Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/ef54db-a565-4354-899a-083aa18a7629/1/dNYxjajSNXnE9zi26OVcxf8n5bE.mft
File: dNYxjajSNXnE9zi26OVcxf8n5bE.mft (raw, json)
Hash identifier: C0V0gqbdb4vW3DyIEep+Ri8++z/S1oxSe6QOSq0Uks8=
Subject key identifier: FE:49:0D:7C:70:06:D1:CD:FC:84:15:5C:F3:9D:74:BC:10:E5:C0:27
Authority key identifier: 74:D6:31:8D:A8:D2:35:79:C4:F7:38:B6:E8:E5:5C:C5:FF:27:E5:B1
Certificate issuer: /CN=74d6318da8d23579c4f738b6e8e55cc5ff27e5b1
Certificate serial: 0197586D733E7FBED010E35EC36D9656C65D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dNYxjajSNXnE9zi26OVcxf8n5bE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/ef54db-a565-4354-899a-083aa18a7629/1/dNYxjajSNXnE9zi26OVcxf8n5bE.mft
Manifest number: 0B84
Signing time: Tue 10 Jun 2025 06:00:57 +0000
Manifest this update: Tue 10 Jun 2025 06:00:57 +0000
Manifest next update: Wed 11 Jun 2025 06:00:57 +0000
Files and hashes: 1: dNYxjajSNXnE9zi26OVcxf8n5bE.crl (hash: WpgEelYB6uwUoI7MD/OVja9M/A1Vez/+o6Ad/2vjECY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/ef54db-a565-4354-899a-083aa18a7629/1/dNYxjajSNXnE9zi26OVcxf8n5bE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/ef54db-a565-4354-899a-083aa18a7629/1/dNYxjajSNXnE9zi26OVcxf8n5bE.mft
rsync://rpki.ripe.net/repository/DEFAULT/dNYxjajSNXnE9zi26OVcxf8n5bE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 06:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:58:6d:73:3e:7f:be:d0:10:e3:5e:c3:6d:96:56:c6:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74d6318da8d23579c4f738b6e8e55cc5ff27e5b1
Validity
Not Before: Jun 10 06:00:57 2025 GMT
Not After : Jun 11 06:00:57 2025 GMT
Subject: CN=fe490d7c7006d1cdfc84155cf39d74bc10e5c027
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:c3:c8:04:4e:4c:bf:6d:9b:c1:c8:4b:c4:92:
e7:bc:33:b6:a8:28:18:f7:d5:20:fe:c0:3d:9c:b6:
01:cb:36:99:56:e5:56:b6:cc:96:bb:cd:4b:0a:64:
16:b2:16:e1:d6:79:a6:d3:06:14:57:83:83:92:02:
46:2b:3f:46:df:95:61:06:d7:bb:87:ec:88:d5:67:
dc:aa:06:1a:6c:72:c4:dc:3f:b8:ad:d7:6a:7f:54:
67:91:03:37:cb:8a:6f:55:1d:2d:33:51:1e:78:9e:
fb:f9:c6:1f:f6:ac:59:94:a0:d0:8a:61:a9:9b:c1:
38:0c:61:eb:15:22:af:db:87:d8:90:52:e4:ef:a6:
7f:42:da:b6:84:52:3d:66:b1:8e:26:01:f5:89:cb:
a1:f1:9e:30:2e:f1:cf:28:29:d8:d7:7b:60:7f:57:
ad:e9:df:5f:50:44:cf:17:eb:69:0a:09:5e:fc:a3:
e2:7f:e8:8d:47:b4:76:a6:ac:04:d1:c4:c0:df:3b:
9d:c7:d4:e2:f1:42:d2:71:00:8e:d5:af:55:88:bc:
51:e0:3d:25:44:7b:5a:23:f5:07:a3:fb:85:d7:64:
ac:e6:9b:c4:41:25:1c:2c:2e:c8:3a:a0:cd:08:a6:
16:2c:e0:2b:22:de:8f:71:68:da:c0:2f:73:a5:68:
91:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:49:0D:7C:70:06:D1:CD:FC:84:15:5C:F3:9D:74:BC:10:E5:C0:27
X509v3 Authority Key Identifier:
keyid:74:D6:31:8D:A8:D2:35:79:C4:F7:38:B6:E8:E5:5C:C5:FF:27:E5:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dNYxjajSNXnE9zi26OVcxf8n5bE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/ef54db-a565-4354-899a-083aa18a7629/1/dNYxjajSNXnE9zi26OVcxf8n5bE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/ef54db-a565-4354-899a-083aa18a7629/1/dNYxjajSNXnE9zi26OVcxf8n5bE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:94:a8:b3:4f:04:77:64:cd:76:de:35:59:61:0b:51:2e:09:
53:ff:19:69:01:6a:d7:ae:bb:c6:ac:bc:cc:47:65:e8:37:b7:
b9:b0:bc:7e:bc:5d:a7:b8:64:92:70:ae:5c:c4:ca:55:ec:5a:
18:95:91:8f:b7:a6:23:9e:eb:34:f1:d4:70:30:fe:09:3f:ce:
bd:99:97:61:16:8a:04:36:db:55:63:22:a3:41:e6:fe:d3:24:
42:ce:b5:27:a6:b6:f9:7f:30:b1:ee:5e:6d:69:10:5c:43:33:
79:2c:ec:db:a4:67:6c:c3:fe:f5:96:50:da:a4:47:55:00:c6:
7c:72:1d:c0:f6:20:01:c0:99:df:5b:0a:ed:9c:dc:d7:f4:da:
b5:85:a0:3c:bf:e3:c0:e3:9a:7d:1d:a7:f4:2f:03:05:f4:6f:
6f:61:43:4e:c4:31:af:1a:84:f0:6b:6a:9b:18:e0:57:c6:18:
a3:f7:de:63:bc:ee:0b:75:0b:a4:65:f2:f6:03:36:b8:c0:74:
8a:a4:88:b2:f0:8d:f5:83:e1:35:e9:23:e1:ae:23:1b:9c:bf:
60:21:f8:b3:23:a0:52:ad:e0:c6:46:b5:22:d7:4c:a7:67:e0:
e5:1b:48:ab:bd:85:48:4f:33:14:77:ee:cc:a1:24:83:6c:f4:
f9:8b:29:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 16:42:23 2025 by rpki-client