Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/2754de-a5d5-487f-9fdd-c33b3644dd3f/1/dcqnmRKIh2aA16yQqFafP8IDh_o.mft
File: dcqnmRKIh2aA16yQqFafP8IDh_o.mft (raw, json)
Hash identifier: zqCDMEsNCTN1AOnGsJ7zKB1A0Gkz8+jboLVq7Tsy2Zs=
Subject key identifier: 91:C1:19:12:3E:C3:83:33:0A:E3:62:6D:31:76:80:98:7A:A9:31:BA
Authority key identifier: 75:CA:A7:99:12:88:87:66:80:D7:AC:90:A8:56:9F:3F:C2:03:87:FA
Certificate issuer: /CN=75caa7991288876680d7ac90a8569f3fc20387fa
Certificate serial: 019748FA016767CAE34235DA140028735B71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dcqnmRKIh2aA16yQqFafP8IDh_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/2754de-a5d5-487f-9fdd-c33b3644dd3f/1/dcqnmRKIh2aA16yQqFafP8IDh_o.mft
Manifest number: 1579
Signing time: Sat 07 Jun 2025 06:00:33 +0000
Manifest this update: Sat 07 Jun 2025 06:00:33 +0000
Manifest next update: Sun 08 Jun 2025 06:00:33 +0000
Files and hashes: 1: dcqnmRKIh2aA16yQqFafP8IDh_o.crl (hash: CEFxbX53+YUQgrDeAg0sul9vl1gz5VSH618OTbZB+aQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/2754de-a5d5-487f-9fdd-c33b3644dd3f/1/dcqnmRKIh2aA16yQqFafP8IDh_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/2754de-a5d5-487f-9fdd-c33b3644dd3f/1/dcqnmRKIh2aA16yQqFafP8IDh_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/dcqnmRKIh2aA16yQqFafP8IDh_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 06:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:fa:01:67:67:ca:e3:42:35:da:14:00:28:73:5b:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75caa7991288876680d7ac90a8569f3fc20387fa
Validity
Not Before: Jun 7 06:00:33 2025 GMT
Not After : Jun 8 06:00:33 2025 GMT
Subject: CN=91c119123ec383330ae3626d317680987aa931ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:43:94:d8:31:35:c4:ea:31:ff:a2:cb:f2:2c:
39:e2:90:1f:bf:c6:ce:cc:0a:87:04:8f:40:73:7d:
b9:7f:0f:a6:00:e6:17:8f:98:3f:26:fb:4b:f4:6a:
b1:d4:cf:5f:73:53:17:2e:a5:55:86:c5:d6:30:b6:
d0:a8:45:2b:a6:9f:ed:82:74:2f:5d:d9:ca:69:35:
6c:1d:03:ea:90:f2:87:a9:40:d4:28:60:9d:a7:68:
11:22:78:b7:bc:8a:87:27:33:91:96:f8:db:c7:08:
23:87:0b:19:95:2f:f7:03:cc:c1:5a:2c:df:85:e4:
88:cb:88:24:6c:55:be:66:e1:1f:22:81:58:07:be:
2c:d9:3e:64:c9:ed:fd:37:d9:9d:c2:31:92:b7:1e:
c1:5d:b7:34:96:0e:d1:d6:e8:3e:98:e9:66:c1:b6:
f4:9f:be:ec:39:62:dc:35:7c:fe:ac:74:ba:e7:8a:
3a:db:c5:dc:0d:25:ae:45:56:f2:f7:12:5f:4b:4a:
47:6d:7a:d1:d0:ad:5d:5e:4a:41:9f:35:24:f6:56:
18:e5:0f:b1:d6:f0:a0:3e:6c:73:9b:22:11:1d:45:
45:f0:1c:7d:3a:3b:f0:93:3f:5e:eb:42:9b:b1:f1:
01:35:b6:ab:fa:f9:38:23:76:81:73:9b:2f:0e:ec:
c9:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:C1:19:12:3E:C3:83:33:0A:E3:62:6D:31:76:80:98:7A:A9:31:BA
X509v3 Authority Key Identifier:
keyid:75:CA:A7:99:12:88:87:66:80:D7:AC:90:A8:56:9F:3F:C2:03:87:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dcqnmRKIh2aA16yQqFafP8IDh_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/2754de-a5d5-487f-9fdd-c33b3644dd3f/1/dcqnmRKIh2aA16yQqFafP8IDh_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/2754de-a5d5-487f-9fdd-c33b3644dd3f/1/dcqnmRKIh2aA16yQqFafP8IDh_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:fd:bb:83:31:4b:45:7f:94:1f:e7:81:ac:fe:c5:d2:a5:ce:
a2:40:98:19:74:a1:7f:67:01:bc:70:12:55:94:3a:d5:c4:8c:
95:63:b7:e4:1a:22:28:3f:7d:af:cc:4b:a1:db:8b:fd:7d:76:
c3:45:34:6a:de:1e:a9:64:04:d9:05:20:23:0c:cc:8b:33:a4:
14:17:77:74:b2:ac:8b:43:e1:70:bf:b7:3b:e9:1e:bb:f6:8d:
b4:19:4d:0b:51:d6:02:8c:8a:2b:69:c3:99:fd:50:98:a1:f3:
ec:62:f1:a7:74:e0:a0:d6:f6:1a:e2:fd:60:ef:b8:4f:31:63:
df:dc:f1:86:3f:8a:45:10:23:1f:4a:08:1e:61:a0:ab:3d:ce:
4f:a6:fd:c2:c2:e3:1f:37:0c:f7:2a:48:18:e8:80:ae:41:04:
8a:5c:ff:c5:14:32:93:aa:11:4c:94:ee:22:c8:ba:8b:b2:5e:
c4:9b:35:2b:e2:ae:06:a6:f0:8e:32:c2:fb:58:fe:59:11:26:
19:95:49:7f:a9:79:69:ed:00:a5:30:51:17:c9:e6:76:17:b4:
84:c3:ef:14:4d:bc:a2:f8:d6:7c:d5:d2:25:c9:aa:ad:d7:51:
04:ca:fd:bc:e4:7b:6d:fb:ad:dd:7c:cd:e1:b9:87:c8:20:74:
81:4a:54:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:43:56 2025 by rpki-client