Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/ef54db-a565-4354-899a-083aa18a7629/1/dNYxjajSNXnE9zi26OVcxf8n5bE.mft
File: dNYxjajSNXnE9zi26OVcxf8n5bE.mft (raw, json)
Hash identifier: cRm7OWt9CyF1jAt/EHjrWKwEMl7ae1of4kfI4sIDh8w=
Subject key identifier: EC:D6:3B:4E:9E:E2:27:E1:34:36:26:87:BB:82:0A:58:41:9B:93:CD
Authority key identifier: 74:D6:31:8D:A8:D2:35:79:C4:F7:38:B6:E8:E5:5C:C5:FF:27:E5:B1
Certificate issuer: /CN=74d6318da8d23579c4f738b6e8e55cc5ff27e5b1
Certificate serial: 01975E38D913DF31E0BCBA768546ECDDD6A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dNYxjajSNXnE9zi26OVcxf8n5bE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/ef54db-a565-4354-899a-083aa18a7629/1/dNYxjajSNXnE9zi26OVcxf8n5bE.mft
Manifest number: 0B87
Signing time: Wed 11 Jun 2025 09:01:13 +0000
Manifest this update: Wed 11 Jun 2025 09:01:13 +0000
Manifest next update: Thu 12 Jun 2025 09:01:13 +0000
Files and hashes: 1: dNYxjajSNXnE9zi26OVcxf8n5bE.crl (hash: t9e8Uk/kh4EubKEVBl9wj+LSLH1MjIGMIYIPY3YuqxM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/ef54db-a565-4354-899a-083aa18a7629/1/dNYxjajSNXnE9zi26OVcxf8n5bE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/ef54db-a565-4354-899a-083aa18a7629/1/dNYxjajSNXnE9zi26OVcxf8n5bE.mft
rsync://rpki.ripe.net/repository/DEFAULT/dNYxjajSNXnE9zi26OVcxf8n5bE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 08:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5e:38:d9:13:df:31:e0:bc:ba:76:85:46:ec:dd:d6:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74d6318da8d23579c4f738b6e8e55cc5ff27e5b1
Validity
Not Before: Jun 11 09:01:13 2025 GMT
Not After : Jun 12 09:01:13 2025 GMT
Subject: CN=ecd63b4e9ee227e134362687bb820a58419b93cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:ba:d1:38:22:e0:69:1a:b8:f6:0c:42:e5:a2:
f0:47:0b:0f:81:a5:ba:5b:c7:ae:58:aa:78:15:72:
d2:6b:7a:61:dc:a6:b0:88:29:6e:87:3e:95:f5:d3:
8d:77:1d:9b:88:e5:55:46:82:91:21:9c:13:41:c9:
59:16:16:ea:f9:14:f2:eb:4c:2b:76:84:f5:94:53:
ae:b1:80:35:0e:b1:92:69:0f:05:cb:97:6c:f2:95:
bb:5a:d8:fd:01:83:75:d2:57:bb:6f:e4:82:b0:9f:
42:fa:40:9b:b3:29:dd:47:c3:e1:a8:ff:fe:18:57:
5f:36:85:78:11:89:36:bf:35:e5:2a:15:2e:51:e2:
d8:ae:f0:3d:5c:5a:c1:bd:91:84:01:80:45:64:40:
a9:eb:65:42:8e:5c:f7:28:8a:b6:fe:03:eb:df:e7:
ee:cf:55:85:8a:a3:1f:e2:b7:8d:00:42:3c:8b:e1:
2e:45:8e:03:b7:56:46:a0:26:20:3a:54:e3:40:bb:
f5:a4:11:18:53:7b:7c:91:d6:95:f3:03:c8:05:67:
11:50:49:8f:7d:d5:61:e9:e2:ce:df:1f:73:66:8c:
2f:d3:41:dd:0a:ee:bd:d0:d7:fd:d5:a8:11:7f:51:
ad:8c:43:13:a7:3b:1f:a9:22:5b:ce:23:2a:5c:85:
8a:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:D6:3B:4E:9E:E2:27:E1:34:36:26:87:BB:82:0A:58:41:9B:93:CD
X509v3 Authority Key Identifier:
keyid:74:D6:31:8D:A8:D2:35:79:C4:F7:38:B6:E8:E5:5C:C5:FF:27:E5:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dNYxjajSNXnE9zi26OVcxf8n5bE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/ef54db-a565-4354-899a-083aa18a7629/1/dNYxjajSNXnE9zi26OVcxf8n5bE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/ef54db-a565-4354-899a-083aa18a7629/1/dNYxjajSNXnE9zi26OVcxf8n5bE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:75:e9:b1:4e:55:d5:28:f6:d5:2c:fd:dd:20:0d:c2:4a:33:
8e:88:44:42:ca:60:56:05:2a:a8:02:73:a1:be:1e:a6:c8:f3:
62:87:df:9a:97:fb:48:b3:60:a9:d3:3f:63:91:a6:05:b6:26:
8e:15:16:ed:34:b0:74:fc:0e:78:c5:37:59:e2:4b:8c:78:f7:
3f:d9:a2:d1:b5:f1:c2:57:70:6b:2e:17:aa:a2:de:a3:ca:62:
d3:8d:52:ff:41:88:13:9e:9b:b6:86:af:dd:7b:05:96:7f:b2:
9e:47:e9:66:8d:8b:43:9e:61:a4:0f:c6:2d:a4:77:61:16:c4:
86:c7:21:7c:27:9b:74:64:23:da:f5:a5:0b:15:31:c5:94:b8:
a5:a6:37:c1:45:4f:77:78:38:b5:25:d5:bb:28:8f:3f:29:f5:
54:4e:20:56:7f:cb:76:0b:3f:59:07:1b:43:2c:e5:eb:aa:d9:
ed:a6:b7:53:d5:2c:a9:19:3d:5e:1d:d9:9c:6d:c8:5e:1a:de:
a5:94:9c:4a:2b:7e:dd:f2:01:56:42:19:25:3a:d6:3f:4c:d7:
60:b7:29:ef:7f:98:7d:4f:1e:99:b6:29:f4:e6:19:b4:65:23:
3f:a5:c6:4d:51:88:fa:25:e8:a1:ee:76:79:e7:6d:14:67:87:
42:5e:82:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 11:54:54 2025 by rpki-client