Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/2f4796-4512-464d-b9de-880f8238fe0b/1/Dp842O8xOufFpwiU9m6HGjMYA_8.mft
File: Dp842O8xOufFpwiU9m6HGjMYA_8.mft (raw, json)
Hash identifier: 9j7JYPPzLDFxCZZkg/bSy8uwwBLsEVOGfS5d08WMZGk=
Subject key identifier: A5:BE:6A:48:B0:15:F9:F1:FA:3A:AA:43:8A:86:20:BC:64:81:9A:19
Authority key identifier: 0E:9F:38:D8:EF:31:3A:E7:C5:A7:08:94:F6:6E:87:1A:33:18:03:FF
Certificate issuer: /CN=0e9f38d8ef313ae7c5a70894f66e871a331803ff
Certificate serial: 01975BDCC498849E3ECC35B3DBEAECBA919D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dp842O8xOufFpwiU9m6HGjMYA_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/2f4796-4512-464d-b9de-880f8238fe0b/1/Dp842O8xOufFpwiU9m6HGjMYA_8.mft
Manifest number: 1583
Signing time: Tue 10 Jun 2025 22:01:24 +0000
Manifest this update: Tue 10 Jun 2025 22:01:24 +0000
Manifest next update: Wed 11 Jun 2025 22:01:24 +0000
Files and hashes: 1: Dp842O8xOufFpwiU9m6HGjMYA_8.crl (hash: IVzlBcaKf0QcnuxNP+fYY0c5wDDqc3j4HXIkpXlJ93s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/2f4796-4512-464d-b9de-880f8238fe0b/1/Dp842O8xOufFpwiU9m6HGjMYA_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/2f4796-4512-464d-b9de-880f8238fe0b/1/Dp842O8xOufFpwiU9m6HGjMYA_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dp842O8xOufFpwiU9m6HGjMYA_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 20:45:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5b:dc:c4:98:84:9e:3e:cc:35:b3:db:ea:ec:ba:91:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e9f38d8ef313ae7c5a70894f66e871a331803ff
Validity
Not Before: Jun 10 22:01:24 2025 GMT
Not After : Jun 11 22:01:24 2025 GMT
Subject: CN=a5be6a48b015f9f1fa3aaa438a8620bc64819a19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:70:c3:09:d3:33:4f:8b:ed:c1:9a:7e:58:82:
f3:ac:10:30:d6:87:33:b9:7d:79:de:f0:89:d6:21:
31:51:df:50:f1:a8:35:cc:30:d7:ea:55:2b:de:84:
78:97:c0:24:ff:cc:cb:63:e6:63:c0:f5:ad:af:ca:
c6:0a:fd:f0:9c:6f:5d:73:8c:6d:a2:2a:2e:a7:56:
21:63:07:f1:07:e3:82:3d:f7:93:05:21:de:29:a3:
a8:ea:2e:07:be:a5:b4:53:7f:3e:37:c7:78:14:51:
e8:2a:cd:56:b7:ea:a0:09:36:97:73:93:c3:9d:e6:
72:19:4e:11:08:2e:ee:2f:10:ce:b0:09:a7:bf:79:
04:17:ad:86:49:d4:e7:9d:4f:96:98:b1:b2:50:76:
e8:b5:8c:05:f6:0d:e5:42:42:76:f9:9b:cd:33:56:
38:6e:10:41:0f:8c:25:e7:70:b6:c6:14:83:c4:03:
6a:a0:20:34:91:29:4e:04:27:68:96:78:d9:8a:f6:
e1:0a:a0:e2:28:2a:ec:97:4d:7b:df:98:86:4b:f2:
c1:d9:f8:92:8c:a7:8a:fb:da:3b:0e:01:fd:fa:95:
96:8f:4a:50:ca:a7:c2:fd:f1:61:61:f8:db:f8:c5:
ea:c4:4b:91:07:90:e3:89:4b:88:ca:a3:bc:ee:6d:
65:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:BE:6A:48:B0:15:F9:F1:FA:3A:AA:43:8A:86:20:BC:64:81:9A:19
X509v3 Authority Key Identifier:
keyid:0E:9F:38:D8:EF:31:3A:E7:C5:A7:08:94:F6:6E:87:1A:33:18:03:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dp842O8xOufFpwiU9m6HGjMYA_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/2f4796-4512-464d-b9de-880f8238fe0b/1/Dp842O8xOufFpwiU9m6HGjMYA_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/2f4796-4512-464d-b9de-880f8238fe0b/1/Dp842O8xOufFpwiU9m6HGjMYA_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:0b:cc:9c:36:c1:23:78:49:64:69:82:92:38:fa:1f:f0:cf:
ab:ef:7b:33:3f:e7:28:ca:2f:58:05:1d:15:f3:ea:2b:45:5d:
59:96:d4:fb:90:7d:bf:f6:d5:96:a2:74:b4:e4:6f:b5:34:ba:
c2:ee:88:ef:be:a9:b6:f0:aa:85:1e:d1:be:87:f5:13:ad:ac:
23:93:a3:7e:96:c4:08:a4:72:97:4a:56:1e:d6:f7:cd:f6:7b:
a3:58:a1:cc:62:28:57:9b:0a:27:f8:fe:7d:f8:b4:4f:ac:b3:
75:51:cc:aa:e5:ee:f9:43:90:f9:7a:7c:97:e3:e1:c3:c5:bc:
60:dd:f8:06:3d:77:06:7c:ab:29:cb:33:81:c2:0e:2f:51:60:
20:09:c2:d6:d8:da:b3:2f:62:91:38:59:9e:6a:3a:77:f3:08:
76:72:2a:12:71:54:88:59:9f:8d:60:da:8a:4f:96:1b:1d:ff:
0f:5b:cd:a0:2f:db:bd:dd:90:57:27:c1:14:48:32:bf:b3:68:
3e:c1:ae:95:ec:9c:5d:f6:f1:19:ad:c7:93:ab:0d:44:c1:1c:
6e:c0:de:65:b8:08:36:fa:b3:eb:96:36:4d:6b:74:f9:7c:e8:
2d:fc:aa:85:70:24:f7:45:36:52:55:f3:2a:79:ee:c1:53:5c:
b4:02:04:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 07:22:35 2025 by rpki-client