Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/c49ec2-37da-41a9-96fb-5141fa39080a/1/dCL5hcs0oDx8VYFkLG1utDLIPpQ.mft
File: dCL5hcs0oDx8VYFkLG1utDLIPpQ.mft (raw, json)
Hash identifier: 4Re12YMtY4BJKSF3W2t2GE+qCpl50ESGbFgyJ32oMtM=
Subject key identifier: 3E:C1:A1:15:D6:77:97:98:85:BC:9A:C9:EA:08:ED:E8:3B:63:6E:3F
Authority key identifier: 74:22:F9:85:CB:34:A0:3C:7C:55:81:64:2C:6D:6E:B4:32:C8:3E:94
Certificate issuer: /CN=7422f985cb34a03c7c5581642c6d6eb432c83e94
Certificate serial: 0199240CDFA95878FB9CC582C98F03B63778
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dCL5hcs0oDx8VYFkLG1utDLIPpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/c49ec2-37da-41a9-96fb-5141fa39080a/1/dCL5hcs0oDx8VYFkLG1utDLIPpQ.mft
Manifest number: 0E49
Signing time: Sun 07 Sep 2025 12:00:47 +0000
Manifest this update: Sun 07 Sep 2025 12:00:47 +0000
Manifest next update: Mon 08 Sep 2025 12:00:47 +0000
Files and hashes: 1: dCL5hcs0oDx8VYFkLG1utDLIPpQ.crl (hash: CD9KeC4gjssA1IFO1QYDUvZxx7SGev/fA5GeJ5yW4Wg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/c49ec2-37da-41a9-96fb-5141fa39080a/1/dCL5hcs0oDx8VYFkLG1utDLIPpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/c49ec2-37da-41a9-96fb-5141fa39080a/1/dCL5hcs0oDx8VYFkLG1utDLIPpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/dCL5hcs0oDx8VYFkLG1utDLIPpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:24:0c:df:a9:58:78:fb:9c:c5:82:c9:8f:03:b6:37:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7422f985cb34a03c7c5581642c6d6eb432c83e94
Validity
Not Before: Sep 7 12:00:47 2025 GMT
Not After : Sep 8 12:00:47 2025 GMT
Subject: CN=3ec1a115d677979885bc9ac9ea08ede83b636e3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:99:f7:16:7c:e3:cb:73:3d:76:9a:d2:fa:4a:
b5:20:5d:52:87:2f:0e:d0:aa:2b:b4:55:cc:80:d3:
89:95:3d:9c:a3:47:3d:e8:bb:49:72:fb:8a:a0:4e:
e5:87:af:11:84:a4:3b:14:7d:80:e3:b6:e9:d6:47:
6f:e6:12:7e:9e:47:a5:a7:8b:24:0c:cd:9a:0c:33:
e4:e4:73:90:10:bb:40:3c:e8:9a:c7:62:0a:1b:bc:
4f:78:b5:33:21:fe:af:aa:2e:38:94:2c:01:97:f7:
92:10:07:bd:1f:46:6e:1e:e2:d5:c3:37:2d:36:91:
d9:3d:5c:23:85:c9:dd:53:91:11:e5:d6:4c:ed:95:
af:9e:75:ad:42:a3:bc:9d:67:21:0b:55:ae:8e:0d:
0b:74:83:15:37:69:15:24:b8:c3:ca:77:ae:94:f0:
08:fc:c4:73:28:14:01:db:6e:95:1b:24:73:2b:6c:
db:3d:c9:d4:88:ae:e0:8b:1f:de:41:95:a5:85:03:
b8:82:05:a0:c5:d4:52:14:2b:b8:6a:d8:2a:18:28:
6f:ad:51:e2:9e:d0:30:17:e3:4a:69:c4:c4:17:42:
8f:0c:4f:53:dd:e4:8f:92:4c:94:12:80:4f:33:10:
2e:2e:da:e4:0d:9f:92:7b:26:d2:47:a1:51:ca:eb:
18:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:C1:A1:15:D6:77:97:98:85:BC:9A:C9:EA:08:ED:E8:3B:63:6E:3F
X509v3 Authority Key Identifier:
keyid:74:22:F9:85:CB:34:A0:3C:7C:55:81:64:2C:6D:6E:B4:32:C8:3E:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dCL5hcs0oDx8VYFkLG1utDLIPpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/c49ec2-37da-41a9-96fb-5141fa39080a/1/dCL5hcs0oDx8VYFkLG1utDLIPpQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/c49ec2-37da-41a9-96fb-5141fa39080a/1/dCL5hcs0oDx8VYFkLG1utDLIPpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:5d:da:e8:1c:29:74:81:e7:fd:90:06:b5:c8:c5:2f:f1:7a:
ce:4a:0d:3e:82:24:a7:55:9a:5a:46:a5:b7:cc:e2:bc:8e:80:
27:f0:95:24:9d:e4:3d:a7:ff:37:ed:f1:8c:9c:fd:9e:3e:18:
09:ac:6b:09:2c:1e:c4:2e:49:f6:f9:56:11:ce:b7:d7:07:41:
94:08:3f:b9:f0:90:5f:db:2a:b0:c6:7d:28:56:f7:7d:a3:23:
16:4b:a8:88:e7:82:d7:82:0e:b8:1f:09:7d:3c:62:af:72:11:
31:29:f6:b4:29:57:48:a9:d0:1c:a5:f9:72:74:dd:fb:96:71:
92:36:d0:86:ff:eb:b3:86:60:bc:7e:e6:15:94:ec:d3:60:94:
02:4b:bb:10:d0:b1:6b:a7:cb:87:4c:a1:7e:ae:9d:f2:1c:bd:
9e:e5:3e:5c:79:47:4a:d5:c1:a4:da:66:86:98:bc:94:6a:5a:
01:18:3b:98:9e:a3:e9:bc:f9:89:30:83:f8:06:d6:e6:53:13:
12:56:15:3f:ae:40:69:bd:52:76:5f:9f:93:eb:6e:d5:0b:6a:
9e:1a:b6:19:6e:49:8f:a3:27:aa:1b:0f:7a:f1:48:22:0a:4e:
19:8d:4a:1d:c1:d3:97:48:05:84:75:9d:1c:77:b8:75:da:b7:
ce:40:5f:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:47:50 2025 by rpki-client