Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/ca7809-a7a8-48bc-84e8-6304232bec3c/1/DwgImqp8KDZUvNpQqTNGTnEnkbA.mft
File: DwgImqp8KDZUvNpQqTNGTnEnkbA.mft (raw, json)
Hash identifier: DX7Pxl6r+zoweKZS/7FhPBZPdyehkJ0s1pEsTwYwsyY=
Subject key identifier: 65:2F:4F:76:82:50:DE:56:F9:9A:9D:FE:61:55:C4:76:3D:E4:3A:9F
Authority key identifier: 0F:08:08:9A:AA:7C:28:36:54:BC:DA:50:A9:33:46:4E:71:27:91:B0
Certificate issuer: /CN=0f08089aaa7c283654bcda50a933464e712791b0
Certificate serial: 01974EC50CCD179B8AF925A4BA893C0E5494
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DwgImqp8KDZUvNpQqTNGTnEnkbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/ca7809-a7a8-48bc-84e8-6304232bec3c/1/DwgImqp8KDZUvNpQqTNGTnEnkbA.mft
Manifest number: 122D
Signing time: Sun 08 Jun 2025 09:00:25 +0000
Manifest this update: Sun 08 Jun 2025 09:00:25 +0000
Manifest next update: Mon 09 Jun 2025 09:00:25 +0000
Files and hashes: 1: DwgImqp8KDZUvNpQqTNGTnEnkbA.crl (hash: c9CC2iosTFe00oBzKawWerkhERZCcvPSNHLqOTshPZA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/ca7809-a7a8-48bc-84e8-6304232bec3c/1/DwgImqp8KDZUvNpQqTNGTnEnkbA.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/ca7809-a7a8-48bc-84e8-6304232bec3c/1/DwgImqp8KDZUvNpQqTNGTnEnkbA.mft
rsync://rpki.ripe.net/repository/DEFAULT/DwgImqp8KDZUvNpQqTNGTnEnkbA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 09:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:c5:0c:cd:17:9b:8a:f9:25:a4:ba:89:3c:0e:54:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f08089aaa7c283654bcda50a933464e712791b0
Validity
Not Before: Jun 8 09:00:25 2025 GMT
Not After : Jun 9 09:00:25 2025 GMT
Subject: CN=652f4f768250de56f99a9dfe6155c4763de43a9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:00:f4:1b:b1:5c:16:81:58:cc:c6:12:dd:00:
aa:49:91:b2:c9:f3:72:26:bb:5a:a7:1d:fa:48:65:
e0:1e:cb:f2:7e:fa:80:aa:58:6c:86:2a:ae:05:6e:
8f:ec:96:84:9e:58:f8:f7:9c:4e:1b:f3:00:d5:8c:
0f:11:f8:38:83:7b:ca:35:1f:34:ea:18:87:02:78:
be:6c:38:53:c5:f1:00:ed:a3:56:e7:6a:69:4d:60:
a0:91:fd:ef:0d:c0:30:1f:f0:a6:88:82:d8:ed:44:
77:88:ea:ba:71:7d:53:a8:0f:bb:8a:62:78:49:e0:
99:60:7b:63:2a:7d:91:d5:b2:72:f9:9f:c1:fc:22:
ab:1e:c4:a3:bd:26:9e:f1:90:ea:26:f4:73:8c:0d:
5e:2f:8b:6e:9e:a3:67:72:5e:fa:64:ba:a4:27:6f:
1a:26:bd:3e:85:5d:87:2a:89:63:52:22:0e:3c:27:
c8:36:a0:d6:ad:42:bc:a4:3e:f9:0d:41:96:49:c6:
85:82:ba:be:99:c9:e1:2c:81:69:8a:91:37:ab:03:
e5:57:e2:29:1b:eb:c6:85:09:c2:ed:f3:b0:78:61:
ce:83:c4:e9:64:2d:13:c1:c4:9f:4c:ed:aa:e9:87:
f8:ce:4f:2c:57:77:95:12:a8:bf:c6:f5:d7:7d:99:
a6:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:2F:4F:76:82:50:DE:56:F9:9A:9D:FE:61:55:C4:76:3D:E4:3A:9F
X509v3 Authority Key Identifier:
keyid:0F:08:08:9A:AA:7C:28:36:54:BC:DA:50:A9:33:46:4E:71:27:91:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DwgImqp8KDZUvNpQqTNGTnEnkbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/ca7809-a7a8-48bc-84e8-6304232bec3c/1/DwgImqp8KDZUvNpQqTNGTnEnkbA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/ca7809-a7a8-48bc-84e8-6304232bec3c/1/DwgImqp8KDZUvNpQqTNGTnEnkbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:05:b3:bd:26:52:91:67:6d:fa:8d:08:09:63:7b:1e:a9:77:
1c:18:c0:97:3c:b4:82:a5:db:a3:2a:74:54:a1:c3:14:4a:d3:
9c:1f:90:ac:86:ab:87:42:f7:c3:9f:40:40:17:d3:c8:a2:8e:
a6:75:b1:74:32:f9:fe:bc:75:9f:36:6b:f0:dd:8c:55:ed:ac:
21:c0:2f:cf:c2:0e:3f:3f:08:68:bd:12:8a:f3:71:ef:c1:b6:
7b:01:e0:ec:bf:77:c6:53:39:4e:2f:14:2a:7b:6d:3c:b5:f7:
a7:94:0a:f6:2f:97:d5:6e:45:ee:7c:4f:42:8f:f6:46:cf:95:
d8:29:1f:a0:89:35:5a:ac:5b:54:b4:c3:08:2f:20:cc:b8:74:
bd:b4:ba:7a:62:64:01:95:3e:18:f2:97:da:78:15:60:26:5c:
e1:8e:8d:1b:7d:bc:33:d1:3f:cb:69:3f:48:6a:eb:d0:8d:eb:
f4:e1:66:be:34:9c:37:4f:07:7a:89:23:5e:6d:d4:c5:52:59:
7f:43:4b:4e:14:94:33:eb:41:9b:5a:02:fc:bf:6b:7e:61:20:
14:f8:be:2c:26:07:2b:7f:33:47:8f:49:b2:91:48:7f:78:c7:
32:29:90:a9:a7:4e:18:09:2e:3b:d4:c1:50:28:55:51:a7:a3:
3b:9a:ee:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 16:58:42 2025 by rpki-client