Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/d531a8-02ae-4b0b-8f44-5287698aff3c/1/dLCDZQKVGJ8AmqdMEsvGHuI_p1M.mft
File: dLCDZQKVGJ8AmqdMEsvGHuI_p1M.mft (raw, json)
Hash identifier: /UW43ugiAB/ZLj79Z7qomGQkEoRpr1DfqdtyFLwIQAw=
Subject key identifier: 57:8E:24:2D:7A:4E:1D:7D:E3:37:0B:4F:EF:9A:5E:C1:D1:02:67:E8
Authority key identifier: 74:B0:83:65:02:95:18:9F:00:9A:A7:4C:12:CB:C6:1E:E2:3F:A7:53
Certificate issuer: /CN=74b083650295189f009aa74c12cbc61ee23fa753
Certificate serial: 019849662C6A3BB36FCF7270540E73238256
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dLCDZQKVGJ8AmqdMEsvGHuI_p1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/d531a8-02ae-4b0b-8f44-5287698aff3c/1/dLCDZQKVGJ8AmqdMEsvGHuI_p1M.mft
Manifest number: 15FF
Signing time: Sun 27 Jul 2025 01:01:29 +0000
Manifest this update: Sun 27 Jul 2025 01:01:29 +0000
Manifest next update: Mon 28 Jul 2025 01:01:29 +0000
Files and hashes: 1: dLCDZQKVGJ8AmqdMEsvGHuI_p1M.crl (hash: 905InDGcx8PVHMcNNRue8Mwg1HMZJlRawtNodteUZ9o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/d531a8-02ae-4b0b-8f44-5287698aff3c/1/dLCDZQKVGJ8AmqdMEsvGHuI_p1M.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/d531a8-02ae-4b0b-8f44-5287698aff3c/1/dLCDZQKVGJ8AmqdMEsvGHuI_p1M.mft
rsync://rpki.ripe.net/repository/DEFAULT/dLCDZQKVGJ8AmqdMEsvGHuI_p1M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 01:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:66:2c:6a:3b:b3:6f:cf:72:70:54:0e:73:23:82:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74b083650295189f009aa74c12cbc61ee23fa753
Validity
Not Before: Jul 27 01:01:29 2025 GMT
Not After : Jul 28 01:01:29 2025 GMT
Subject: CN=578e242d7a4e1d7de3370b4fef9a5ec1d10267e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:f0:a5:1a:ef:34:5c:93:d6:86:d1:2c:bb:5b:
b3:d3:ca:12:aa:74:12:49:55:3d:c1:55:90:56:6f:
ba:5f:1e:46:67:54:b3:84:fa:39:2a:a8:1e:46:18:
d7:c6:3c:7e:25:1b:b5:ea:43:be:e8:77:8f:55:f5:
bc:cb:a1:68:0d:b9:0e:77:4d:fc:b5:45:05:b0:38:
6e:50:d2:99:20:bc:cd:e3:a7:f1:4d:97:3a:86:e4:
93:7c:f4:d5:64:86:b8:ff:f5:17:a2:3d:c1:97:49:
b7:68:51:74:34:2a:af:38:eb:04:86:83:69:76:f8:
91:94:90:7b:87:c5:60:b8:c4:ff:1d:79:91:c1:5f:
8f:a8:b0:56:f4:07:76:f1:f1:87:c4:c0:8f:64:22:
a9:02:2b:21:f8:bd:b9:08:a3:d5:6b:35:c3:8c:2a:
dd:1f:86:ae:19:4e:45:37:bc:fa:17:06:0a:96:13:
37:24:dc:59:75:5d:21:4a:28:9a:a5:ce:2c:fa:ae:
4b:59:ec:8c:86:8e:04:2f:6e:35:ff:20:5b:54:03:
94:b7:03:c2:27:83:5b:23:23:d3:91:65:12:0f:c6:
01:26:71:b1:f1:42:64:e6:69:4f:4a:31:a9:c8:53:
0c:a8:ec:71:72:89:e5:c5:1b:94:3c:5a:fd:29:25:
1c:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:8E:24:2D:7A:4E:1D:7D:E3:37:0B:4F:EF:9A:5E:C1:D1:02:67:E8
X509v3 Authority Key Identifier:
keyid:74:B0:83:65:02:95:18:9F:00:9A:A7:4C:12:CB:C6:1E:E2:3F:A7:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dLCDZQKVGJ8AmqdMEsvGHuI_p1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d531a8-02ae-4b0b-8f44-5287698aff3c/1/dLCDZQKVGJ8AmqdMEsvGHuI_p1M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d531a8-02ae-4b0b-8f44-5287698aff3c/1/dLCDZQKVGJ8AmqdMEsvGHuI_p1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:f8:82:86:eb:90:8b:90:64:c3:dc:38:46:35:29:50:22:18:
0b:68:84:da:e0:e9:f5:7b:d0:dd:d3:ea:50:b3:80:d2:13:d8:
3b:2c:a4:f8:8f:e6:4b:70:26:f0:08:51:71:b6:b7:7e:b1:2e:
1e:89:1c:39:a8:34:97:83:67:eb:dd:98:56:e0:a7:17:0e:fc:
8d:b2:9e:fc:51:16:55:d6:d4:15:51:b2:58:64:e8:47:92:0d:
6e:32:6e:3e:9e:d4:ab:10:c3:75:e6:28:92:cc:47:32:79:50:
4b:f4:53:c5:46:48:6f:47:12:26:49:6d:90:d2:95:f0:3d:0a:
0d:ae:ad:24:01:57:80:06:2d:2e:24:00:ab:4b:6c:a9:9a:26:
6c:18:07:11:c0:87:cb:41:d8:78:21:b5:46:3b:cf:97:69:19:
6c:2a:2b:d8:d0:40:d8:1b:49:76:b5:c0:f3:a1:1a:19:27:0f:
be:54:b6:68:d5:49:84:cb:38:c1:df:49:c3:b3:28:68:dc:e9:
cf:cc:9d:0c:b5:a6:e4:08:5f:c3:8e:43:fb:f7:00:fc:cf:b1:
59:00:70:f1:b5:0c:3c:57:9a:7b:ca:a6:5c:ae:18:99:da:99:
a7:84:c0:08:5a:93:e7:91:f9:b9:d2:aa:2b:9c:3f:ef:64:4d:
45:2d:77:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:28:25 2025 by rpki-client