv2IkkLoTMXoYL
cbxJC2qJq0LhLY4JnFD+msfUamakJ/J9kOpEf30wYeXtmy270n+WXurAYQMJymYS
okEHXGwsemSLbYKwJ9uewyBCwskxPpAWu/fxFtuZ8WZfeL5qIi3LmRAzN0PDo9PO
4D+2YFlNvChNxHF/DhANzCXhdP+nCO9bntGiMY0WUa/Lx/YIaixrrLtPzavYN+Ig
2HLpJhkk+XrDlwtsB0heGXIsTBBQsY8k5BRS1gGWsbSuEYSBsxu2pBhrqoa+GHJ+
iTsm0tRMtypvGA==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:06:59 2025 by rpki-client