Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/23da1c-435c-4c83-a295-bf85cd25427e/1/DcHMqlhPs5FOeS_VOQ47otMDM4w.mft
File: DcHMqlhPs5FOeS_VOQ47otMDM4w.mft (raw, json)
Hash identifier: IusZJ4fE3PTAqff3Sdmhu0MxcjJEtVskytYd6z8CiQs=
Subject key identifier: 26:8F:31:B2:33:90:37:C1:BA:59:3C:02:DF:27:DC:D0:44:B6:62:3B
Authority key identifier: 0D:C1:CC:AA:58:4F:B3:91:4E:79:2F:D5:39:0E:3B:A2:D3:03:33:8C
Certificate issuer: /CN=0dc1ccaa584fb3914e792fd5390e3ba2d303338c
Certificate serial: 019922FAD28CA54B6D4A9EFE480587E57E40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DcHMqlhPs5FOeS_VOQ47otMDM4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/23da1c-435c-4c83-a295-bf85cd25427e/1/DcHMqlhPs5FOeS_VOQ47otMDM4w.mft
Manifest number: 1037
Signing time: Sun 07 Sep 2025 07:01:27 +0000
Manifest this update: Sun 07 Sep 2025 07:01:27 +0000
Manifest next update: Mon 08 Sep 2025 07:01:27 +0000
Files and hashes: 1: DcHMqlhPs5FOeS_VOQ47otMDM4w.crl (hash: z2dVIRc/NCnbQVikXcWaJRWDjvjFaC0PqgGrQvC2zAU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/23da1c-435c-4c83-a295-bf85cd25427e/1/DcHMqlhPs5FOeS_VOQ47otMDM4w.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/23da1c-435c-4c83-a295-bf85cd25427e/1/DcHMqlhPs5FOeS_VOQ47otMDM4w.mft
rsync://rpki.ripe.net/repository/DEFAULT/DcHMqlhPs5FOeS_VOQ47otMDM4w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:d2:8c:a5:4b:6d:4a:9e:fe:48:05:87:e5:7e:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dc1ccaa584fb3914e792fd5390e3ba2d303338c
Validity
Not Before: Sep 7 07:01:27 2025 GMT
Not After : Sep 8 07:01:27 2025 GMT
Subject: CN=268f31b2339037c1ba593c02df27dcd044b6623b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:b7:b2:7e:f5:5b:58:eb:14:50:91:6d:e0:88:
c6:f5:4f:00:7b:09:74:72:87:17:36:f0:6b:83:18:
b9:e6:49:0e:80:c0:59:57:dc:89:4c:52:5b:6c:b9:
80:32:e8:79:65:92:64:d8:0b:8b:77:8f:b9:d9:ee:
9f:00:f4:60:19:cf:13:4b:32:29:6c:f3:32:7f:d8:
f0:af:38:d6:6c:32:1a:03:a3:4a:23:37:c4:71:d4:
a8:c4:07:ae:af:2b:59:1a:95:8c:ac:6b:f5:dd:91:
8d:e1:0f:db:65:0c:8a:1d:71:9d:a8:5e:50:89:ba:
ad:2f:1d:09:d8:15:04:69:5f:68:63:65:cb:99:58:
34:54:cd:57:d2:88:25:71:fd:b8:54:37:c6:e0:7e:
a5:be:d1:14:d0:6f:a9:28:ed:da:8e:d8:f1:a4:61:
00:aa:73:7b:71:6e:18:e3:83:15:2f:9d:91:dc:02:
86:b1:0c:27:ca:d8:cf:2c:7f:73:a3:d7:84:a4:e1:
7d:dc:81:c1:6f:9c:10:9d:63:82:92:a7:ec:41:c7:
1e:b2:f0:4a:e5:a0:14:07:c3:93:a1:64:c3:69:ab:
85:14:78:4e:94:e0:20:6a:6b:f4:c3:72:e5:02:b9:
ca:1d:2f:6e:b6:b4:6e:2e:04:08:23:c4:6d:86:03:
6c:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:8F:31:B2:33:90:37:C1:BA:59:3C:02:DF:27:DC:D0:44:B6:62:3B
X509v3 Authority Key Identifier:
keyid:0D:C1:CC:AA:58:4F:B3:91:4E:79:2F:D5:39:0E:3B:A2:D3:03:33:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DcHMqlhPs5FOeS_VOQ47otMDM4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/23da1c-435c-4c83-a295-bf85cd25427e/1/DcHMqlhPs5FOeS_VOQ47otMDM4w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/23da1c-435c-4c83-a295-bf85cd25427e/1/DcHMqlhPs5FOeS_VOQ47otMDM4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:23:f8:eb:66:d1:e3:34:c1:ba:c3:67:5d:71:88:a0:91:f1:
1d:75:ca:a7:83:1b:d7:9d:ae:f4:93:5d:69:91:ab:a4:3d:57:
ae:0b:db:fc:dc:5d:2b:29:2c:d7:fd:f2:3b:ec:b5:2e:dc:32:
c6:db:da:44:ef:5f:15:92:80:b9:26:f6:21:84:e4:c7:6c:05:
ac:e2:64:f4:28:bd:fb:54:98:73:62:96:af:28:0b:64:c5:ba:
8e:33:e3:d1:73:3b:d5:9b:41:94:6f:25:57:fa:b4:d1:71:14:
d8:da:7a:eb:11:e6:0a:78:89:23:f8:08:ba:72:b1:7b:8f:09:
6a:66:7e:33:cd:ca:51:79:4a:50:8b:68:5e:ee:f9:71:73:19:
d7:f6:70:56:f6:be:52:18:4a:b4:53:97:64:e7:e1:57:2b:a4:
84:9e:08:62:be:4c:a6:c4:65:c4:aa:1d:bd:58:c7:a9:2a:9e:
7e:4b:40:7c:86:fb:44:3e:ea:45:47:ec:21:46:b7:44:d3:9b:
27:1d:4d:ce:5f:84:42:6c:1e:9b:98:1f:c4:69:31:20:d8:43:
0f:b1:34:f9:83:a2:88:cd:f9:bf:77:2b:e1:e4:db:42:7a:13:
81:b9:a5:64:df:db:0a:83:0c:96:e8:35:dc:5c:a6:5d:1b:9e:
9d:80:bf:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:04:30 2025 by rpki-client