Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/0d2ca3-0234-4dbf-8190-12d28d7d4223/1/DykT4xUxAZpDKBkGVbRd2WvdLJ4.mft
File: DykT4xUxAZpDKBkGVbRd2WvdLJ4.mft (raw, json)
Hash identifier: sNyWw2J+RfPGRzwksetZx9qGIcpRh23y95K7Snbgoo4=
Subject key identifier: D7:68:DC:AF:06:47:77:D5:18:45:09:72:AE:69:AE:0C:82:0F:DE:2C
Authority key identifier: 0F:29:13:E3:15:31:01:9A:43:28:19:06:55:B4:5D:D9:6B:DD:2C:9E
Certificate issuer: /CN=0f2913e31531019a4328190655b45dd96bdd2c9e
Certificate serial: 01984A77AB5165B7B2588672D715444CD51D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DykT4xUxAZpDKBkGVbRd2WvdLJ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/0d2ca3-0234-4dbf-8190-12d28d7d4223/1/DykT4xUxAZpDKBkGVbRd2WvdLJ4.mft
Manifest number: 061B
Signing time: Sun 27 Jul 2025 06:00:13 +0000
Manifest this update: Sun 27 Jul 2025 06:00:13 +0000
Manifest next update: Mon 28 Jul 2025 06:00:13 +0000
Files and hashes: 1: DykT4xUxAZpDKBkGVbRd2WvdLJ4.crl (hash: bkFlp4PT7vR8L895L3jwg5ZroW7nHGlQwcl49UaRbqU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/0d2ca3-0234-4dbf-8190-12d28d7d4223/1/DykT4xUxAZpDKBkGVbRd2WvdLJ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/0d2ca3-0234-4dbf-8190-12d28d7d4223/1/DykT4xUxAZpDKBkGVbRd2WvdLJ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/DykT4xUxAZpDKBkGVbRd2WvdLJ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:77:ab:51:65:b7:b2:58:86:72:d7:15:44:4c:d5:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f2913e31531019a4328190655b45dd96bdd2c9e
Validity
Not Before: Jul 27 06:00:13 2025 GMT
Not After : Jul 28 06:00:13 2025 GMT
Subject: CN=d768dcaf064777d518450972ae69ae0c820fde2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a2:d8:a7:9d:2e:8c:3e:44:c5:16:ec:fb:53:
65:60:be:a7:cb:75:05:fa:25:2a:2c:4d:e3:da:59:
66:80:21:6b:11:20:84:8e:05:91:69:ab:d8:2b:0a:
f0:54:4d:88:89:51:98:c1:1d:1c:28:cd:00:9f:aa:
ef:ca:11:a9:9c:a5:d0:0c:33:9d:ff:a7:b4:50:18:
4e:76:f6:1a:86:9f:03:16:5e:9f:05:a5:f3:2a:48:
c6:bf:d7:e2:26:d5:a7:7c:35:2f:a7:e7:82:0f:19:
e4:6d:60:4d:a0:d5:37:ff:c6:11:60:28:69:ea:85:
94:3c:ef:89:18:73:9a:35:61:65:c7:e4:3f:27:d3:
9d:6a:08:25:29:a5:5c:68:02:72:7c:f0:6b:a9:5e:
74:4a:b1:15:5f:be:d5:1f:91:93:ff:b2:62:db:b4:
3f:57:dd:dc:fa:0c:ce:b1:d2:5d:29:37:64:52:e7:
6b:a9:88:ba:3a:a3:9e:fa:c8:39:01:e4:62:b2:ef:
4a:e0:cd:45:04:53:20:df:c8:02:19:5c:f0:dc:85:
41:73:3a:a9:39:49:b1:f6:dc:aa:7e:43:37:9f:64:
f5:72:d8:e4:52:42:06:04:a6:6e:79:45:a6:80:ef:
af:b1:d2:52:af:3b:01:d3:7c:3d:15:07:e7:b7:92:
60:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:68:DC:AF:06:47:77:D5:18:45:09:72:AE:69:AE:0C:82:0F:DE:2C
X509v3 Authority Key Identifier:
keyid:0F:29:13:E3:15:31:01:9A:43:28:19:06:55:B4:5D:D9:6B:DD:2C:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DykT4xUxAZpDKBkGVbRd2WvdLJ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/0d2ca3-0234-4dbf-8190-12d28d7d4223/1/DykT4xUxAZpDKBkGVbRd2WvdLJ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/0d2ca3-0234-4dbf-8190-12d28d7d4223/1/DykT4xUxAZpDKBkGVbRd2WvdLJ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:e7:b9:14:35:4e:93:63:b3:80:25:26:97:1f:8b:c6:9a:8f:
40:7e:19:3b:93:10:9d:c0:fa:2e:d4:9e:bd:a8:94:04:c2:1e:
d4:f4:f7:fd:f7:d0:5b:4e:04:a2:4b:b8:99:6b:ec:78:e4:23:
25:8b:23:d4:9c:b7:e4:7e:9e:8f:ac:98:65:11:37:91:12:e1:
a2:08:f7:0f:8c:aa:fb:c7:a0:b5:41:c9:a9:24:93:e6:18:1a:
a5:71:0d:80:86:a7:2c:b8:46:ad:3a:a4:3c:8f:a4:c0:62:09:
82:b5:eb:7f:f5:1e:81:fc:1b:12:9f:9d:97:1e:12:35:5b:0e:
f1:3a:b3:01:06:4a:31:e6:fc:b3:09:9b:a4:db:90:d2:e1:7c:
72:57:eb:0b:be:95:73:3d:97:8e:5e:05:4f:76:fe:46:1c:dc:
82:d2:ba:2f:2d:ce:da:bc:d3:4d:30:0c:e2:93:b3:2c:e2:a4:
fb:b2:86:3d:1b:66:eb:32:6d:66:b5:31:f4:83:f6:be:ac:8d:
98:43:8f:15:b3:85:65:ad:d0:5d:cc:2c:fd:a7:5b:a3:11:41:
ac:ee:5c:b2:1e:8b:d3:83:13:8b:36:f5:bc:b6:df:01:6c:07:
94:aa:12:39:36:8e:fa:6c:87:ad:ad:d5:f4:f3:c9:a7:c0:91:
61:03:3c:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:30:07 2025 by rpki-client