Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/299656-744a-4daa-8cfd-010a9856f785/1/dLJ8XVaEhkhT31uBVyIS7eMizgo.mft
File: dLJ8XVaEhkhT31uBVyIS7eMizgo.mft (raw, json)
Hash identifier: dE6neqZrD7/tybEJEyzJeDOiXiR1c24cDJ6c3HtLiTM=
Subject key identifier: 7B:D7:1B:07:0E:98:01:01:DA:D5:8A:FA:B8:84:4D:8B:1C:C8:EF:3E
Authority key identifier: 74:B2:7C:5D:56:84:86:48:53:DF:5B:81:57:22:12:ED:E3:22:CE:0A
Certificate issuer: /CN=74b27c5d5684864853df5b81572212ede322ce0a
Certificate serial: 019922FA831A3B85D3B27A6FB27EE1FF234B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dLJ8XVaEhkhT31uBVyIS7eMizgo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/299656-744a-4daa-8cfd-010a9856f785/1/dLJ8XVaEhkhT31uBVyIS7eMizgo.mft
Manifest number: 0346
Signing time: Sun 07 Sep 2025 07:01:06 +0000
Manifest this update: Sun 07 Sep 2025 07:01:06 +0000
Manifest next update: Mon 08 Sep 2025 07:01:06 +0000
Files and hashes: 1: dLJ8XVaEhkhT31uBVyIS7eMizgo.crl (hash: e/1jVDW0VGK7qeDxHCcZhPGQkvy0Gl1bj4RfAFbrw9c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/299656-744a-4daa-8cfd-010a9856f785/1/dLJ8XVaEhkhT31uBVyIS7eMizgo.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/299656-744a-4daa-8cfd-010a9856f785/1/dLJ8XVaEhkhT31uBVyIS7eMizgo.mft
rsync://rpki.ripe.net/repository/DEFAULT/dLJ8XVaEhkhT31uBVyIS7eMizgo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:83:1a:3b:85:d3:b2:7a:6f:b2:7e:e1:ff:23:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74b27c5d5684864853df5b81572212ede322ce0a
Validity
Not Before: Sep 7 07:01:06 2025 GMT
Not After : Sep 8 07:01:06 2025 GMT
Subject: CN=7bd71b070e980101dad58afab8844d8b1cc8ef3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:0f:96:48:e9:22:9f:76:8b:7c:1e:08:64:f0:
cf:c8:a3:e3:e5:0e:7b:2d:3e:22:8a:dd:a6:5f:52:
48:b2:cc:00:19:49:ef:90:75:51:e0:78:7f:22:2b:
9c:d5:d9:61:d0:c4:9b:83:72:b9:fa:3c:5b:81:0d:
8f:55:4c:27:fd:e2:1e:7a:06:50:8c:09:a9:de:e4:
cf:ba:52:f8:6a:f9:81:67:58:10:9a:11:15:cf:9d:
15:a8:19:a2:65:db:65:83:9b:25:c8:94:f0:a2:1a:
1e:16:a5:7b:82:60:fe:70:c2:5d:50:19:e9:f7:1a:
49:3c:df:5e:2e:f3:6f:df:2f:fa:a7:bc:fd:7f:14:
b4:01:aa:14:66:29:51:4e:31:11:5e:c0:bc:f1:9d:
7f:82:43:ac:c0:34:ee:e5:62:00:5a:e5:52:cb:d4:
4d:dd:73:24:9c:f7:c4:26:23:b0:0a:ee:2f:de:58:
e3:57:2e:5c:20:3d:9f:44:17:65:25:6b:64:33:25:
b0:a5:df:f6:6b:99:7d:ad:93:90:29:30:cc:4e:8a:
0d:e7:9e:5b:4b:a9:67:04:ac:46:e6:cd:bc:9e:dd:
25:d7:8d:a8:02:c4:3c:22:aa:04:a0:4a:c5:e0:35:
a5:ef:4f:35:5b:65:b3:35:22:85:6b:85:b5:39:b5:
ae:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:D7:1B:07:0E:98:01:01:DA:D5:8A:FA:B8:84:4D:8B:1C:C8:EF:3E
X509v3 Authority Key Identifier:
keyid:74:B2:7C:5D:56:84:86:48:53:DF:5B:81:57:22:12:ED:E3:22:CE:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dLJ8XVaEhkhT31uBVyIS7eMizgo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/299656-744a-4daa-8cfd-010a9856f785/1/dLJ8XVaEhkhT31uBVyIS7eMizgo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/299656-744a-4daa-8cfd-010a9856f785/1/dLJ8XVaEhkhT31uBVyIS7eMizgo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:dd:e3:d4:c8:29:53:85:c3:49:2e:01:2a:35:61:23:0e:5f:
99:b7:04:ba:54:7f:a4:72:bb:4a:cd:12:cf:6a:d2:bd:67:a4:
fb:0b:c2:c3:23:a9:c9:44:52:b3:01:a5:54:4f:29:2f:18:89:
dc:1e:31:99:51:df:a2:f5:83:e0:d8:2e:7f:fd:5d:e4:33:f7:
bf:3f:2c:37:f1:8c:24:d6:b0:86:ca:4d:9f:6d:f6:d5:b4:40:
d8:a4:20:e7:04:6e:90:dd:27:99:da:88:05:e5:56:64:29:af:
c5:5f:12:c8:06:c5:ca:58:d9:6f:9e:0c:3a:86:3c:c3:78:44:
95:6e:78:e8:23:4d:3b:95:e6:56:43:ef:86:8e:15:ee:92:1b:
13:69:30:01:1f:52:6f:e0:1d:4d:15:89:e5:d9:b6:24:45:ba:
08:10:ed:a3:56:f8:49:3c:97:ab:f1:09:fb:1c:81:26:48:9a:
31:2b:d0:bc:82:7d:91:1b:f9:58:9e:80:e8:e9:61:59:f9:93:
95:27:46:70:1d:96:20:d6:b8:2c:7c:f0:a6:43:e3:5b:72:24:
a0:ad:3d:52:61:03:88:9a:85:db:57:3a:24:d9:58:25:9d:28:
25:d3:01:f1:97:03:55:d7:03:79:c9:60:76:d0:76:70:31:51:
bb:6c:3c:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:38:31 2025 by rpki-client