Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/558afe-49fe-438e-bd37-f4fced35b352/1/Dkbx623dT_7-GDgAMCvmNs_pZTc.mft
File: Dkbx623dT_7-GDgAMCvmNs_pZTc.mft (raw, json)
Hash identifier: 3IIDgXAWs9fFou4hE/VpzJwNEJjr0ODqizta4KWME1o=
Subject key identifier: A0:F0:3D:1B:59:8F:66:AA:56:12:E4:3A:E8:FA:C5:F5:DE:28:2E:C9
Authority key identifier: 0E:46:F1:EB:6D:DD:4F:FE:FE:18:38:00:30:2B:E6:36:CF:E9:65:37
Certificate issuer: /CN=0e46f1eb6ddd4ffefe183800302be636cfe96537
Certificate serial: 01987B9BDC79EC23D9053A5D6BBE8A5B78B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dkbx623dT_7-GDgAMCvmNs_pZTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/558afe-49fe-438e-bd37-f4fced35b352/1/Dkbx623dT_7-GDgAMCvmNs_pZTc.mft
Manifest number: 1617
Signing time: Tue 05 Aug 2025 19:01:08 +0000
Manifest this update: Tue 05 Aug 2025 19:01:08 +0000
Manifest next update: Wed 06 Aug 2025 19:01:08 +0000
Files and hashes: 1: Dkbx623dT_7-GDgAMCvmNs_pZTc.crl (hash: 01UUFeHHNvkOF9T6ur6N+In3rkrIqENhPVz29fKFTzk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/558afe-49fe-438e-bd37-f4fced35b352/1/Dkbx623dT_7-GDgAMCvmNs_pZTc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/558afe-49fe-438e-bd37-f4fced35b352/1/Dkbx623dT_7-GDgAMCvmNs_pZTc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dkbx623dT_7-GDgAMCvmNs_pZTc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 19:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7b:9b:dc:79:ec:23:d9:05:3a:5d:6b:be:8a:5b:78:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e46f1eb6ddd4ffefe183800302be636cfe96537
Validity
Not Before: Aug 5 19:01:08 2025 GMT
Not After : Aug 6 19:01:08 2025 GMT
Subject: CN=a0f03d1b598f66aa5612e43ae8fac5f5de282ec9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:7f:9e:e8:99:80:47:79:a5:af:01:f6:de:4a:
85:24:b6:b8:ae:05:4c:74:65:45:f4:6c:11:9e:6c:
c7:3c:df:00:22:03:eb:23:c1:e0:cd:bc:15:6f:84:
5c:0e:4d:0d:54:5d:cd:1e:8a:1d:99:06:76:c2:bf:
c3:42:15:3c:4d:5f:18:5d:70:72:24:d8:0d:43:56:
a1:da:c1:8a:d7:f4:b0:33:ab:9e:7d:af:90:da:4a:
4b:2f:f2:53:37:6e:3a:14:c9:a2:1b:b3:19:f9:af:
a4:6d:48:b8:78:3c:4a:10:b5:e3:9a:21:b2:ac:84:
78:83:2d:37:89:f9:e4:e3:ad:f6:99:84:25:42:87:
e0:68:57:06:19:42:94:8b:db:eb:3c:34:23:ef:ef:
0b:f9:cb:21:70:4a:24:95:c4:a6:1f:16:8e:a1:98:
f7:6e:e6:20:27:eb:2f:ac:0e:fe:ef:89:8e:e9:e9:
78:98:69:d9:5d:a8:4f:15:9c:cf:c4:a0:44:48:f9:
e7:4a:21:5a:42:6c:6f:04:d9:b9:02:7a:f9:6b:29:
35:6c:9b:f9:29:1e:31:74:fb:da:9a:35:f8:d0:73:
7f:f1:ab:20:3d:a2:4c:b3:78:e5:d0:62:c9:60:2e:
92:ca:15:da:7d:bf:39:34:8e:df:4d:73:67:01:71:
d5:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:F0:3D:1B:59:8F:66:AA:56:12:E4:3A:E8:FA:C5:F5:DE:28:2E:C9
X509v3 Authority Key Identifier:
keyid:0E:46:F1:EB:6D:DD:4F:FE:FE:18:38:00:30:2B:E6:36:CF:E9:65:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dkbx623dT_7-GDgAMCvmNs_pZTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/558afe-49fe-438e-bd37-f4fced35b352/1/Dkbx623dT_7-GDgAMCvmNs_pZTc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/558afe-49fe-438e-bd37-f4fced35b352/1/Dkbx623dT_7-GDgAMCvmNs_pZTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:50:19:7e:d8:86:0b:64:66:d6:c2:82:e2:50:ae:4d:87:fc:
a9:74:ae:fa:d7:11:21:a7:38:da:ef:dd:ca:7c:49:f8:03:ff:
b5:e6:b9:75:cb:70:d6:f0:03:b5:29:8d:a7:f1:2c:cb:2c:78:
0f:80:57:0b:e1:49:af:a4:75:bb:a3:74:40:b5:05:13:f8:6d:
30:da:71:58:5d:fb:14:a9:6f:bc:18:cb:fa:02:a5:61:56:f8:
92:12:33:d5:e2:44:93:02:ed:67:b4:fa:9e:a8:0f:15:12:9e:
c2:05:b7:c1:d6:47:d1:fe:01:e9:c3:6f:47:7b:92:b3:2a:74:
b2:d4:66:53:54:06:9f:0b:8c:71:b4:39:ef:3d:f6:e9:60:01:
83:e6:27:4b:ec:f3:f2:3d:c2:0f:53:e0:9e:7a:06:52:b0:1b:
6d:c6:d3:97:b1:e6:b3:56:d8:22:da:f5:ce:f7:8d:11:69:3e:
64:73:da:1b:3b:14:6e:39:c2:21:f5:ad:ef:02:b8:4d:fb:c8:
f4:4a:ba:c9:2e:d5:54:8e:55:a2:20:3d:29:71:08:34:8e:ed:
2e:8d:fd:35:6b:c1:6e:2e:24:79:10:aa:60:74:6e:70:17:76:
93:7a:8d:4e:83:b0:69:f4:8e:54:4c:46:88:76:c4:37:90:8b:
9d:18:06:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 04:17:53 2025 by rpki-client