Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/2754de-a5d5-487f-9fdd-c33b3644dd3f/1/dcqnmRKIh2aA16yQqFafP8IDh_o.mft
File: dcqnmRKIh2aA16yQqFafP8IDh_o.mft (raw, json)
Hash identifier: 2hL7jCAfaFUBeWbmEmEHamaOpwDg4yJjpvVlzzu2Bxg=
Subject key identifier: 58:D8:0A:BB:4F:A1:EE:C7:34:C1:F4:DC:34:CC:02:86:CC:FD:C6:40
Authority key identifier: 75:CA:A7:99:12:88:87:66:80:D7:AC:90:A8:56:9F:3F:C2:03:87:FA
Certificate issuer: /CN=75caa7991288876680d7ac90a8569f3fc20387fa
Certificate serial: 0199221F400F65E5CB6645DED6B200A138C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dcqnmRKIh2aA16yQqFafP8IDh_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/2754de-a5d5-487f-9fdd-c33b3644dd3f/1/dcqnmRKIh2aA16yQqFafP8IDh_o.mft
Manifest number: 166E
Signing time: Sun 07 Sep 2025 03:01:37 +0000
Manifest this update: Sun 07 Sep 2025 03:01:37 +0000
Manifest next update: Mon 08 Sep 2025 03:01:37 +0000
Files and hashes: 1: dcqnmRKIh2aA16yQqFafP8IDh_o.crl (hash: Ze9Es/LVTNJaqG/O44a/H2U3pycNqtMB/g2zZI7Tn2k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/2754de-a5d5-487f-9fdd-c33b3644dd3f/1/dcqnmRKIh2aA16yQqFafP8IDh_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/2754de-a5d5-487f-9fdd-c33b3644dd3f/1/dcqnmRKIh2aA16yQqFafP8IDh_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/dcqnmRKIh2aA16yQqFafP8IDh_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1f:40:0f:65:e5:cb:66:45:de:d6:b2:00:a1:38:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75caa7991288876680d7ac90a8569f3fc20387fa
Validity
Not Before: Sep 7 03:01:37 2025 GMT
Not After : Sep 8 03:01:37 2025 GMT
Subject: CN=58d80abb4fa1eec734c1f4dc34cc0286ccfdc640
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f6:f8:18:3a:ed:a9:1c:f2:e4:23:1b:24:57:
73:5e:06:5e:49:e5:d7:c4:5d:79:d6:c3:a4:ab:21:
90:0b:fc:f5:ce:c6:2d:70:9c:52:0f:02:80:99:f1:
3e:ec:c7:0e:90:30:48:60:15:2c:d2:bf:e6:2c:c3:
36:60:89:c1:17:e9:07:28:43:b2:fd:17:60:43:b7:
17:d8:a9:87:8f:d5:e7:c3:9f:3b:38:e2:ab:3d:ff:
e8:12:d5:be:ce:42:60:2a:f8:a6:3c:c4:17:38:33:
21:bf:c4:6b:e3:3a:e7:85:0d:1a:f7:b8:d3:62:d9:
38:fe:c6:cc:d6:e3:ca:11:97:e0:6d:a2:f4:fb:07:
30:09:98:3f:e4:e2:ae:df:0f:54:e0:36:bc:2d:0e:
09:13:8a:48:17:d1:19:8e:64:71:91:41:63:86:e5:
e0:10:66:78:e9:c6:70:77:15:44:3a:92:e1:9c:13:
68:d2:ef:ca:2d:36:79:db:ae:25:16:ab:c9:83:c5:
8e:90:f2:ad:4d:f2:51:1c:60:e5:68:10:0a:0c:aa:
76:7a:93:ea:7c:78:0e:e2:91:75:cb:e2:43:19:f3:
c9:88:ec:bf:7b:e4:96:58:25:d4:77:c6:b7:c4:28:
17:f6:66:68:c7:0a:4c:ef:c6:7b:c4:38:eb:2d:bf:
9f:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:D8:0A:BB:4F:A1:EE:C7:34:C1:F4:DC:34:CC:02:86:CC:FD:C6:40
X509v3 Authority Key Identifier:
keyid:75:CA:A7:99:12:88:87:66:80:D7:AC:90:A8:56:9F:3F:C2:03:87:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dcqnmRKIh2aA16yQqFafP8IDh_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/2754de-a5d5-487f-9fdd-c33b3644dd3f/1/dcqnmRKIh2aA16yQqFafP8IDh_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/2754de-a5d5-487f-9fdd-c33b3644dd3f/1/dcqnmRKIh2aA16yQqFafP8IDh_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:cd:78:b9:db:2c:01:5f:f8:fb:ed:8b:f0:f9:01:cc:6c:d4:
6c:3c:6d:9a:b3:c1:25:11:1b:07:68:0d:4e:dd:6e:8e:4c:b1:
29:22:f3:68:f8:b0:4a:47:21:55:8a:ad:eb:59:9b:51:bb:1c:
02:a6:e7:5f:da:0c:3a:6c:ed:b7:35:e2:83:8a:a1:bd:d2:fc:
90:4d:4b:38:cf:60:bc:c3:21:b8:8f:30:ab:58:46:fd:e1:2e:
30:45:ef:b9:7f:ae:a7:67:02:23:0c:17:41:79:22:1d:d2:16:
45:dd:f8:94:fa:d9:a5:df:38:af:be:04:cc:d3:09:17:b2:d9:
dc:83:77:24:4c:8b:35:9a:b0:12:61:4e:36:6f:96:fd:06:66:
15:9f:4c:f7:3b:60:89:be:7a:9e:16:02:6c:15:dd:00:17:66:
5d:b0:7a:59:64:c4:0c:f5:81:7d:9a:4f:d0:5c:3a:db:4e:ed:
e2:2c:54:52:13:3a:b3:cc:57:8b:8a:42:15:4b:8e:7c:6b:d0:
e6:5a:eb:de:6a:95:78:ae:e2:ef:08:dc:e1:c4:98:20:ff:c1:
60:44:6d:72:ef:fe:92:09:b8:6d:69:78:d8:e1:df:94:94:f6:
39:44:86:1a:3a:55:04:53:4b:23:a0:77:75:56:c4:9f:3a:2b:
99:fc:c5:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:30:56 2025 by rpki-client