Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/2c8dbc-40ae-49c6-8dd3-c25debcb1197/1/DudNGMQEmi2bgSwqWFXP63Wvpmc.mft
File: DudNGMQEmi2bgSwqWFXP63Wvpmc.mft (raw, json)
Hash identifier: Nk5KwvbcNlOo8XYstFdK0TCsWRtTguTy2HTW+xhqMS4=
Subject key identifier: 86:F7:B9:A2:FD:36:36:3E:D3:2F:BB:6B:17:E3:8F:35:3A:ED:2B:5D
Authority key identifier: 0E:E7:4D:18:C4:04:9A:2D:9B:81:2C:2A:58:55:CF:EB:75:AF:A6:67
Certificate issuer: /CN=0ee74d18c4049a2d9b812c2a5855cfeb75afa667
Certificate serial: 019849D30C6DDC83D7519F0A2474C3585DA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DudNGMQEmi2bgSwqWFXP63Wvpmc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/2c8dbc-40ae-49c6-8dd3-c25debcb1197/1/DudNGMQEmi2bgSwqWFXP63Wvpmc.mft
Manifest number: 15FD
Signing time: Sun 27 Jul 2025 03:00:24 +0000
Manifest this update: Sun 27 Jul 2025 03:00:24 +0000
Manifest next update: Mon 28 Jul 2025 03:00:24 +0000
Files and hashes: 1: DudNGMQEmi2bgSwqWFXP63Wvpmc.crl (hash: rzfSfsH5R1OviQahEfOJo7k8TZn5IZQQmAT8G4M56jo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/2c8dbc-40ae-49c6-8dd3-c25debcb1197/1/DudNGMQEmi2bgSwqWFXP63Wvpmc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/2c8dbc-40ae-49c6-8dd3-c25debcb1197/1/DudNGMQEmi2bgSwqWFXP63Wvpmc.mft
rsync://rpki.ripe.net/repository/DEFAULT/DudNGMQEmi2bgSwqWFXP63Wvpmc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:0c:6d:dc:83:d7:51:9f:0a:24:74:c3:58:5d:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ee74d18c4049a2d9b812c2a5855cfeb75afa667
Validity
Not Before: Jul 27 03:00:24 2025 GMT
Not After : Jul 28 03:00:24 2025 GMT
Subject: CN=86f7b9a2fd36363ed32fbb6b17e38f353aed2b5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:18:fd:61:b4:83:86:5f:05:a3:a3:4f:cf:9a:
45:1f:e6:fd:d6:47:e2:a1:83:d9:5d:79:a8:22:50:
64:95:7d:96:40:c8:d2:17:cd:1d:a4:68:fb:dd:a6:
dc:26:66:de:30:57:7d:19:ad:d8:0a:4d:ba:cb:e2:
c1:aa:d0:74:a0:fa:5f:7f:15:08:8d:49:da:1e:86:
f3:bc:77:bf:ad:79:7f:79:23:f9:68:79:0f:cd:48:
06:83:3d:a4:b3:0b:b5:43:59:d5:ec:55:fc:e4:72:
a3:b3:83:27:be:21:9f:c2:65:a7:6c:eb:8d:2f:97:
9d:55:eb:9c:eb:2e:4e:58:b1:11:5c:1c:cc:c5:d9:
09:36:28:d8:6d:ac:e8:36:f3:83:db:fb:b1:23:1c:
5b:e4:8a:2c:14:39:d9:7e:58:47:7b:25:e4:63:b8:
fb:98:e1:3f:3e:b0:50:5a:a2:8a:95:2d:b2:28:4e:
3c:a3:5e:af:8d:1b:3c:1b:ed:9e:9f:68:5c:35:8a:
27:6f:71:26:f8:e2:ff:02:ba:67:bd:49:21:e2:46:
3b:80:0c:42:b3:3f:3e:17:bd:f0:82:00:3b:98:76:
a7:c5:3f:c0:12:e3:74:58:91:a3:a7:a9:b1:36:21:
cb:33:be:3d:c9:9d:15:3c:17:46:db:4d:5a:62:b2:
40:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:F7:B9:A2:FD:36:36:3E:D3:2F:BB:6B:17:E3:8F:35:3A:ED:2B:5D
X509v3 Authority Key Identifier:
keyid:0E:E7:4D:18:C4:04:9A:2D:9B:81:2C:2A:58:55:CF:EB:75:AF:A6:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DudNGMQEmi2bgSwqWFXP63Wvpmc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/2c8dbc-40ae-49c6-8dd3-c25debcb1197/1/DudNGMQEmi2bgSwqWFXP63Wvpmc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/2c8dbc-40ae-49c6-8dd3-c25debcb1197/1/DudNGMQEmi2bgSwqWFXP63Wvpmc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:83:d9:52:a3:9c:30:da:a0:c5:18:cc:2d:9c:0a:5b:1d:f8:
26:d7:28:73:da:c6:43:0d:9a:d2:bf:44:5f:73:74:8f:e3:d1:
1a:19:2b:a4:d7:3b:b3:6f:0d:bf:15:cd:5b:31:d3:2f:e1:a2:
74:88:86:8c:88:70:bb:d2:b0:24:77:da:8e:bc:3a:ff:c9:de:
07:3c:05:99:fb:34:bc:55:68:8d:1e:ec:87:ee:9e:4f:49:ce:
8a:0a:ca:36:e0:6e:32:4b:43:a0:35:73:e3:5e:d3:16:b3:7e:
05:b3:b5:f4:66:fa:9c:b4:3c:29:2b:5f:8e:dc:cb:55:09:7c:
e9:70:ae:e5:c1:a6:a0:cf:00:89:02:5c:99:1d:c4:cc:ae:b3:
d3:87:4c:05:88:59:71:6f:68:34:34:15:b8:04:d2:39:a4:ce:
6d:0a:89:ba:0e:15:c7:36:6a:44:3e:1e:58:9a:99:b7:15:88:
8f:df:e4:e1:94:bd:11:8f:56:97:88:bb:00:50:b4:45:be:25:
c4:0d:a5:e4:0e:8d:5c:64:fc:5c:c4:8d:0b:3f:ba:85:e2:87:
53:03:e1:7b:2e:ef:57:4d:eb:88:35:94:80:83:3a:f7:2d:82:
e4:1f:07:78:3a:01:07:5f:dc:1b:76:fd:ad:ec:ca:16:a1:9c:
c0:85:c0:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:52:36 2025 by rpki-client