Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/299656-744a-4daa-8cfd-010a9856f785/1/dLJ8XVaEhkhT31uBVyIS7eMizgo.mft
File: dLJ8XVaEhkhT31uBVyIS7eMizgo.mft (raw, json)
Hash identifier: iMCCD7+cjP2n7gaT+f0huPADiKrjrhoK9MF3Z3XPOOA=
Subject key identifier: 7E:F4:D1:CE:20:97:57:C8:E6:11:08:74:BA:C4:D3:B5:E3:0D:B7:D1
Authority key identifier: 74:B2:7C:5D:56:84:86:48:53:DF:5B:81:57:22:12:ED:E3:22:CE:0A
Certificate issuer: /CN=74b27c5d5684864853df5b81572212ede322ce0a
Certificate serial: 01974BC445C2091EFCA6167522C53690816F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dLJ8XVaEhkhT31uBVyIS7eMizgo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/299656-744a-4daa-8cfd-010a9856f785/1/dLJ8XVaEhkhT31uBVyIS7eMizgo.mft
Manifest number: 0252
Signing time: Sat 07 Jun 2025 19:00:43 +0000
Manifest this update: Sat 07 Jun 2025 19:00:43 +0000
Manifest next update: Sun 08 Jun 2025 19:00:43 +0000
Files and hashes: 1: dLJ8XVaEhkhT31uBVyIS7eMizgo.crl (hash: od2fIGaeGSqoppEAIvKG0uv+hua2u54v5qHn2z05xts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/299656-744a-4daa-8cfd-010a9856f785/1/dLJ8XVaEhkhT31uBVyIS7eMizgo.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/299656-744a-4daa-8cfd-010a9856f785/1/dLJ8XVaEhkhT31uBVyIS7eMizgo.mft
rsync://rpki.ripe.net/repository/DEFAULT/dLJ8XVaEhkhT31uBVyIS7eMizgo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:c4:45:c2:09:1e:fc:a6:16:75:22:c5:36:90:81:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74b27c5d5684864853df5b81572212ede322ce0a
Validity
Not Before: Jun 7 19:00:43 2025 GMT
Not After : Jun 8 19:00:43 2025 GMT
Subject: CN=7ef4d1ce209757c8e6110874bac4d3b5e30db7d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:48:a3:6e:01:7b:80:dc:46:d5:70:93:8d:4c:
f1:62:97:75:e8:75:6f:dd:4e:c2:d8:60:15:f0:ba:
1e:31:80:35:7f:5c:c5:cb:13:0c:09:53:29:ff:3e:
7d:00:66:06:45:bc:be:58:06:ad:c4:22:be:48:1e:
87:64:d7:cf:3c:65:25:b0:62:e9:73:2d:9c:e7:e3:
95:e5:fe:91:43:9c:b5:a2:93:b5:35:bc:f0:90:16:
18:99:57:30:29:5e:5b:f1:1e:bc:61:bd:04:56:f8:
94:f2:70:a7:44:86:0d:5e:1e:d2:6a:28:ac:11:c0:
06:eb:a8:fe:94:3d:32:8d:8f:a6:23:f0:d5:f1:79:
d5:35:ce:2f:e5:be:48:e0:3e:59:85:ba:5f:24:aa:
a2:e6:2d:f7:b6:61:87:3f:b6:f2:6e:1b:66:f2:6a:
0a:de:66:f8:b7:05:5b:00:d8:00:c6:ee:2a:9d:35:
5d:9b:94:75:85:44:d9:60:03:b0:01:31:2d:be:a5:
45:95:f8:73:94:21:ea:05:23:c7:f0:a0:01:c9:3e:
3c:66:df:0b:7a:85:71:e1:44:47:4d:03:5f:0b:69:
55:8d:da:46:d3:50:ac:45:ed:52:15:4a:e4:b5:6f:
43:00:90:05:5d:a5:59:61:0b:9d:27:3d:f7:2c:52:
98:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:F4:D1:CE:20:97:57:C8:E6:11:08:74:BA:C4:D3:B5:E3:0D:B7:D1
X509v3 Authority Key Identifier:
keyid:74:B2:7C:5D:56:84:86:48:53:DF:5B:81:57:22:12:ED:E3:22:CE:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dLJ8XVaEhkhT31uBVyIS7eMizgo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/299656-744a-4daa-8cfd-010a9856f785/1/dLJ8XVaEhkhT31uBVyIS7eMizgo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/299656-744a-4daa-8cfd-010a9856f785/1/dLJ8XVaEhkhT31uBVyIS7eMizgo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:ac:83:3c:a3:ea:f1:d2:fb:c0:41:95:be:bb:4a:56:bc:8d:
66:89:c7:92:c0:29:b3:f2:c1:d7:bf:de:c4:93:82:bc:cb:94:
06:03:b9:cb:f2:f2:4a:01:39:df:df:8d:80:72:6d:04:cb:f1:
2a:24:c3:27:58:82:0b:80:72:ad:a0:3b:e4:30:c0:55:7f:3d:
52:94:33:ae:24:df:86:65:45:1f:c3:bb:5b:5c:ad:f0:99:37:
6a:5f:51:75:46:80:47:87:4a:52:fa:63:4f:21:6b:0b:9e:df:
fa:0f:91:9a:55:89:30:ef:ad:4e:58:d6:ba:3f:6b:f1:30:14:
c9:53:50:e3:54:e7:91:69:88:04:9a:b0:d5:69:ec:93:25:60:
2f:2c:af:3b:40:f2:e9:b5:1d:f4:ea:70:e3:65:80:53:25:79:
75:1d:80:a3:2c:e7:14:2a:36:2b:20:3d:7c:7b:1f:1e:d5:ce:
cd:e7:71:ab:a7:d7:27:e8:de:2b:47:1f:4d:4f:04:c3:10:08:
c3:1c:05:df:ab:75:5b:95:6b:3f:98:42:3c:4e:36:10:87:ea:
57:5f:b5:36:fc:53:82:1d:02:76:a6:c1:d5:bd:54:9e:78:6f:
cd:31:9c:f1:0f:ae:65:e5:c4:07:3f:43:99:38:30:19:09:45:
05:0b:f6:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 03:15:30 2025 by rpki-client