Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/2f4796-4512-464d-b9de-880f8238fe0b/1/Dp842O8xOufFpwiU9m6HGjMYA_8.mft
File: Dp842O8xOufFpwiU9m6HGjMYA_8.mft (raw, json)
Hash identifier: /bFJ4/yI/wO+h9NUg7Jzj0cFr7S64Q/+a7Bc7PPm21A=
Subject key identifier: B2:40:EA:6F:09:DC:2E:98:E8:E7:30:F4:80:0E:72:A0:B4:3D:B0:17
Authority key identifier: 0E:9F:38:D8:EF:31:3A:E7:C5:A7:08:94:F6:6E:87:1A:33:18:03:FF
Certificate issuer: /CN=0e9f38d8ef313ae7c5a70894f66e871a331803ff
Certificate serial: 01976960F483381809B3E9C434C97A65BBB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dp842O8xOufFpwiU9m6HGjMYA_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/2f4796-4512-464d-b9de-880f8238fe0b/1/Dp842O8xOufFpwiU9m6HGjMYA_8.mft
Manifest number: 158A
Signing time: Fri 13 Jun 2025 13:00:51 +0000
Manifest this update: Fri 13 Jun 2025 13:00:51 +0000
Manifest next update: Sat 14 Jun 2025 13:00:51 +0000
Files and hashes: 1: Dp842O8xOufFpwiU9m6HGjMYA_8.crl (hash: w2DasZXmFh9adt99wGy/b+XZJ1aofI3zKS3a3q4QKLQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/2f4796-4512-464d-b9de-880f8238fe0b/1/Dp842O8xOufFpwiU9m6HGjMYA_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/2f4796-4512-464d-b9de-880f8238fe0b/1/Dp842O8xOufFpwiU9m6HGjMYA_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dp842O8xOufFpwiU9m6HGjMYA_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:60:f4:83:38:18:09:b3:e9:c4:34:c9:7a:65:bb:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e9f38d8ef313ae7c5a70894f66e871a331803ff
Validity
Not Before: Jun 13 13:00:51 2025 GMT
Not After : Jun 14 13:00:51 2025 GMT
Subject: CN=b240ea6f09dc2e98e8e730f4800e72a0b43db017
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:77:28:8f:4c:ed:3b:26:e8:5c:8f:9a:23:86:
77:af:aa:97:7e:bc:62:e9:73:4e:a5:2a:7b:7a:d4:
38:17:30:1e:28:39:8d:68:e4:58:4b:73:76:2c:7c:
f5:1f:a3:43:d0:72:5f:c1:eb:44:8a:2f:46:66:fc:
63:93:73:44:14:33:f1:f0:58:7d:8d:99:98:5b:d6:
2d:fe:90:dd:8b:4d:6e:f7:fb:d7:6f:de:ce:a9:45:
5a:86:c7:46:8c:51:0e:94:d9:a5:e7:97:fa:34:ad:
bd:6d:2f:c6:f6:1f:2a:67:69:5f:b2:88:25:57:19:
40:dd:2b:06:68:0c:a3:ab:e9:e5:60:5c:f3:3e:f2:
57:4d:29:a4:29:e0:83:89:4e:07:29:b5:06:d0:3e:
7f:ee:d8:92:02:97:8a:55:28:5e:07:95:19:5f:ed:
50:1e:cd:40:fe:06:56:d1:bf:9f:2e:76:98:02:d2:
09:1d:bf:a5:8a:74:97:54:58:f7:ba:b7:3a:09:fb:
c4:37:1f:1c:d1:3e:df:83:fd:ad:15:42:e1:b3:e5:
c7:e6:5f:2e:62:b6:23:1a:ac:bc:93:3f:03:96:00:
47:d9:cd:31:d3:2c:dc:60:40:3d:13:5e:3a:16:76:
2a:86:d1:59:85:fd:cc:72:b2:48:38:4d:11:e4:4b:
10:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:40:EA:6F:09:DC:2E:98:E8:E7:30:F4:80:0E:72:A0:B4:3D:B0:17
X509v3 Authority Key Identifier:
keyid:0E:9F:38:D8:EF:31:3A:E7:C5:A7:08:94:F6:6E:87:1A:33:18:03:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dp842O8xOufFpwiU9m6HGjMYA_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/2f4796-4512-464d-b9de-880f8238fe0b/1/Dp842O8xOufFpwiU9m6HGjMYA_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/2f4796-4512-464d-b9de-880f8238fe0b/1/Dp842O8xOufFpwiU9m6HGjMYA_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:6b:e9:eb:9a:e1:9a:34:c8:07:85:47:06:e9:3d:93:79:e9:
be:29:c6:1c:39:ff:1f:d2:ce:a8:5a:54:50:80:f6:a2:85:53:
bc:34:06:04:c3:2c:92:c8:44:02:e1:44:ae:6f:05:43:a8:b7:
10:98:a3:4b:77:32:d9:20:4a:c4:3c:63:c9:73:63:fc:20:c4:
87:be:26:eb:7d:a4:a6:5a:1d:bd:21:31:b3:19:1b:18:72:3d:
74:f8:d4:a9:b9:d1:26:71:89:a3:df:e6:74:4b:17:d2:4f:b2:
ab:07:9f:5e:2b:0e:1d:8c:de:fa:65:0a:f2:e4:d1:4d:1f:ad:
31:f7:dc:82:b9:5d:93:51:01:20:b5:11:ef:fe:ae:67:45:af:
40:aa:59:34:8b:6f:4f:4b:67:7b:60:75:27:aa:ea:09:4d:11:
d7:9a:2c:c4:65:68:08:26:30:e5:df:36:d7:3f:83:1d:bb:f7:
2f:69:88:db:79:0e:9e:c7:39:df:f3:17:c3:82:d4:1b:f2:c4:
86:a1:88:44:5a:4c:78:96:0d:c2:22:a4:80:6a:37:f8:15:d2:
55:f0:49:22:24:2d:36:21:a4:6e:cf:fc:1d:4b:ff:52:67:09:
bc:cc:28:ab:fe:77:38:77:a8:63:fa:f2:8c:fd:11:c0:b6:5c:
6d:61:74:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 22:04:29 2025 by rpki-client