Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/ef54db-a565-4354-899a-083aa18a7629/1/dNYxjajSNXnE9zi26OVcxf8n5bE.mft
File: dNYxjajSNXnE9zi26OVcxf8n5bE.mft (raw, json)
Hash identifier: cmGtjhCvLNSrkVfdXmbwxM0MpJn1Q/ZuGwIlHqEiCQQ=
Subject key identifier: 60:65:E2:2A:CD:17:A3:A9:CB:42:E6:61:0B:1A:31:10:38:0B:C5:19
Authority key identifier: 74:D6:31:8D:A8:D2:35:79:C4:F7:38:B6:E8:E5:5C:C5:FF:27:E5:B1
Certificate issuer: /CN=74d6318da8d23579c4f738b6e8e55cc5ff27e5b1
Certificate serial: 019769CEE3ED5615140E9B303854783550C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dNYxjajSNXnE9zi26OVcxf8n5bE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/ef54db-a565-4354-899a-083aa18a7629/1/dNYxjajSNXnE9zi26OVcxf8n5bE.mft
Manifest number: 0B8D
Signing time: Fri 13 Jun 2025 15:00:55 +0000
Manifest this update: Fri 13 Jun 2025 15:00:55 +0000
Manifest next update: Sat 14 Jun 2025 15:00:55 +0000
Files and hashes: 1: dNYxjajSNXnE9zi26OVcxf8n5bE.crl (hash: MfZPTu6bF9vXfd/hfp3wRakaUHphK6PRri9chtGVEE8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/ef54db-a565-4354-899a-083aa18a7629/1/dNYxjajSNXnE9zi26OVcxf8n5bE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/ef54db-a565-4354-899a-083aa18a7629/1/dNYxjajSNXnE9zi26OVcxf8n5bE.mft
rsync://rpki.ripe.net/repository/DEFAULT/dNYxjajSNXnE9zi26OVcxf8n5bE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 15:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:ce:e3:ed:56:15:14:0e:9b:30:38:54:78:35:50:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74d6318da8d23579c4f738b6e8e55cc5ff27e5b1
Validity
Not Before: Jun 13 15:00:55 2025 GMT
Not After : Jun 14 15:00:55 2025 GMT
Subject: CN=6065e22acd17a3a9cb42e6610b1a3110380bc519
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:98:33:ae:2b:71:fe:b8:af:56:82:8c:3e:b6:
28:bc:7b:d0:ae:35:2e:90:70:a8:a7:1a:42:03:03:
f4:8e:55:9a:2d:3a:e6:b8:5a:68:76:19:18:68:80:
f0:62:1d:61:f1:fb:be:b5:ae:15:59:10:0c:1f:10:
f7:ce:b0:e6:f9:d2:67:6d:02:31:43:3e:e8:4d:26:
ef:20:5c:ad:77:05:a1:9f:64:90:11:2b:57:e7:36:
01:31:8b:27:e0:ca:79:02:5a:71:57:aa:b5:a1:47:
e6:29:26:61:6c:1d:5c:79:8e:d7:6d:fc:83:b6:a7:
ff:37:93:94:92:4b:83:79:b5:eb:a1:ce:ad:c0:54:
8c:4f:a5:d6:d4:1b:42:bc:df:fb:db:ea:fe:40:e9:
4d:1f:48:3b:39:cd:40:30:87:11:d8:39:39:c6:9b:
dc:ea:57:9d:82:52:7b:5b:60:8c:29:81:c4:0b:67:
95:64:ee:a0:fa:6e:19:09:81:1d:94:a2:fa:ba:38:
46:16:a7:cf:dd:07:d2:af:83:de:0c:6b:d5:b0:71:
e1:9f:9d:60:b9:bf:7e:3f:76:0e:66:f8:3f:c4:13:
89:da:93:cf:2b:f5:89:2e:bf:30:f2:6b:1a:37:82:
4a:9d:92:9c:4b:be:d5:16:6e:cc:9b:b0:1b:58:6f:
62:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:65:E2:2A:CD:17:A3:A9:CB:42:E6:61:0B:1A:31:10:38:0B:C5:19
X509v3 Authority Key Identifier:
keyid:74:D6:31:8D:A8:D2:35:79:C4:F7:38:B6:E8:E5:5C:C5:FF:27:E5:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dNYxjajSNXnE9zi26OVcxf8n5bE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/ef54db-a565-4354-899a-083aa18a7629/1/dNYxjajSNXnE9zi26OVcxf8n5bE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/ef54db-a565-4354-899a-083aa18a7629/1/dNYxjajSNXnE9zi26OVcxf8n5bE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:4b:7b:e0:d5:32:8a:52:18:85:00:d9:11:b4:50:97:bd:4c:
d1:86:90:ad:ab:3d:90:da:72:16:f5:f4:99:36:88:90:48:fe:
36:f2:de:13:f8:f1:7a:cf:4c:57:75:11:e3:46:dc:ad:1d:77:
01:fe:1d:be:69:ea:00:bb:c8:af:43:84:95:a0:d3:72:95:1c:
29:67:da:ea:d1:e1:56:3c:aa:63:1f:31:14:94:f2:a9:0b:2f:
04:e1:8d:97:6f:76:c6:fe:46:63:88:67:7a:8e:7e:00:dc:59:
3e:70:7d:d1:a4:bc:fd:6f:74:31:f5:6f:a2:a7:f4:27:89:6f:
26:ac:4f:34:e5:bc:df:ff:29:be:1a:f1:90:36:03:eb:6d:bb:
51:92:48:d3:14:43:9b:d1:56:7a:43:12:ea:58:54:dc:15:b5:
92:ba:c7:22:4c:48:1d:a5:80:10:14:cb:a3:08:98:c9:4d:65:
fd:17:43:7e:45:bd:b3:39:89:df:99:2a:6c:26:bf:40:49:18:
3d:c4:cd:49:7c:22:7c:00:c3:98:92:77:f9:8a:90:11:38:e4:
d9:fc:3c:1f:10:3f:7b:1d:fb:e8:ba:d1:05:6e:62:7a:dd:d1:
2d:d9:59:ee:a5:b6:7c:80:b0:ea:e0:4e:f2:59:8a:c5:72:8c:
0c:1b:2e:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 22:53:49 2025 by rpki-client