Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/d29d3f-1696-4ed4-96d2-e7eb817ede30/1/Da7a5Z2cmvUe9UivsMlkOM73IRw.mft
File: Da7a5Z2cmvUe9UivsMlkOM73IRw.mft (raw, json)
Hash identifier: 9rmGW3K/PeaV2OxegXyya8Yec99F/xwo35Bm1e+7Q8k=
Subject key identifier: 60:E9:4B:38:42:E9:AC:68:06:17:3C:62:58:1B:8D:67:5E:B0:52:E4
Authority key identifier: 0D:AE:DA:E5:9D:9C:9A:F5:1E:F5:48:AF:B0:C9:64:38:CE:F7:21:1C
Certificate issuer: /CN=0daedae59d9c9af51ef548afb0c96438cef7211c
Certificate serial: 0198820B879635C510758760B443E3CE0F04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Da7a5Z2cmvUe9UivsMlkOM73IRw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/d29d3f-1696-4ed4-96d2-e7eb817ede30/1/Da7a5Z2cmvUe9UivsMlkOM73IRw.mft
Manifest number: 161B
Signing time: Thu 07 Aug 2025 01:00:50 +0000
Manifest this update: Thu 07 Aug 2025 01:00:50 +0000
Manifest next update: Fri 08 Aug 2025 01:00:50 +0000
Files and hashes: 1: Da7a5Z2cmvUe9UivsMlkOM73IRw.crl (hash: M+x0Cze5Om92fs3qkgTVckS7nKWpDW3PgQa/A279p54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/d29d3f-1696-4ed4-96d2-e7eb817ede30/1/Da7a5Z2cmvUe9UivsMlkOM73IRw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/d29d3f-1696-4ed4-96d2-e7eb817ede30/1/Da7a5Z2cmvUe9UivsMlkOM73IRw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Da7a5Z2cmvUe9UivsMlkOM73IRw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 01:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:82:0b:87:96:35:c5:10:75:87:60:b4:43:e3:ce:0f:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0daedae59d9c9af51ef548afb0c96438cef7211c
Validity
Not Before: Aug 7 01:00:50 2025 GMT
Not After : Aug 8 01:00:50 2025 GMT
Subject: CN=60e94b3842e9ac6806173c62581b8d675eb052e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f3:ee:47:00:24:8d:66:6b:3c:38:90:cc:fa:
56:76:d8:9c:e0:16:ec:08:38:76:d6:0d:0e:5a:a9:
90:a6:66:82:89:36:1a:49:f4:a6:04:e2:42:2f:6c:
15:23:68:ba:c8:47:88:18:3f:20:57:9c:c7:d2:d7:
d4:17:2f:33:39:69:1f:5a:fd:1b:3c:dd:2f:56:7c:
55:96:aa:b5:57:a7:c2:ac:ef:e6:a7:aa:f8:da:c0:
e3:24:f6:50:0c:7d:a2:b8:7b:a2:be:4a:66:df:32:
2f:a2:16:08:be:1f:e5:f4:a8:15:d4:12:4f:32:19:
d7:a7:84:1a:6d:c7:60:a5:f3:82:b5:aa:94:3d:69:
11:a0:ed:82:2c:1a:4e:86:11:df:22:74:91:b6:b9:
be:e4:67:17:a4:e6:a7:14:dd:d7:59:55:d3:c9:fa:
17:be:47:3f:47:cc:bf:64:79:11:e8:83:8a:f7:ca:
dd:fe:8b:5d:45:51:bc:69:c0:76:4c:b3:a5:e2:e3:
55:9e:cd:ed:e2:b7:f2:be:85:06:bb:29:57:6d:2b:
d5:43:e7:b8:f6:9e:8a:fa:e1:aa:10:69:9d:36:02:
1f:0d:75:1a:d3:7a:73:2d:b0:ef:f3:88:19:d2:90:
89:44:ce:67:7d:32:8f:cd:ef:c5:90:a0:9e:85:f1:
01:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:E9:4B:38:42:E9:AC:68:06:17:3C:62:58:1B:8D:67:5E:B0:52:E4
X509v3 Authority Key Identifier:
keyid:0D:AE:DA:E5:9D:9C:9A:F5:1E:F5:48:AF:B0:C9:64:38:CE:F7:21:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Da7a5Z2cmvUe9UivsMlkOM73IRw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d29d3f-1696-4ed4-96d2-e7eb817ede30/1/Da7a5Z2cmvUe9UivsMlkOM73IRw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d29d3f-1696-4ed4-96d2-e7eb817ede30/1/Da7a5Z2cmvUe9UivsMlkOM73IRw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:ce:14:d6:fb:8e:2c:eb:d7:51:86:6f:07:75:28:25:05:f7:
fe:c0:6c:15:ef:4a:d3:32:4b:3a:4e:48:33:d7:da:7d:72:84:
79:99:87:5c:65:8e:5a:32:6d:26:6c:88:47:40:dc:a1:9f:d8:
10:1e:35:93:3a:f6:c0:3b:53:1c:f8:18:54:90:be:ca:1c:59:
90:d4:d0:50:85:c5:d5:9a:ad:a0:e6:9b:fd:cd:a9:24:ab:92:
62:a3:05:81:c5:69:c1:c0:16:93:ff:bc:4e:73:85:6d:50:5a:
d6:12:fb:e6:fd:92:cb:37:ed:5c:d5:88:83:da:bf:14:60:91:
de:a2:0e:15:02:37:f1:af:f2:8b:a4:3b:66:bf:38:2d:34:e6:
da:86:ed:0d:71:40:48:34:ab:c3:49:f8:d6:89:de:ef:2a:71:
3a:10:10:c6:30:7e:0e:2d:05:3f:73:07:a0:66:1c:94:dd:78:
1c:a7:e1:3f:3c:a1:eb:a0:91:77:5a:50:6f:b2:c4:8a:27:3a:
01:a6:41:4a:0e:23:e9:dd:c5:cc:a7:34:71:83:99:b0:71:43:
9e:fb:e1:f3:d9:58:c1:3e:71:2e:74:7f:d1:73:d9:1d:89:c9:
b9:b5:51:9e:f0:84:35:ca:ce:ee:2b:9c:af:92:97:43:db:8b:
03:7e:e8:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 11:09:18 2025 by rpki-client