Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/fc0d21-7f14-44ab-995c-e0bae8bae674/1/dCnR70knCBDhAgzqhhmGQjORMaA.mft
File: dCnR70knCBDhAgzqhhmGQjORMaA.mft (raw, json)
Hash identifier: SHKQc6qQaT+7U47ruUPbFlWMwpcQ1+Z9JEAUChjOtMI=
Subject key identifier: 17:47:3E:39:92:84:C2:F0:96:6D:52:10:CA:32:46:3A:AC:29:14:32
Authority key identifier: 74:29:D1:EF:49:27:08:10:E1:02:0C:EA:86:19:86:42:33:91:31:A0
Certificate issuer: /CN=7429d1ef49270810e1020cea86198642339131a0
Certificate serial: 0198458A04CE571B7459F752127173022FBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dCnR70knCBDhAgzqhhmGQjORMaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/fc0d21-7f14-44ab-995c-e0bae8bae674/1/dCnR70knCBDhAgzqhhmGQjORMaA.mft
Manifest number: 0ACB
Signing time: Sat 26 Jul 2025 07:02:09 +0000
Manifest this update: Sat 26 Jul 2025 07:02:09 +0000
Manifest next update: Sun 27 Jul 2025 07:02:09 +0000
Files and hashes: 1: dCnR70knCBDhAgzqhhmGQjORMaA.crl (hash: 2N1RNzgsN9k8wfoeSaIP1fTc9Coky1o07prvHT9jglc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/fc0d21-7f14-44ab-995c-e0bae8bae674/1/dCnR70knCBDhAgzqhhmGQjORMaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/fc0d21-7f14-44ab-995c-e0bae8bae674/1/dCnR70knCBDhAgzqhhmGQjORMaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/dCnR70knCBDhAgzqhhmGQjORMaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 06:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:8a:04:ce:57:1b:74:59:f7:52:12:71:73:02:2f:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7429d1ef49270810e1020cea86198642339131a0
Validity
Not Before: Jul 26 07:02:09 2025 GMT
Not After : Jul 27 07:02:09 2025 GMT
Subject: CN=17473e399284c2f0966d5210ca32463aac291432
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:0a:fb:5c:fd:3f:13:c1:73:3e:dd:bc:dc:55:
44:56:50:4f:52:9c:c8:d8:9d:2b:bd:26:9b:d2:12:
9a:64:53:00:bd:8a:46:51:5f:76:41:24:0d:b9:77:
28:3a:42:24:22:5c:90:d5:e4:84:9d:2f:c6:3f:be:
42:05:fc:52:fb:1e:c4:6d:b8:94:01:08:e6:c4:53:
0a:d0:80:d6:0f:ec:1f:7c:67:07:e0:f6:5b:a5:e3:
8b:6e:4e:22:c7:60:4d:f3:bd:aa:51:91:9f:38:9a:
25:d3:a2:f6:1e:8a:8f:42:11:54:7c:de:56:27:44:
b3:1f:7a:f2:f3:23:82:5d:8c:84:5b:f3:cc:63:01:
e8:87:23:75:26:fb:2e:2b:ec:cc:5f:64:7b:9c:c9:
8c:c4:b2:3d:f5:da:36:05:16:31:d7:a5:e7:06:c7:
92:b8:ed:38:79:4c:b6:74:16:5e:df:48:67:6c:07:
3d:52:5c:a7:0a:52:01:8d:cd:7a:ac:8b:44:19:ce:
f0:da:77:31:23:76:b9:74:ae:76:26:b1:3a:b3:6d:
3a:72:39:b9:c4:9f:34:3b:b9:62:0d:f8:49:af:61:
44:63:95:6e:ef:5a:41:e9:99:ba:c4:23:a6:d7:b6:
b2:3a:67:1e:6b:25:e4:a2:2d:da:b8:e1:d9:f3:cd:
2a:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:47:3E:39:92:84:C2:F0:96:6D:52:10:CA:32:46:3A:AC:29:14:32
X509v3 Authority Key Identifier:
keyid:74:29:D1:EF:49:27:08:10:E1:02:0C:EA:86:19:86:42:33:91:31:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dCnR70knCBDhAgzqhhmGQjORMaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/fc0d21-7f14-44ab-995c-e0bae8bae674/1/dCnR70knCBDhAgzqhhmGQjORMaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/fc0d21-7f14-44ab-995c-e0bae8bae674/1/dCnR70knCBDhAgzqhhmGQjORMaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:ed:e2:7d:0b:be:6a:5d:25:71:e8:58:85:0e:9d:7f:fd:87:
d4:2b:d3:28:cf:ad:b5:ac:26:a4:e9:0d:9d:29:5c:0e:8d:dd:
c6:5c:f2:78:13:1a:86:06:bf:4c:e3:13:8a:e0:d0:f2:66:bc:
d5:02:be:cf:6b:70:0c:ef:cf:6b:4e:b4:6f:11:a5:1b:9d:31:
d2:04:57:4f:63:aa:c6:53:7d:b0:00:26:83:ad:55:b9:13:d5:
52:29:89:fd:a9:f9:ee:f4:f3:3a:b3:b4:71:df:99:35:7d:e1:
2c:e6:6e:9b:08:03:30:66:aa:79:29:34:a5:e2:f5:41:f5:16:
9a:32:c3:32:be:69:f9:c3:0e:ce:97:df:a8:d9:5c:c6:fc:38:
46:51:92:19:d3:93:51:1c:a1:3d:6d:76:15:e7:d7:28:b7:1a:
22:36:e3:d7:e7:97:78:4c:b3:42:ff:cd:4f:79:f7:6a:8b:8e:
bf:2c:63:af:1f:4d:39:11:71:24:a5:32:2f:6c:d5:49:25:e4:
68:ed:a6:ef:be:b4:a9:99:6a:3e:97:a5:62:45:eb:8e:77:4e:
ec:81:fd:6d:2b:9b:52:9a:f1:df:b7:0d:c3:9f:70:98:81:83:
50:7c:28:ed:e7:d7:cc:23:ee:6a:38:8e:e9:5c:1e:11:11:65:
2c:97:08:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 14:59:21 2025 by rpki-client