Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/ef54db-a565-4354-899a-083aa18a7629/1/dNYxjajSNXnE9zi26OVcxf8n5bE.mft
File: dNYxjajSNXnE9zi26OVcxf8n5bE.mft (raw, json)
Hash identifier: pt3ofMgB8xVmKST66lxrPklAh5OacpPXarPxhl3w32E=
Subject key identifier: 3F:E4:CB:64:5D:57:CC:A5:8F:DE:0B:21:DE:F4:7C:F3:BB:C7:CC:BF
Authority key identifier: 74:D6:31:8D:A8:D2:35:79:C4:F7:38:B6:E8:E5:5C:C5:FF:27:E5:B1
Certificate issuer: /CN=74d6318da8d23579c4f738b6e8e55cc5ff27e5b1
Certificate serial: 01976026B11D36E526287692F3D0E30C4D75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dNYxjajSNXnE9zi26OVcxf8n5bE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/ef54db-a565-4354-899a-083aa18a7629/1/dNYxjajSNXnE9zi26OVcxf8n5bE.mft
Manifest number: 0B88
Signing time: Wed 11 Jun 2025 18:00:37 +0000
Manifest this update: Wed 11 Jun 2025 18:00:37 +0000
Manifest next update: Thu 12 Jun 2025 18:00:37 +0000
Files and hashes: 1: dNYxjajSNXnE9zi26OVcxf8n5bE.crl (hash: Ua36AKqq9OHM/MITlLBeuMKVAx9gE/CYknEkPKiGz3w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/ef54db-a565-4354-899a-083aa18a7629/1/dNYxjajSNXnE9zi26OVcxf8n5bE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/ef54db-a565-4354-899a-083aa18a7629/1/dNYxjajSNXnE9zi26OVcxf8n5bE.mft
rsync://rpki.ripe.net/repository/DEFAULT/dNYxjajSNXnE9zi26OVcxf8n5bE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 15:40:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:60:26:b1:1d:36:e5:26:28:76:92:f3:d0:e3:0c:4d:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74d6318da8d23579c4f738b6e8e55cc5ff27e5b1
Validity
Not Before: Jun 11 18:00:37 2025 GMT
Not After : Jun 12 18:00:37 2025 GMT
Subject: CN=3fe4cb645d57cca58fde0b21def47cf3bbc7ccbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c5:e4:92:a5:b7:fe:1d:51:e6:e5:97:ce:05:
cf:88:ba:f5:74:5c:27:28:01:82:ac:f2:fc:7b:45:
3a:95:89:8a:2e:f0:00:62:1a:68:d6:07:cd:3a:70:
95:d5:ae:fa:a9:e8:10:ce:c6:83:2d:f9:96:b3:89:
ac:04:61:ff:7e:86:80:c8:f0:e8:a6:6a:9a:75:49:
d9:6f:7c:e4:78:8f:3f:6c:0c:66:a3:8f:37:47:dd:
4f:79:af:24:8a:96:a1:30:2e:76:ed:37:f3:8e:97:
8f:18:55:5e:73:74:77:82:c7:c3:f8:68:b0:23:5b:
7d:ca:67:12:64:54:54:43:33:6a:d2:95:90:7a:99:
27:f1:cf:59:06:5c:06:cb:08:f2:58:67:9a:54:f9:
21:a5:c5:f0:08:7b:30:0d:06:d9:43:34:62:fb:aa:
c7:9d:5b:b3:f5:e8:d4:ef:e3:85:53:8a:f5:40:e9:
3d:45:9a:c0:c3:97:32:80:a9:be:96:e5:1a:e9:53:
56:37:c7:c7:b0:b1:ea:4f:a4:23:77:c1:f4:d4:cf:
fa:de:d7:a8:d9:15:64:d3:29:bb:b0:1b:10:a1:96:
b5:67:67:1d:ec:41:af:5c:3f:a8:10:5c:4b:20:41:
c9:a8:cb:83:12:a9:e9:63:a0:64:14:fd:e9:65:72:
db:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:E4:CB:64:5D:57:CC:A5:8F:DE:0B:21:DE:F4:7C:F3:BB:C7:CC:BF
X509v3 Authority Key Identifier:
keyid:74:D6:31:8D:A8:D2:35:79:C4:F7:38:B6:E8:E5:5C:C5:FF:27:E5:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dNYxjajSNXnE9zi26OVcxf8n5bE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/ef54db-a565-4354-899a-083aa18a7629/1/dNYxjajSNXnE9zi26OVcxf8n5bE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/ef54db-a565-4354-899a-083aa18a7629/1/dNYxjajSNXnE9zi26OVcxf8n5bE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:ba:14:b3:40:8a:ed:5c:c1:cf:20:5a:5b:f6:71:3f:9f:f8:
a4:91:d1:6d:f4:23:7b:fa:fe:c9:b0:60:16:98:d3:08:71:ff:
2a:56:5a:81:24:a5:99:60:0f:87:6e:9f:5c:e0:ca:9e:29:9a:
3e:c1:fe:a2:ec:bf:24:f6:4b:6d:3a:3a:f8:e2:50:a6:2e:0a:
8e:1f:8b:37:9c:4d:22:bc:86:5a:a9:53:67:51:ca:40:78:5d:
c0:b6:5f:38:30:72:a1:51:f2:b0:00:61:45:4e:20:2e:2b:36:
50:f1:55:58:33:cb:ae:40:32:bd:25:33:4f:38:0c:d3:19:01:
f0:6e:2e:48:a3:c7:3f:7f:9c:18:f0:cb:59:3f:f3:8d:d5:da:
70:30:01:63:5b:bf:ff:50:1a:35:78:76:3c:e5:56:45:1e:b0:
0a:85:3b:51:2a:b6:e0:b4:a6:72:51:80:fc:5a:dd:69:f0:c5:
b6:9a:ac:e7:1d:33:5f:63:59:ee:6d:95:57:e0:5e:46:0e:95:
72:fe:e0:1a:20:bb:33:28:10:db:ec:4b:41:8d:4e:90:b8:03:
bc:42:0d:4e:e2:28:1c:2c:d5:ce:83:3d:b3:ee:5b:5b:d1:d3:
6d:c7:cb:39:75:12:c7:22:e9:95:fe:fc:95:6c:a1:70:d8:d5:
aa:7a:71:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 20:49:39 2025 by rpki-client