
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/101dba-64eb-4267-b075-c02f775fbf3f/1/dXJV3ckKTQ-C-yZ0RpPtfJhtios.mft
File: dXJV3ckKTQ-C-yZ0RpPtfJhtios.mft (raw, json)
Hash identifier: /WsbG6jcV4JsYjBgGfPmxqh11d5Nl5vNd4jq/EVzOBc=
Subject key identifier: D0:7F:4B:86:1A:46:4A:A7:0D:01:AA:52:8A:A1:D3:96:B1:91:2A:FF
Authority key identifier: 75:72:55:DD:C9:0A:4D:0F:82:FB:26:74:46:93:ED:7C:98:6D:8A:8B
Certificate issuer: /CN=757255ddc90a4d0f82fb26744693ed7c986d8a8b
Certificate serial: 01974BC493601C3FF0A02B0F02BB985A5A64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dXJV3ckKTQ-C-yZ0RpPtfJhtios.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/101dba-64eb-4267-b075-c02f775fbf3f/1/dXJV3ckKTQ-C-yZ0RpPtfJhtios.mft
Manifest number: 1579
Signing time: Sat 07 Jun 2025 19:01:03 +0000
Manifest this update: Sat 07 Jun 2025 19:01:03 +0000
Manifest next update: Sun 08 Jun 2025 19:01:03 +0000
Files and hashes: 1: dXJV3ckKTQ-C-yZ0RpPtfJhtios.crl (hash: lbKk4sJ2KVofovudnxyCKfprv6P4ZWLR/fj4OoVBgtQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/101dba-64eb-4267-b075-c02f775fbf3f/1/dXJV3ckKTQ-C-yZ0RpPtfJhtios.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/101dba-64eb-4267-b075-c02f775fbf3f/1/dXJV3ckKTQ-C-yZ0RpPtfJhtios.mft
rsync://rpki.ripe.net/repository/DEFAULT/dXJV3ckKTQ-C-yZ0RpPtfJhtios.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:c4:93:60:1c:3f:f0:a0:2b:0f:02:bb:98:5a:5a:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=757255ddc90a4d0f82fb26744693ed7c986d8a8b
Validity
Not Before: Jun 7 19:01:03 2025 GMT
Not After : Jun 8 19:01:03 2025 GMT
Subject: CN=d07f4b861a464aa70d01aa528aa1d396b1912aff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:25:9c:f3:96:24:0b:4c:60:1d:6b:57:8e:22:
bd:64:c8:d2:b2:59:83:c3:06:d8:98:91:1d:11:a1:
44:d8:35:25:89:23:58:0c:eb:f3:3f:32:f5:a0:a9:
33:20:1f:a5:49:1a:b3:bd:7b:80:08:7b:6c:57:3a:
26:74:fe:6b:57:61:97:7c:2f:df:79:3f:a0:33:71:
47:f6:ee:bf:db:a6:1d:ab:de:0d:f4:ca:ad:7e:e2:
4a:38:c6:09:64:c4:be:31:e5:1f:10:10:a4:39:c4:
b5:d3:28:84:c6:e6:a6:07:c7:e8:bb:d0:33:bb:99:
42:44:36:68:6c:a6:49:bb:f9:16:0c:12:00:d5:d1:
83:a8:23:4b:a1:37:f6:2c:bb:15:61:08:06:f3:a2:
0c:48:d0:37:4d:e9:ec:16:4c:8c:9c:a4:0a:1a:52:
2c:f5:ae:6e:43:94:f7:39:e1:85:a7:94:d8:de:87:
16:21:d7:45:37:60:66:2e:c2:5e:26:86:23:9b:ae:
30:b9:06:dc:00:8e:77:36:98:a4:0f:f6:24:bf:cd:
86:b0:98:8c:68:a7:8f:d9:72:d6:25:ad:b7:1a:66:
5a:e3:52:1c:6d:fc:83:69:28:2a:12:ef:90:d7:61:
47:5b:b6:a8:58:f7:bd:39:19:04:85:34:07:16:4d:
ab:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:7F:4B:86:1A:46:4A:A7:0D:01:AA:52:8A:A1:D3:96:B1:91:2A:FF
X509v3 Authority Key Identifier:
keyid:75:72:55:DD:C9:0A:4D:0F:82:FB:26:74:46:93:ED:7C:98:6D:8A:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dXJV3ckKTQ-C-yZ0RpPtfJhtios.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/101dba-64eb-4267-b075-c02f775fbf3f/1/dXJV3ckKTQ-C-yZ0RpPtfJhtios.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/101dba-64eb-4267-b075-c02f775fbf3f/1/dXJV3ckKTQ-C-yZ0RpPtfJhtios.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:85:49:fd:0e:17:30:c8:ed:0d:c5:39:2c:a1:4c:1a:e1:21:
2e:61:b6:c3:8e:ec:43:72:2d:8a:02:94:1b:5c:9f:c1:04:4a:
94:24:0e:89:64:1c:7c:33:f4:81:ec:41:a6:01:d5:43:26:5b:
e6:cd:56:87:e4:28:0c:2c:0d:6c:e1:12:ad:7e:39:23:d4:0f:
65:c9:e4:93:5f:95:28:86:a3:20:bd:0c:d4:2a:87:a8:fd:21:
ef:cd:af:e7:17:33:ef:4e:01:0e:c9:74:1b:48:fa:c2:18:e9:
8f:fd:26:91:68:b4:2a:8f:b7:fb:22:2d:e8:62:ac:43:7b:fa:
ba:09:81:fb:75:cb:f3:cd:7f:db:4b:bf:08:29:be:5d:4e:8a:
42:21:f8:4a:11:1d:c9:84:fe:f3:2c:fb:bf:f4:ad:f5:ea:27:
d5:91:1a:16:a7:37:c7:0a:71:b6:6e:7d:1f:df:6a:80:34:d3:
c0:6d:7f:e3:2a:c4:44:d2:c0:bc:25:15:f5:36:17:c4:04:a3:
5b:4e:4c:97:32:df:03:bd:f0:b7:99:22:f3:3c:c3:b0:2f:fe:
1f:76:2f:32:e0:68:eb:b5:09:86:13:7b:74:70:f9:7d:56:55:
37:0e:41:91:ad:bf:b7:be:5a:03:80:5c:d2:43:73:e4:2e:99:
cc:85:58:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:06:48 2025 by rpki-client