Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/191481-dbb7-4032-9c4f-87e5757b97e3/1/DdxQm02zUgOrYW9Hgfhd1YYEQ9g.mft
File: DdxQm02zUgOrYW9Hgfhd1YYEQ9g.mft (raw, json)
Hash identifier: 2aQQ1VAqe3VrYkslxd9qSOTkHRxqyL47sJv27akWJ+8=
Subject key identifier: F9:4D:50:9C:BC:64:18:2C:97:CC:1D:A9:0B:76:F5:D0:B8:C9:6A:40
Authority key identifier: 0D:DC:50:9B:4D:B3:52:03:AB:61:6F:47:81:F8:5D:D5:86:04:43:D8
Certificate issuer: /CN=0ddc509b4db35203ab616f4781f85dd5860443d8
Certificate serial: 01974A7B70EAFAEE8C7949302897667A385D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DdxQm02zUgOrYW9Hgfhd1YYEQ9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/191481-dbb7-4032-9c4f-87e5757b97e3/1/DdxQm02zUgOrYW9Hgfhd1YYEQ9g.mft
Manifest number: 12B5
Signing time: Sat 07 Jun 2025 13:01:33 +0000
Manifest this update: Sat 07 Jun 2025 13:01:33 +0000
Manifest next update: Sun 08 Jun 2025 13:01:33 +0000
Files and hashes: 1: DdxQm02zUgOrYW9Hgfhd1YYEQ9g.crl (hash: bNZw+ilYYFlqtfT+EFvdOKp0UWJOBtdseg81jkwxzTE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/191481-dbb7-4032-9c4f-87e5757b97e3/1/DdxQm02zUgOrYW9Hgfhd1YYEQ9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/191481-dbb7-4032-9c4f-87e5757b97e3/1/DdxQm02zUgOrYW9Hgfhd1YYEQ9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/DdxQm02zUgOrYW9Hgfhd1YYEQ9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7b:70:ea:fa:ee:8c:79:49:30:28:97:66:7a:38:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ddc509b4db35203ab616f4781f85dd5860443d8
Validity
Not Before: Jun 7 13:01:33 2025 GMT
Not After : Jun 8 13:01:33 2025 GMT
Subject: CN=f94d509cbc64182c97cc1da90b76f5d0b8c96a40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e3:db:75:72:f4:c3:ad:38:22:9d:12:fe:8d:
78:f5:52:26:e3:35:0b:44:cd:68:6a:02:09:42:ac:
aa:ab:74:a7:2a:a4:6e:c0:a7:96:e2:fc:86:8a:0f:
94:e2:78:86:cc:89:24:a8:05:5c:0c:91:8d:ec:5c:
0e:6a:8e:72:7a:bb:d8:ca:6a:40:de:71:3a:a1:3e:
2d:2a:f0:d0:b9:55:78:7e:a2:9f:fd:03:9d:8b:44:
e0:f6:3d:98:e2:19:c3:5f:37:74:e1:d6:39:6e:ed:
69:06:51:59:e1:15:61:22:c3:56:4e:bc:90:e7:80:
2d:fa:ae:a1:bc:de:e1:2b:9e:5e:1e:84:d0:72:31:
74:24:d8:ab:5d:60:64:d9:b0:75:5a:a6:68:55:14:
d0:4b:80:b2:0d:99:ea:21:98:1b:e1:0d:8c:77:01:
9a:c2:73:65:b2:a8:8b:61:b1:2b:7f:44:27:9f:12:
11:71:8f:e5:8b:56:16:c1:cc:51:6e:5e:a1:1e:6d:
17:e7:d0:e4:7a:6d:3d:e4:23:d0:e1:ad:6a:03:b5:
41:7f:18:08:c8:c0:8a:94:51:9f:06:72:81:7f:37:
67:1b:b2:a4:80:06:1b:d9:8b:4a:7b:b9:77:6a:e1:
49:0a:58:3d:16:35:8a:25:e6:7c:0e:f5:36:db:c2:
fe:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:4D:50:9C:BC:64:18:2C:97:CC:1D:A9:0B:76:F5:D0:B8:C9:6A:40
X509v3 Authority Key Identifier:
keyid:0D:DC:50:9B:4D:B3:52:03:AB:61:6F:47:81:F8:5D:D5:86:04:43:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DdxQm02zUgOrYW9Hgfhd1YYEQ9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/191481-dbb7-4032-9c4f-87e5757b97e3/1/DdxQm02zUgOrYW9Hgfhd1YYEQ9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/191481-dbb7-4032-9c4f-87e5757b97e3/1/DdxQm02zUgOrYW9Hgfhd1YYEQ9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:a4:9e:ad:5a:3b:f1:97:ac:c9:45:76:68:e6:ee:55:fb:62:
34:99:aa:ef:11:19:74:48:17:a0:11:a9:ef:11:d2:fa:6c:95:
59:c4:23:e7:7a:e4:5a:65:be:f8:40:b9:a2:58:e0:be:92:8b:
59:81:3a:a4:f0:54:b6:fa:75:31:6b:a8:bb:e2:ae:2c:cf:5a:
8f:fe:2a:74:e9:c2:00:66:95:6f:b8:9d:3b:26:9e:a2:ef:f7:
38:9f:45:b6:8b:33:f7:fe:e5:6d:7d:37:13:fc:2f:dc:5a:cd:
0e:f0:ae:3c:64:3b:34:d2:a6:f0:94:b0:16:d2:a7:4c:ac:31:
92:fd:c4:6d:94:18:5e:6e:0c:f5:07:7f:10:bc:cb:f0:57:2f:
14:ba:db:74:19:66:4c:ba:3b:bd:a8:a6:82:0e:a6:62:12:9f:
2c:1f:f8:bc:57:14:28:19:58:be:30:5b:8c:b1:3a:47:3b:e9:
bb:75:36:98:b3:68:1c:98:fe:e1:42:dd:63:00:42:6b:dd:f8:
93:fc:d4:41:ef:7e:3d:b1:1c:6e:e8:16:12:17:b0:d8:34:43:
2f:f4:06:85:75:4a:87:96:d4:ed:28:28:90:20:4c:ca:90:7d:
44:4e:48:bf:7e:72:1b:9d:ba:15:d2:c9:01:eb:6f:89:95:9c:
56:09:6c:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 19:19:29 2025 by rpki-client