Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/53b489-ab48-49fe-9d01-a0e37f25a515/1/DIdKX1JzTiYOe_pNRRFK3ZJ341M.mft
File: DIdKX1JzTiYOe_pNRRFK3ZJ341M.mft (raw, json)
Hash identifier: /QHJc6sQMemTbeoP92HNzJmOeDMzgCoSyxUux3vp9tE=
Subject key identifier: 93:7C:88:E9:1D:04:67:F5:7F:24:2A:F2:27:7D:F7:E1:55:F1:0D:7D
Authority key identifier: 0C:87:4A:5F:52:73:4E:26:0E:7B:FA:4D:45:11:4A:DD:92:77:E3:53
Certificate issuer: /CN=0c874a5f52734e260e7bfa4d45114add9277e353
Certificate serial: 0198530D54B13FF9FED5B053050122E4F34E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DIdKX1JzTiYOe_pNRRFK3ZJ341M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/53b489-ab48-49fe-9d01-a0e37f25a515/1/DIdKX1JzTiYOe_pNRRFK3ZJ341M.mft
Manifest number: 07F2
Signing time: Mon 28 Jul 2025 22:00:39 +0000
Manifest this update: Mon 28 Jul 2025 22:00:39 +0000
Manifest next update: Tue 29 Jul 2025 22:00:39 +0000
Files and hashes: 1: DIdKX1JzTiYOe_pNRRFK3ZJ341M.crl (hash: FFEEplFCdl93LZiV/o8f4VkOQKwWrnAUopiECuwpKfw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/53b489-ab48-49fe-9d01-a0e37f25a515/1/DIdKX1JzTiYOe_pNRRFK3ZJ341M.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/53b489-ab48-49fe-9d01-a0e37f25a515/1/DIdKX1JzTiYOe_pNRRFK3ZJ341M.mft
rsync://rpki.ripe.net/repository/DEFAULT/DIdKX1JzTiYOe_pNRRFK3ZJ341M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 22:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:0d:54:b1:3f:f9:fe:d5:b0:53:05:01:22:e4:f3:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c874a5f52734e260e7bfa4d45114add9277e353
Validity
Not Before: Jul 28 22:00:39 2025 GMT
Not After : Jul 29 22:00:39 2025 GMT
Subject: CN=937c88e91d0467f57f242af2277df7e155f10d7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:42:63:f8:f0:40:0d:d6:25:91:06:89:52:a9:
19:84:9c:58:4b:bd:11:01:0a:92:78:5a:31:7b:fe:
ca:05:0a:2f:62:28:dc:87:a4:b4:aa:3d:2a:cb:87:
e2:2e:0f:74:00:99:61:ec:31:bf:e8:98:e7:9f:c6:
8d:22:d0:45:84:64:54:64:d9:45:a0:7f:b4:55:e4:
91:fb:24:f2:01:7a:17:45:a8:f2:a5:a6:1c:41:14:
71:df:72:aa:57:60:28:69:93:67:03:73:3d:8b:23:
ab:3a:51:be:78:2a:c1:9f:54:aa:29:3f:c0:c0:13:
ed:9b:99:ae:60:1d:23:56:11:d4:0f:7c:f6:19:0b:
dc:6e:b1:32:8b:0e:91:11:ad:7b:80:61:36:5d:64:
24:5e:eb:a6:06:14:f7:1f:1f:c5:7f:eb:0c:71:d4:
80:5e:75:68:c1:ef:d9:bb:ea:74:e8:6f:fe:e5:58:
4c:bf:44:3a:64:8f:f4:49:fa:17:9c:32:51:48:a5:
75:a2:09:79:67:d9:cb:81:c5:2f:0d:fe:74:7e:74:
f0:d7:89:7d:45:49:e1:a8:77:d8:bc:f9:7f:4f:27:
52:a4:52:f1:ec:e5:f7:97:1d:5d:a6:63:39:85:d3:
b1:79:2d:7c:10:b2:5f:a8:ff:ed:00:fb:be:32:e1:
06:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:7C:88:E9:1D:04:67:F5:7F:24:2A:F2:27:7D:F7:E1:55:F1:0D:7D
X509v3 Authority Key Identifier:
keyid:0C:87:4A:5F:52:73:4E:26:0E:7B:FA:4D:45:11:4A:DD:92:77:E3:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DIdKX1JzTiYOe_pNRRFK3ZJ341M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/53b489-ab48-49fe-9d01-a0e37f25a515/1/DIdKX1JzTiYOe_pNRRFK3ZJ341M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/53b489-ab48-49fe-9d01-a0e37f25a515/1/DIdKX1JzTiYOe_pNRRFK3ZJ341M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:f7:be:3f:90:0a:f3:c3:23:c2:77:66:72:e1:7e:89:9a:3d:
bc:be:ce:c3:c5:56:71:bc:a6:55:66:98:83:9e:8d:f7:e7:39:
ff:16:ec:ef:6e:96:17:7d:95:aa:e0:af:2d:eb:a9:21:36:d7:
8f:dc:7f:6a:53:ad:5d:17:f5:ef:9d:79:cb:a7:f0:06:6f:63:
d6:88:fd:f3:5d:57:66:e5:a5:cb:22:14:db:de:c3:ef:fe:9f:
5e:75:6f:98:df:b8:45:3a:34:8d:96:c2:70:85:25:14:fb:d7:
b7:13:d8:02:f5:14:97:a4:2b:f9:dd:d1:f9:a2:53:5d:8e:40:
f4:6c:bd:54:1a:61:63:7c:0d:7e:8b:c8:02:dd:c0:02:d6:82:
ac:85:95:1c:dd:08:fe:89:59:1b:3a:5d:a0:6c:91:8d:2a:3f:
e7:3c:cd:e3:d6:8e:9b:a5:9d:54:c5:de:4f:28:64:a4:8d:7e:
48:16:08:c4:c0:43:cb:f1:a4:38:bf:56:78:db:1e:d0:14:b0:
93:75:e5:12:d6:bd:52:b9:26:60:37:4b:e9:a9:c7:c9:2a:72:
04:b9:d9:c9:76:a1:84:61:e4:73:65:66:a0:11:f6:b4:e8:ee:
9a:4e:fc:d1:9b:7a:03:98:30:7c:dc:33:8e:1b:0f:1e:d5:c2:
3c:78:ab:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 03:37:54 2025 by rpki-client