Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/b501de-3b1d-4d80-b6e9-f88d7ec3a526/1/dtQhWmJUV7wFMhkciAP3xkt_kGU.mft
File: dtQhWmJUV7wFMhkciAP3xkt_kGU.mft (raw, json)
Hash identifier: 2SvjOw1afhT/R2xBe5DO5o9+q9Amhnu/NRQeQn00cGI=
Subject key identifier: D0:88:C5:99:64:DC:C1:D6:15:69:F7:BC:F3:2D:48:47:F6:97:EF:1F
Authority key identifier: 76:D4:21:5A:62:54:57:BC:05:32:19:1C:88:03:F7:C6:4B:7F:90:65
Certificate issuer: /CN=76d4215a625457bc0532191c8803f7c64b7f9065
Certificate serial: 01984A7798797A9766BE1357F2BE08180B88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dtQhWmJUV7wFMhkciAP3xkt_kGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/b501de-3b1d-4d80-b6e9-f88d7ec3a526/1/dtQhWmJUV7wFMhkciAP3xkt_kGU.mft
Manifest number: 03D8
Signing time: Sun 27 Jul 2025 06:00:08 +0000
Manifest this update: Sun 27 Jul 2025 06:00:08 +0000
Manifest next update: Mon 28 Jul 2025 06:00:08 +0000
Files and hashes: 1: dtQhWmJUV7wFMhkciAP3xkt_kGU.crl (hash: HzRE9MxQyu9H+PIpU/X1KJLVq4kXnWzJmvu3bwoEQh0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/b501de-3b1d-4d80-b6e9-f88d7ec3a526/1/dtQhWmJUV7wFMhkciAP3xkt_kGU.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/b501de-3b1d-4d80-b6e9-f88d7ec3a526/1/dtQhWmJUV7wFMhkciAP3xkt_kGU.mft
rsync://rpki.ripe.net/repository/DEFAULT/dtQhWmJUV7wFMhkciAP3xkt_kGU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:77:98:79:7a:97:66:be:13:57:f2:be:08:18:0b:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76d4215a625457bc0532191c8803f7c64b7f9065
Validity
Not Before: Jul 27 06:00:08 2025 GMT
Not After : Jul 28 06:00:08 2025 GMT
Subject: CN=d088c59964dcc1d61569f7bcf32d4847f697ef1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d9:1e:5e:bb:f4:b9:5b:ba:d9:1f:cd:fd:8e:
86:be:48:bc:29:fb:bc:2f:df:e9:db:d7:f7:38:6e:
68:0f:41:3b:23:a0:97:15:7a:5e:98:ce:94:fc:3d:
1e:de:4a:1f:ce:f9:e2:5e:33:49:45:5c:34:c7:7e:
c9:b6:db:b9:48:21:fb:6e:02:51:03:12:10:1e:fa:
86:ed:d2:a2:3a:68:ea:98:c9:8e:69:fb:a3:87:2f:
f6:e8:e4:cf:2d:4f:63:e1:e1:33:05:e4:59:1c:b7:
d7:c2:1a:af:ea:3d:ef:d8:9f:79:95:8f:5e:db:a9:
16:95:a6:b9:5c:ad:a8:44:d6:fc:6c:66:c5:80:80:
12:67:61:78:92:14:d1:0c:a9:4d:a6:e1:f8:5a:d9:
17:59:b1:68:61:5e:2a:e3:2f:e5:bd:bb:04:5e:4b:
e3:c5:f7:97:44:af:19:e3:94:84:57:2d:3d:ac:34:
e3:df:ef:34:b4:06:83:7e:fe:aa:93:5b:4f:53:0f:
84:e2:5e:d9:44:07:7b:45:9b:8d:94:cc:e4:69:d5:
fb:ac:6d:a3:a2:4d:c2:af:34:63:ed:b7:af:0e:02:
c6:a5:e9:13:f4:1a:d2:b9:9e:13:34:4f:75:47:f4:
46:0c:96:c4:84:99:6f:7e:28:ec:1d:4e:1b:32:51:
fd:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:88:C5:99:64:DC:C1:D6:15:69:F7:BC:F3:2D:48:47:F6:97:EF:1F
X509v3 Authority Key Identifier:
keyid:76:D4:21:5A:62:54:57:BC:05:32:19:1C:88:03:F7:C6:4B:7F:90:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dtQhWmJUV7wFMhkciAP3xkt_kGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b501de-3b1d-4d80-b6e9-f88d7ec3a526/1/dtQhWmJUV7wFMhkciAP3xkt_kGU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b501de-3b1d-4d80-b6e9-f88d7ec3a526/1/dtQhWmJUV7wFMhkciAP3xkt_kGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:fe:df:d2:3c:be:8a:30:1d:cd:c0:01:a0:09:10:70:d5:44:
88:b3:65:8f:4f:10:3c:14:39:b7:6a:73:61:d8:06:e3:93:6d:
ae:69:6c:68:d8:7c:8e:07:56:d3:19:8a:f4:70:92:05:95:36:
c8:01:05:f8:9d:ed:39:f7:33:91:79:c2:ff:74:76:d0:a6:95:
27:03:4e:be:78:95:cc:3e:29:17:6e:c8:0a:a9:cc:bc:c1:e7:
90:d6:f9:52:2d:c6:12:64:1c:ac:6f:28:e8:7b:41:82:23:ce:
4a:82:49:da:48:21:10:6a:c7:1a:73:eb:61:20:7b:17:ab:21:
a7:10:c0:54:1b:1a:c8:8f:de:83:36:d4:53:a7:e8:bc:15:c3:
f0:ec:07:cb:98:39:c4:78:15:dd:6f:a2:bf:f3:3c:ce:ab:29:
2d:6e:69:5c:ed:7e:01:90:4f:50:c9:68:d1:a6:de:14:73:19:
11:06:82:c4:eb:3d:94:a4:b5:7e:35:9d:3d:ca:54:58:61:c9:
2e:96:b2:05:25:5a:ce:e4:04:2f:b7:50:5c:ca:1d:e4:9a:61:
da:e0:51:f6:7d:68:8b:9e:36:10:06:8b:96:1c:c1:41:88:f9:
2d:0d:f5:2e:a2:f4:12:33:e2:80:06:92:68:08:cd:c4:68:a2:
42:21:1e:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:18:38 2025 by rpki-client