Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/dfa6a1-1e4c-49ff-a480-274232d69505/1/dQRxYHUyqMev1g1PMXqtxJDrogY.mft
File: dQRxYHUyqMev1g1PMXqtxJDrogY.mft (raw, json)
Hash identifier: i5f6JdKdLo3tKZb9wY/XOmBYQR6ihRGtl59jDa+GUNk=
Subject key identifier: EC:1C:00:C7:EA:CD:30:D7:32:04:6A:A2:9E:44:67:85:76:F5:70:07
Authority key identifier: 75:04:71:60:75:32:A8:C7:AF:D6:0D:4F:31:7A:AD:C4:90:EB:A2:06
Certificate issuer: /CN=750471607532a8c7afd60d4f317aadc490eba206
Certificate serial: 019923A0C1EF588E23FBBB442DA0EF1DA7C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQRxYHUyqMev1g1PMXqtxJDrogY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/dfa6a1-1e4c-49ff-a480-274232d69505/1/dQRxYHUyqMev1g1PMXqtxJDrogY.mft
Manifest number: 166E
Signing time: Sun 07 Sep 2025 10:02:41 +0000
Manifest this update: Sun 07 Sep 2025 10:02:41 +0000
Manifest next update: Mon 08 Sep 2025 10:02:41 +0000
Files and hashes: 1: dQRxYHUyqMev1g1PMXqtxJDrogY.crl (hash: gFkaWScPXGo0J8i4BXCK4vtXx98RHRMBtRp1droz0wc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/dfa6a1-1e4c-49ff-a480-274232d69505/1/dQRxYHUyqMev1g1PMXqtxJDrogY.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/dfa6a1-1e4c-49ff-a480-274232d69505/1/dQRxYHUyqMev1g1PMXqtxJDrogY.mft
rsync://rpki.ripe.net/repository/DEFAULT/dQRxYHUyqMev1g1PMXqtxJDrogY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:c1:ef:58:8e:23:fb:bb:44:2d:a0:ef:1d:a7:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=750471607532a8c7afd60d4f317aadc490eba206
Validity
Not Before: Sep 7 10:02:41 2025 GMT
Not After : Sep 8 10:02:41 2025 GMT
Subject: CN=ec1c00c7eacd30d732046aa29e44678576f57007
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:2f:a4:ad:38:33:48:9b:98:4e:ac:b0:5a:0f:
9f:00:a5:d2:c7:f7:6b:12:eb:b9:b6:23:2e:a1:8b:
8d:b9:8a:24:bf:d9:dc:1c:97:83:72:46:85:cd:23:
4b:26:c3:51:f1:0b:05:a8:cd:23:3c:2b:7e:bb:43:
cc:cf:5d:f1:c3:fd:db:f4:ea:b9:7e:80:8a:56:20:
99:9d:2a:73:49:4a:a3:ee:1c:03:2c:4b:78:de:39:
4e:db:3f:91:82:20:25:c2:bd:6d:ec:d1:16:e0:fe:
4a:1c:0f:05:ed:23:c9:60:63:d5:ed:4b:bd:4d:46:
54:65:da:5f:6e:8f:3f:7e:2f:ad:35:90:fa:05:8c:
5a:bd:ef:1a:02:cc:ea:7f:63:1b:3c:cb:a3:d8:ad:
f4:0f:24:10:85:aa:1c:6c:ec:6e:06:8c:47:30:79:
a3:83:52:b2:0f:a3:83:f9:e2:38:74:73:07:81:42:
e1:ae:97:a3:e4:fb:ba:76:87:38:e0:b5:4c:35:8e:
4e:d4:10:f2:75:b0:c7:5f:ac:82:b1:15:8b:80:93:
a7:84:7b:82:e0:4e:a9:aa:22:74:a5:3c:ef:60:55:
d5:72:23:e8:b1:79:8d:b6:5f:79:8a:bb:ea:7f:3c:
c4:30:db:cc:ae:42:14:9e:28:da:47:1e:7d:f4:74:
e3:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:1C:00:C7:EA:CD:30:D7:32:04:6A:A2:9E:44:67:85:76:F5:70:07
X509v3 Authority Key Identifier:
keyid:75:04:71:60:75:32:A8:C7:AF:D6:0D:4F:31:7A:AD:C4:90:EB:A2:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQRxYHUyqMev1g1PMXqtxJDrogY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/dfa6a1-1e4c-49ff-a480-274232d69505/1/dQRxYHUyqMev1g1PMXqtxJDrogY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/dfa6a1-1e4c-49ff-a480-274232d69505/1/dQRxYHUyqMev1g1PMXqtxJDrogY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:11:a2:85:ce:37:24:ab:db:5a:e2:f6:80:fc:21:e8:ed:2e:
dd:dd:e7:6d:3a:ea:ac:a0:30:1e:f2:84:6d:6a:d9:cb:b9:ea:
28:38:b6:ce:45:5b:7c:35:7f:9c:8d:d2:16:de:3f:b4:28:67:
d6:94:7f:3d:52:e4:5f:cb:75:c5:e1:a1:ce:e5:d4:a9:e7:fe:
34:15:a7:f7:6f:0f:d9:e4:95:5e:3f:c6:d1:eb:9d:78:51:f2:
01:89:ac:19:89:94:08:9b:2f:9a:12:d0:8a:1c:3e:5b:23:ee:
21:87:1f:78:4e:03:67:a4:ab:4e:0e:98:17:2d:05:08:01:c3:
ab:81:df:c1:b0:59:c8:2b:c5:6c:c6:bc:1e:e1:43:34:02:f2:
f0:7c:ee:54:ab:52:e7:5b:23:64:ae:1f:f7:cc:41:07:6f:0d:
21:5e:8f:df:ce:f4:b6:36:40:06:ac:df:10:f3:1e:af:64:59:
3c:c8:d1:c3:95:cf:4c:57:ee:3e:32:ce:5c:38:48:17:73:b0:
e6:50:ae:a7:7a:b1:a8:67:17:0e:86:33:6e:53:64:d3:1f:3f:
23:30:b6:42:aa:0a:35:53:c9:21:b8:91:cb:da:37:b3:26:ab:
61:e8:e5:9d:e7:9c:57:45:57:51:ed:c4:02:5a:6d:1a:aa:2c:
78:c7:b1:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 15:00:31 2025 by rpki-client