
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/232763-26f8-441b-96b8-05161ff71d80/1/dtAtj564761YOO-TGIVJb8-vHGE.mft
File: dtAtj564761YOO-TGIVJb8-vHGE.mft (raw, json)
Hash identifier: +C9feYpbZIUHD2bJv/tZHZv0X48BiMJEqcM9H5olOW0=
Subject key identifier: D7:70:9C:3C:97:A8:83:11:D2:A3:32:19:A8:B0:7F:6A:EF:E2:93:17
Authority key identifier: 76:D0:2D:8F:9E:B8:EF:AD:58:38:EF:93:18:85:49:6F:CF:AF:1C:61
Certificate issuer: /CN=76d02d8f9eb8efad5838ef931885496fcfaf1c61
Certificate serial: 0198854494DBACE44F61F59A01F88EC6FDAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dtAtj564761YOO-TGIVJb8-vHGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/232763-26f8-441b-96b8-05161ff71d80/1/dtAtj564761YOO-TGIVJb8-vHGE.mft
Manifest number: 161E
Signing time: Thu 07 Aug 2025 16:02:00 +0000
Manifest this update: Thu 07 Aug 2025 16:02:00 +0000
Manifest next update: Fri 08 Aug 2025 16:02:00 +0000
Files and hashes: 1: dtAtj564761YOO-TGIVJb8-vHGE.crl (hash: 8PjnVIBSvpWoPuRhUuvr1EhF4khLTPPlm0eCJ4CWaXY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/232763-26f8-441b-96b8-05161ff71d80/1/dtAtj564761YOO-TGIVJb8-vHGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/232763-26f8-441b-96b8-05161ff71d80/1/dtAtj564761YOO-TGIVJb8-vHGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/dtAtj564761YOO-TGIVJb8-vHGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 16:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:85:44:94:db:ac:e4:4f:61:f5:9a:01:f8:8e:c6:fd:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76d02d8f9eb8efad5838ef931885496fcfaf1c61
Validity
Not Before: Aug 7 16:02:00 2025 GMT
Not After : Aug 8 16:02:00 2025 GMT
Subject: CN=d7709c3c97a88311d2a33219a8b07f6aefe29317
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f6:d6:b6:59:c8:3b:e7:ec:0c:80:43:52:a3:
25:6b:b5:92:b2:bf:bc:16:88:66:81:1f:df:aa:bc:
a7:3d:44:34:a0:dc:9c:ee:32:ab:61:80:08:ec:b2:
a0:4e:40:ef:d2:f7:4e:42:af:ff:49:14:39:9a:fa:
b3:8f:05:3c:32:d9:d4:d3:9a:09:e8:e2:4e:72:f7:
fa:1a:cb:b0:59:49:bd:ad:83:27:82:80:76:d5:80:
26:65:40:b8:e6:4c:22:29:20:04:f2:ad:23:d1:5b:
bd:4a:c5:f9:6c:e8:5c:89:05:e9:99:9f:d5:47:81:
e9:5b:54:cc:0c:b6:03:47:62:4b:82:0e:d5:4e:83:
f2:12:ba:cb:f2:fc:d2:af:11:a0:3d:2a:8a:99:5c:
d6:0d:d8:b0:b5:87:8b:11:7d:3b:08:24:f1:ac:20:
e6:c7:33:f2:6b:a4:a6:54:52:36:e5:33:57:ba:af:
e1:46:90:7f:32:9a:7d:ab:8a:af:c9:b9:25:50:0b:
79:56:4b:c0:23:6a:26:ed:ac:f1:54:b1:ff:8c:5f:
a3:c0:26:33:0a:0b:65:a0:ce:84:a2:80:aa:9b:7c:
ea:9a:d0:c5:d6:e1:2c:b8:f4:23:85:cc:08:13:f9:
0b:6c:ca:f5:ea:c3:e2:0b:75:72:e9:40:63:fc:86:
86:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:70:9C:3C:97:A8:83:11:D2:A3:32:19:A8:B0:7F:6A:EF:E2:93:17
X509v3 Authority Key Identifier:
keyid:76:D0:2D:8F:9E:B8:EF:AD:58:38:EF:93:18:85:49:6F:CF:AF:1C:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dtAtj564761YOO-TGIVJb8-vHGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/232763-26f8-441b-96b8-05161ff71d80/1/dtAtj564761YOO-TGIVJb8-vHGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/232763-26f8-441b-96b8-05161ff71d80/1/dtAtj564761YOO-TGIVJb8-vHGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:f3:05:9b:17:17:ce:e4:28:cf:a2:a4:63:f5:ca:8a:a2:61:
ed:b7:fd:93:87:8b:d9:99:f9:af:d8:5c:36:92:84:55:d6:b1:
9a:ce:03:ee:f2:c7:65:58:6b:77:a1:2e:f9:43:2a:c8:72:be:
f6:08:cf:81:e0:3b:a8:db:81:92:78:2a:4b:5e:24:ac:c0:1e:
5a:af:32:41:32:9f:b0:b8:3a:b6:17:34:31:7b:c1:44:50:95:
db:b1:8b:0f:fe:dc:67:37:9d:60:93:99:87:f6:62:23:46:6d:
4a:8e:79:f0:82:f4:e0:0f:8b:ae:46:a0:b0:be:92:39:4b:d3:
35:f8:a7:00:de:5a:c2:96:eb:36:58:e9:c8:69:01:6e:39:e0:
71:c1:00:7d:ac:13:01:b1:73:5e:44:0d:7c:84:c0:e0:43:11:
4d:a9:59:4a:b8:ce:0d:33:95:eb:68:be:76:00:a4:1a:b5:33:
99:e5:11:51:bd:ac:85:3e:fe:cd:83:c4:83:95:e1:22:f9:2d:
eb:71:22:7f:c8:16:a1:1d:4a:9a:21:f1:d2:5d:a6:2a:4f:42:
c7:a0:f5:cc:eb:cf:da:9d:83:b0:be:17:c9:56:69:25:6c:c7:
d3:8d:ac:34:70:3e:4f:34:a6:7d:79:5d:50:62:37:d4:3b:68:
cf:8e:9e:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 00:07:47 2025 by rpki-client