Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/23da1c-435c-4c83-a295-bf85cd25427e/1/DcHMqlhPs5FOeS_VOQ47otMDM4w.mft
File: DcHMqlhPs5FOeS_VOQ47otMDM4w.mft (raw, json)
Hash identifier: 8kymRy1r07xJHpZhGFgbi2A9cm29w+JNRKgXkuFVP8g=
Subject key identifier: 90:FC:7F:30:92:80:5C:74:48:55:FE:93:24:13:07:52:02:D1:CD:DE
Authority key identifier: 0D:C1:CC:AA:58:4F:B3:91:4E:79:2F:D5:39:0E:3B:A2:D3:03:33:8C
Certificate issuer: /CN=0dc1ccaa584fb3914e792fd5390e3ba2d303338c
Certificate serial: 019749D61109A100425D9806D86655C80587
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DcHMqlhPs5FOeS_VOQ47otMDM4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/23da1c-435c-4c83-a295-bf85cd25427e/1/DcHMqlhPs5FOeS_VOQ47otMDM4w.mft
Manifest number: 0F42
Signing time: Sat 07 Jun 2025 10:00:55 +0000
Manifest this update: Sat 07 Jun 2025 10:00:55 +0000
Manifest next update: Sun 08 Jun 2025 10:00:55 +0000
Files and hashes: 1: DcHMqlhPs5FOeS_VOQ47otMDM4w.crl (hash: lmo0Mlc+a+vOCSd+DPIZ3KK8Yq6Zvpoa8pllDHcmveI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/23da1c-435c-4c83-a295-bf85cd25427e/1/DcHMqlhPs5FOeS_VOQ47otMDM4w.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/23da1c-435c-4c83-a295-bf85cd25427e/1/DcHMqlhPs5FOeS_VOQ47otMDM4w.mft
rsync://rpki.ripe.net/repository/DEFAULT/DcHMqlhPs5FOeS_VOQ47otMDM4w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:d6:11:09:a1:00:42:5d:98:06:d8:66:55:c8:05:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dc1ccaa584fb3914e792fd5390e3ba2d303338c
Validity
Not Before: Jun 7 10:00:55 2025 GMT
Not After : Jun 8 10:00:55 2025 GMT
Subject: CN=90fc7f3092805c744855fe932413075202d1cdde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:d9:a6:2f:9b:82:79:c1:44:ee:da:f7:19:34:
27:17:89:14:cc:ef:16:99:46:59:6a:d3:dc:6a:37:
f2:ce:06:b8:9a:68:3a:d1:14:e8:1d:4e:65:21:96:
33:17:3d:f2:5e:7c:09:cb:c0:85:30:61:03:22:f6:
c2:a8:3a:16:ff:69:50:1a:a1:d8:8c:f4:74:18:9e:
b9:8b:2e:d1:f5:35:2b:97:a6:59:fd:3d:2b:6b:7b:
6c:be:da:52:b6:cf:2f:ec:21:73:16:d1:5d:b7:80:
f1:82:c6:8a:7f:64:10:ad:30:ff:d8:24:af:5d:09:
1a:c3:a2:ed:34:f9:d1:a1:e1:ca:c7:8c:d9:60:ca:
ed:97:6e:e6:cb:01:05:16:16:de:fe:31:98:a4:af:
84:86:fc:ed:d7:32:63:c6:95:3a:94:6c:d1:39:53:
15:ab:2b:f5:34:e4:c5:c8:c1:20:00:16:a7:5f:fd:
f2:31:8a:dd:51:54:1c:3b:5f:30:bd:e2:79:a6:fe:
23:c1:e5:ad:c7:06:1f:5c:55:34:d3:dc:57:5b:3e:
0d:81:c3:fe:c9:1a:ad:26:7f:58:b5:f6:90:21:84:
9a:f7:b3:d4:b8:1f:3e:05:f9:fe:2f:2d:b7:18:c2:
90:5f:9b:47:4f:a5:e5:0c:3b:a5:4a:e4:d5:10:06:
7a:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:FC:7F:30:92:80:5C:74:48:55:FE:93:24:13:07:52:02:D1:CD:DE
X509v3 Authority Key Identifier:
keyid:0D:C1:CC:AA:58:4F:B3:91:4E:79:2F:D5:39:0E:3B:A2:D3:03:33:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DcHMqlhPs5FOeS_VOQ47otMDM4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/23da1c-435c-4c83-a295-bf85cd25427e/1/DcHMqlhPs5FOeS_VOQ47otMDM4w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/23da1c-435c-4c83-a295-bf85cd25427e/1/DcHMqlhPs5FOeS_VOQ47otMDM4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:81:cf:d3:f0:79:df:77:d3:73:64:c1:53:e8:f4:22:3d:86:
61:6f:98:85:53:66:30:2f:b6:03:e7:54:1b:91:f9:e8:72:5c:
97:6f:28:39:1d:08:71:ec:52:8e:72:4b:f7:80:fc:b4:75:25:
13:5b:e7:6b:ce:8b:e7:56:c4:b4:9f:c6:0d:89:76:36:ca:72:
2f:82:ec:b3:d2:96:58:df:83:82:e6:25:6c:db:29:c8:f9:64:
dc:ee:17:db:95:3d:be:2e:4d:43:fa:6b:84:68:51:5d:10:b4:
df:6d:30:ff:1f:c5:0d:c6:c4:80:02:e4:5d:7f:e6:a8:08:66:
bb:7f:c1:30:fe:ed:4f:c5:38:8a:5b:56:fa:eb:3b:cb:a8:6e:
04:9a:27:80:71:75:a1:ae:71:70:10:6f:0e:83:7b:8e:13:e6:
84:27:82:4b:3e:27:27:a9:f7:54:11:6d:e6:59:0f:59:56:75:
aa:c2:b7:f8:30:4e:3d:c8:3f:d5:bd:5d:a5:e4:27:40:09:88:
9d:b4:97:25:36:27:cd:7b:bf:30:02:ce:d5:18:50:c5:e6:e8:
b0:22:5a:2b:24:67:de:c5:24:ba:1b:f6:1b:f9:1b:d2:db:1f:
20:fa:75:97:ab:ff:d6:12:9c:30:15:32:c4:43:fc:31:80:da:
03:6f:27:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:45:30 2025 by rpki-client