Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/a9b91b-684e-4d78-aae9-c447b4193210/1/Dr8L3NkBYisW_9QUS1iIcHMixTQ.mft
File: Dr8L3NkBYisW_9QUS1iIcHMixTQ.mft (raw, json)
Hash identifier: hhPGiHkvW+Sl+PCQu91ADPSJeUH0ACuFcb2ojMVXeNo=
Subject key identifier: 60:B4:42:F9:FF:5F:3F:06:17:E7:C2:F5:0E:BF:81:B5:E4:5D:B4:FB
Authority key identifier: 0E:BF:0B:DC:D9:01:62:2B:16:FF:D4:14:4B:58:88:70:73:22:C5:34
Certificate issuer: /CN=0ebf0bdcd901622b16ffd4144b5888707322c534
Certificate serial: 019749683DE752804DCF33C4B0A963DEEA54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dr8L3NkBYisW_9QUS1iIcHMixTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/a9b91b-684e-4d78-aae9-c447b4193210/1/Dr8L3NkBYisW_9QUS1iIcHMixTQ.mft
Manifest number: 156F
Signing time: Sat 07 Jun 2025 08:00:57 +0000
Manifest this update: Sat 07 Jun 2025 08:00:57 +0000
Manifest next update: Sun 08 Jun 2025 08:00:57 +0000
Files and hashes: 1: Dr8L3NkBYisW_9QUS1iIcHMixTQ.crl (hash: x+3/zO0azIPThHqxdCOogUFulBCvR57LwN3wzCtVe8k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/a9b91b-684e-4d78-aae9-c447b4193210/1/Dr8L3NkBYisW_9QUS1iIcHMixTQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/a9b91b-684e-4d78-aae9-c447b4193210/1/Dr8L3NkBYisW_9QUS1iIcHMixTQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dr8L3NkBYisW_9QUS1iIcHMixTQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 08:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:68:3d:e7:52:80:4d:cf:33:c4:b0:a9:63:de:ea:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ebf0bdcd901622b16ffd4144b5888707322c534
Validity
Not Before: Jun 7 08:00:57 2025 GMT
Not After : Jun 8 08:00:57 2025 GMT
Subject: CN=60b442f9ff5f3f0617e7c2f50ebf81b5e45db4fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:f4:32:84:1e:73:fe:07:5a:75:c8:78:27:73:
41:ca:1d:e3:35:17:07:6e:6b:9c:7f:e6:8b:0e:70:
89:5b:5f:eb:f1:09:b2:32:67:40:0e:8f:96:b2:7b:
02:81:85:7b:b2:8d:b6:c3:ec:9e:c8:f4:78:47:77:
8e:e8:bc:97:0a:73:48:42:fe:1e:8f:96:19:af:96:
40:f2:71:7b:95:30:6e:b9:f8:26:e9:13:e5:a8:9a:
3d:97:3d:75:19:4d:87:2a:c0:4a:d2:23:e0:22:26:
1f:f8:45:bf:79:8a:fc:f6:ff:0c:d6:cf:3e:40:cc:
ab:83:2e:9d:67:99:55:6a:f2:3f:54:36:ae:99:fc:
b5:3c:7d:df:29:76:b8:e5:dc:d4:62:4c:07:80:d7:
4e:54:dc:82:2e:0a:55:35:c4:47:8f:c2:40:45:a7:
90:e3:d6:73:a4:23:77:66:aa:7b:3b:e8:c5:95:fb:
16:06:f3:5a:57:5d:2a:f9:c7:8c:1c:bf:1c:61:36:
f9:e2:6d:fd:23:c0:9b:bb:2f:8f:55:8a:e2:71:b5:
4a:d5:9d:ab:d9:62:ba:c6:9f:f3:6f:8f:dc:1a:ed:
b0:2f:b6:d2:86:c7:89:bf:a6:e1:9c:f6:36:b0:b1:
9f:8f:c3:a0:8e:6b:ce:be:23:c5:00:5d:64:82:3e:
bc:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:B4:42:F9:FF:5F:3F:06:17:E7:C2:F5:0E:BF:81:B5:E4:5D:B4:FB
X509v3 Authority Key Identifier:
keyid:0E:BF:0B:DC:D9:01:62:2B:16:FF:D4:14:4B:58:88:70:73:22:C5:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dr8L3NkBYisW_9QUS1iIcHMixTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/a9b91b-684e-4d78-aae9-c447b4193210/1/Dr8L3NkBYisW_9QUS1iIcHMixTQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/a9b91b-684e-4d78-aae9-c447b4193210/1/Dr8L3NkBYisW_9QUS1iIcHMixTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:f2:1b:b6:ae:68:23:c9:46:42:97:c9:a1:24:bd:33:3d:1c:
7a:c7:a3:d5:a8:5d:b4:3c:c3:d7:44:96:2d:c2:f8:44:e2:a4:
2a:e0:69:d8:24:1d:bb:d6:ad:b7:c7:c9:b2:5b:05:6a:4a:26:
35:f6:ef:bf:b2:9a:9d:89:76:f1:88:d9:9e:f0:9d:3f:ec:b9:
2f:0b:fc:42:d4:a3:bf:3f:6d:3e:7c:7c:be:d9:24:1c:d7:78:
4e:88:41:0f:f6:7b:26:5f:36:a1:83:7c:d6:ec:5a:86:81:58:
56:70:94:40:d1:9d:7b:3b:df:51:05:f7:b3:d0:1d:79:6d:3c:
e0:72:f8:4e:39:a7:0c:28:eb:85:7b:50:aa:e2:26:8a:a5:6b:
e1:a7:bc:e1:04:c5:1b:c2:2a:ec:63:75:f8:da:ff:5d:d5:9c:
e9:f9:53:7f:2f:ea:63:40:e5:50:46:9d:8f:3e:e1:a0:e8:0b:
08:cc:85:be:23:96:41:e0:9c:cb:ba:68:ab:ff:7c:79:3b:68:
86:87:4b:70:dd:a6:d1:56:b4:4e:30:e5:58:be:7d:2a:d6:2d:
79:75:df:ac:82:3e:7a:40:29:2b:a5:c7:e9:68:65:cd:1f:b3:
83:58:65:f3:a8:8d:98:4d:e4:7a:bf:3d:07:74:ae:c3:17:0a:
37:1a:d0:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:12:54 2025 by rpki-client