Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/ef54db-a565-4354-899a-083aa18a7629/1/dNYxjajSNXnE9zi26OVcxf8n5bE.mft
File: dNYxjajSNXnE9zi26OVcxf8n5bE.mft (raw, json)
Hash identifier: ETB2dWibX7ZsTg9/837uZO5sroYgqqc9h0vETU2Leig=
Subject key identifier: B2:8B:A3:AF:0E:6E:E4:19:29:DE:58:0F:F3:60:B8:22:D3:1C:2E:AA
Authority key identifier: 74:D6:31:8D:A8:D2:35:79:C4:F7:38:B6:E8:E5:5C:C5:FF:27:E5:B1
Certificate issuer: /CN=74d6318da8d23579c4f738b6e8e55cc5ff27e5b1
Certificate serial: 01976BBD50695EC23ECECD7D7912C11EE24E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dNYxjajSNXnE9zi26OVcxf8n5bE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/ef54db-a565-4354-899a-083aa18a7629/1/dNYxjajSNXnE9zi26OVcxf8n5bE.mft
Manifest number: 0B8E
Signing time: Sat 14 Jun 2025 00:00:58 +0000
Manifest this update: Sat 14 Jun 2025 00:00:58 +0000
Manifest next update: Sun 15 Jun 2025 00:00:58 +0000
Files and hashes: 1: dNYxjajSNXnE9zi26OVcxf8n5bE.crl (hash: jIS2vxdjr8IfsaWFepeCMOQXrk4RxpHu0/Z9Mv1KgEg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/ef54db-a565-4354-899a-083aa18a7629/1/dNYxjajSNXnE9zi26OVcxf8n5bE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/ef54db-a565-4354-899a-083aa18a7629/1/dNYxjajSNXnE9zi26OVcxf8n5bE.mft
rsync://rpki.ripe.net/repository/DEFAULT/dNYxjajSNXnE9zi26OVcxf8n5bE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:bd:50:69:5e:c2:3e:ce:cd:7d:79:12:c1:1e:e2:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74d6318da8d23579c4f738b6e8e55cc5ff27e5b1
Validity
Not Before: Jun 14 00:00:58 2025 GMT
Not After : Jun 15 00:00:58 2025 GMT
Subject: CN=b28ba3af0e6ee41929de580ff360b822d31c2eaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:13:43:07:63:40:40:7b:b0:e2:8d:9e:ee:48:
bd:57:92:8d:d8:b9:44:4f:8b:63:a2:c8:30:07:91:
07:5f:0d:a2:a0:9b:f8:f8:1b:4e:ea:04:5e:ea:3e:
28:6f:62:6e:0d:51:b8:80:5b:fd:6d:87:6a:ee:9c:
3d:3f:32:81:18:eb:f7:2a:92:94:18:95:76:e4:3e:
e3:da:e6:36:59:06:39:08:b7:39:5d:bb:70:c3:4f:
2a:91:a5:ef:c8:41:a7:2e:f7:96:a2:d6:ba:a2:38:
76:2a:02:e8:a1:00:0d:78:c5:dd:41:13:f3:54:89:
fc:f4:a7:9a:af:a3:ff:da:8a:44:bc:33:ff:3f:3e:
9f:ae:ac:96:1f:3a:ef:61:fd:7f:12:dc:4f:f2:e1:
44:80:3a:6b:04:3f:07:99:9a:b0:2c:70:49:3e:5b:
c3:c7:e5:a3:96:6a:e7:b0:01:c0:7f:ce:83:00:f6:
14:50:84:63:8a:60:df:f1:2c:23:e4:0f:65:dd:26:
67:cf:09:5e:2e:3c:e7:5b:6c:0e:5a:3d:3b:e0:65:
7d:b3:65:05:08:23:fd:ac:17:03:3a:44:da:f2:41:
0e:f7:f0:6f:c9:db:ba:62:c2:af:76:48:fc:8f:2d:
b3:3a:80:fe:3d:04:52:78:89:67:21:73:a3:1a:cf:
0f:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:8B:A3:AF:0E:6E:E4:19:29:DE:58:0F:F3:60:B8:22:D3:1C:2E:AA
X509v3 Authority Key Identifier:
keyid:74:D6:31:8D:A8:D2:35:79:C4:F7:38:B6:E8:E5:5C:C5:FF:27:E5:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dNYxjajSNXnE9zi26OVcxf8n5bE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/ef54db-a565-4354-899a-083aa18a7629/1/dNYxjajSNXnE9zi26OVcxf8n5bE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/ef54db-a565-4354-899a-083aa18a7629/1/dNYxjajSNXnE9zi26OVcxf8n5bE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:43:51:0f:93:2e:9b:3b:13:ba:b7:8b:94:90:f9:67:16:c3:
6e:30:1b:c5:be:f2:c2:e5:10:63:8c:ef:18:b2:8b:83:90:3f:
32:5b:50:03:2a:58:4c:7e:1e:66:8a:e5:33:d0:0b:91:c9:17:
66:24:6d:53:2d:c3:9c:69:7f:35:b7:3d:27:f3:2b:f8:78:4a:
fc:ec:c9:da:f8:94:34:01:02:38:2e:d2:73:4d:fa:d1:83:be:
44:37:a6:35:3a:40:94:c0:50:d7:bd:7e:b3:bf:25:62:d8:1d:
a5:72:a9:59:84:f5:c8:24:71:e0:40:33:8f:15:5c:b8:0d:61:
ff:dd:73:a1:53:f5:20:b2:d5:d7:db:2a:f3:92:48:b4:14:17:
9c:c4:80:3d:c4:ec:87:de:42:bb:d2:5c:bf:d8:9b:1e:4c:b9:
16:55:25:1a:6a:8f:8c:f1:95:30:80:6d:9c:db:c8:47:30:e2:
5a:97:77:ee:d9:3a:5e:7f:9c:52:5e:14:ce:c2:0f:5c:39:90:
af:d8:1c:9b:64:8e:98:da:1f:5c:a9:b7:86:d6:3f:74:71:11:
3f:12:54:a9:24:bc:ec:b9:11:db:83:4e:4b:92:53:b4:65:ae:
1a:cc:18:42:d1:28:10:95:e3:18:2b:be:86:2d:c0:4d:56:55:
1b:88:7d:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 08:27:33 2025 by rpki-client