Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/ef54db-a565-4354-899a-083aa18a7629/1/dNYxjajSNXnE9zi26OVcxf8n5bE.mft
File: dNYxjajSNXnE9zi26OVcxf8n5bE.mft (raw, json)
Hash identifier: oK+k0CFszM6YUNJptcRxhug8bVb+UDcKhEm0vXw3PFE=
Subject key identifier: 27:B6:19:7B:34:F4:41:A5:1B:36:7B:53:87:43:EB:4B:C6:26:E8:28
Authority key identifier: 74:D6:31:8D:A8:D2:35:79:C4:F7:38:B6:E8:E5:5C:C5:FF:27:E5:B1
Certificate issuer: /CN=74d6318da8d23579c4f738b6e8e55cc5ff27e5b1
Certificate serial: 019762155B48539030651D3EEAB50BF65DF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dNYxjajSNXnE9zi26OVcxf8n5bE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/ef54db-a565-4354-899a-083aa18a7629/1/dNYxjajSNXnE9zi26OVcxf8n5bE.mft
Manifest number: 0B89
Signing time: Thu 12 Jun 2025 03:00:56 +0000
Manifest this update: Thu 12 Jun 2025 03:00:56 +0000
Manifest next update: Fri 13 Jun 2025 03:00:56 +0000
Files and hashes: 1: dNYxjajSNXnE9zi26OVcxf8n5bE.crl (hash: gIM6OQWIBoR8OSkuU1SSsNh7WWUS2611cSy9h7NI/OI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/ef54db-a565-4354-899a-083aa18a7629/1/dNYxjajSNXnE9zi26OVcxf8n5bE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/ef54db-a565-4354-899a-083aa18a7629/1/dNYxjajSNXnE9zi26OVcxf8n5bE.mft
rsync://rpki.ripe.net/repository/DEFAULT/dNYxjajSNXnE9zi26OVcxf8n5bE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:62:15:5b:48:53:90:30:65:1d:3e:ea:b5:0b:f6:5d:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74d6318da8d23579c4f738b6e8e55cc5ff27e5b1
Validity
Not Before: Jun 12 03:00:56 2025 GMT
Not After : Jun 13 03:00:56 2025 GMT
Subject: CN=27b6197b34f441a51b367b538743eb4bc626e828
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:f5:e6:d8:3a:bb:16:80:9b:e8:8d:c3:11:9c:
1b:60:4d:75:7a:b8:64:cc:31:48:bf:be:e7:ef:3a:
dc:0a:9c:de:b5:39:cf:75:d3:ae:27:0d:f9:fc:a8:
be:64:dd:8e:05:fe:d4:6b:d2:a8:df:8f:61:36:80:
fc:09:3d:d5:64:fc:92:f4:0d:44:4b:ff:d8:69:92:
ca:21:34:a6:34:76:95:c7:d1:b3:0f:25:92:a1:d8:
3b:06:89:cd:cb:3a:d6:b7:44:b4:fa:78:5a:9d:65:
4c:78:32:ba:3e:3f:87:bd:fc:38:36:71:d8:fd:62:
e8:6a:af:b5:f9:2c:ef:cd:93:df:cd:f2:b6:7a:de:
91:f9:07:8e:21:7a:9e:b2:0a:89:1f:1d:b6:4e:8f:
5e:97:05:cc:b5:49:ce:e1:39:6b:ae:65:e1:b7:76:
68:9a:95:64:65:a1:1a:a0:67:80:04:21:36:73:e6:
f0:35:3e:48:8a:af:7d:1d:e7:a0:c4:ac:0f:0c:d2:
73:a1:2a:88:6c:28:a9:e1:25:48:80:8b:30:9d:37:
96:61:72:0d:a6:1d:3e:88:74:3d:2a:3d:9b:9e:92:
dd:6d:f1:e4:82:86:5b:d7:77:ad:be:00:64:4b:6b:
0f:1c:73:16:21:24:bf:71:b7:e0:33:6d:44:a3:dd:
b9:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:B6:19:7B:34:F4:41:A5:1B:36:7B:53:87:43:EB:4B:C6:26:E8:28
X509v3 Authority Key Identifier:
keyid:74:D6:31:8D:A8:D2:35:79:C4:F7:38:B6:E8:E5:5C:C5:FF:27:E5:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dNYxjajSNXnE9zi26OVcxf8n5bE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/ef54db-a565-4354-899a-083aa18a7629/1/dNYxjajSNXnE9zi26OVcxf8n5bE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/ef54db-a565-4354-899a-083aa18a7629/1/dNYxjajSNXnE9zi26OVcxf8n5bE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:95:68:83:4e:ab:a9:5f:71:dc:95:ea:ef:32:e3:db:e4:c6:
8e:f4:16:20:93:48:b3:19:43:88:b0:83:b6:da:ec:11:8c:44:
b5:c4:67:af:c8:97:9d:8f:28:5b:43:eb:18:2b:56:2b:92:e9:
09:90:a0:81:11:60:5b:3f:04:12:93:a0:76:56:79:9b:5f:da:
eb:48:47:98:de:b3:27:36:2f:ec:cb:c0:cf:49:7a:d9:3e:27:
92:07:e1:47:8c:86:18:40:b2:21:3c:00:33:2f:8b:65:4d:ae:
f0:7f:d8:a0:bf:79:5b:fe:85:2f:5b:38:57:81:b6:0f:39:6f:
1b:0c:f3:78:1b:14:29:d5:10:3f:e6:e7:73:70:64:68:fa:f7:
0a:ea:df:b4:44:05:9c:6a:d6:9e:3d:23:7b:ff:07:d3:07:ce:
e3:1c:96:33:91:15:57:a0:68:9d:b2:d1:a4:fa:bc:6c:02:13:
5c:80:4f:f6:db:c1:c7:89:df:36:e8:bc:ba:63:a2:51:49:d1:
6b:d2:3a:1d:36:d2:91:29:c1:92:83:53:07:90:cc:b4:e2:7e:
54:13:34:b2:5f:85:ab:41:a7:fc:66:9a:64:fd:08:35:f5:3a:
9d:96:3d:3d:6f:85:1b:44:f1:da:d1:19:ff:ab:04:7a:3e:2a:
91:16:e8:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 08:02:53 2025 by rpki-client