Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/4a1238-cb64-4a46-af95-65be44d0dbd4/1/Dchx21CYv4OP_qmaAvZ5Nos-GrI.mft
File: Dchx21CYv4OP_qmaAvZ5Nos-GrI.mft (raw, json)
Hash identifier: RfroXyOEl91EHM1pQ8a1RKH+8UqN6SECg+tbHVlsTkQ=
Subject key identifier: A4:D0:88:5B:3C:01:CC:91:37:B9:37:CA:96:1E:20:91:25:2F:71:01
Authority key identifier: 0D:C8:71:DB:50:98:BF:83:8F:FE:A9:9A:02:F6:79:36:8B:3E:1A:B2
Certificate issuer: /CN=0dc871db5098bf838ffea99a02f679368b3e1ab2
Certificate serial: 01984A0A1689841718EEAD869DECD49ED046
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dchx21CYv4OP_qmaAvZ5Nos-GrI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/4a1238-cb64-4a46-af95-65be44d0dbd4/1/Dchx21CYv4OP_qmaAvZ5Nos-GrI.mft
Manifest number: 15FE
Signing time: Sun 27 Jul 2025 04:00:31 +0000
Manifest this update: Sun 27 Jul 2025 04:00:31 +0000
Manifest next update: Mon 28 Jul 2025 04:00:31 +0000
Files and hashes: 1: Dchx21CYv4OP_qmaAvZ5Nos-GrI.crl (hash: 8ena1EOVQst90PW79Ob4HmmVyxRQRHnHxrq2RLcxI94=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/4a1238-cb64-4a46-af95-65be44d0dbd4/1/Dchx21CYv4OP_qmaAvZ5Nos-GrI.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/4a1238-cb64-4a46-af95-65be44d0dbd4/1/Dchx21CYv4OP_qmaAvZ5Nos-GrI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dchx21CYv4OP_qmaAvZ5Nos-GrI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 04:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:0a:16:89:84:17:18:ee:ad:86:9d:ec:d4:9e:d0:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dc871db5098bf838ffea99a02f679368b3e1ab2
Validity
Not Before: Jul 27 04:00:31 2025 GMT
Not After : Jul 28 04:00:31 2025 GMT
Subject: CN=a4d0885b3c01cc9137b937ca961e2091252f7101
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:54:97:66:08:79:a5:e2:fb:c3:58:a0:35:20:
d2:c7:9b:e2:10:0a:22:45:91:5a:b9:7e:49:41:bb:
e9:fe:82:93:4f:74:59:69:35:58:76:40:4d:89:23:
d9:bf:b9:94:b4:a2:ab:1a:dc:31:dc:22:95:10:4b:
ca:af:6d:77:e3:2d:ab:24:de:8a:1e:db:e0:c8:17:
42:e6:66:76:c3:ce:4e:50:a6:88:a4:2f:85:b2:f6:
7e:46:61:25:7f:8b:2a:c9:38:8f:a2:14:a4:66:26:
c5:ed:23:22:ad:11:85:de:12:09:a2:b4:b4:c1:03:
9e:7e:16:18:7a:e7:49:a3:e6:fc:65:1b:fd:3e:d7:
95:b2:50:ed:10:4f:32:04:2e:2a:db:65:0a:52:16:
39:c3:57:b4:6d:9c:4f:ac:61:93:50:c0:af:6f:11:
11:60:d2:b4:67:97:d5:39:dc:24:a8:ed:f8:8c:f1:
f6:76:22:01:7d:58:46:8e:64:3b:f4:cf:86:83:8a:
d6:8b:2a:d1:8a:d2:54:20:d8:f7:cd:72:c7:b3:20:
b0:94:1a:fa:f2:dd:9f:4d:2a:42:0a:c4:59:cb:43:
da:ad:1d:f4:1c:9a:f2:ce:dc:d1:80:70:17:2c:1d:
62:f4:c1:8e:83:83:d0:cf:1e:31:9f:01:f8:46:6d:
d0:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:D0:88:5B:3C:01:CC:91:37:B9:37:CA:96:1E:20:91:25:2F:71:01
X509v3 Authority Key Identifier:
keyid:0D:C8:71:DB:50:98:BF:83:8F:FE:A9:9A:02:F6:79:36:8B:3E:1A:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dchx21CYv4OP_qmaAvZ5Nos-GrI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/4a1238-cb64-4a46-af95-65be44d0dbd4/1/Dchx21CYv4OP_qmaAvZ5Nos-GrI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/4a1238-cb64-4a46-af95-65be44d0dbd4/1/Dchx21CYv4OP_qmaAvZ5Nos-GrI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:c2:62:14:5c:3b:d6:a0:57:9f:69:60:65:68:70:2e:6a:40:
90:df:38:6f:95:ba:ba:34:f3:a4:a8:1d:e0:d5:a3:e9:56:9e:
e8:4e:9c:7a:7f:b3:e3:da:6e:25:30:d0:d4:fb:bb:a6:5a:4c:
57:c5:41:de:51:5a:2b:6c:bd:ef:e6:41:d0:f7:f9:0b:d6:47:
72:1f:84:87:28:80:d2:c5:e9:f7:01:81:e4:8e:08:3c:7c:cf:
78:36:04:23:41:50:0e:a6:78:13:37:9d:97:c1:bc:a6:cb:2f:
11:76:c6:dd:39:f1:12:64:44:2e:d3:5c:f9:df:a6:82:16:c2:
91:f1:ba:e1:4c:64:f6:14:2e:04:d7:7b:b5:6a:8e:2e:e4:1e:
b9:e4:a8:9d:c0:8a:68:ca:69:b3:c8:b8:b2:de:f7:60:28:93:
c0:7c:14:67:d1:f4:bd:4c:71:fb:07:93:8c:9f:9a:a6:81:ec:
2b:c8:2c:e1:1b:2e:46:76:38:2c:36:53:2c:12:cf:2a:e3:41:
f7:42:08:05:0c:94:9f:82:30:d1:69:13:1d:66:92:98:98:27:
1f:2e:2a:cb:75:8f:49:1b:a0:d0:33:0f:18:ee:68:97:ef:8b:
0e:bf:6e:11:a2:60:01:a4:3f:75:2b:65:eb:35:98:fb:db:cb:
cf:a1:08:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:34:28 2025 by rpki-client