Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/2f4796-4512-464d-b9de-880f8238fe0b/1/Dp842O8xOufFpwiU9m6HGjMYA_8.mft
File: Dp842O8xOufFpwiU9m6HGjMYA_8.mft (raw, json)
Hash identifier: ssmZvzWESXlpP/woxDElV48IAFvoRvGsah6lclz47GA=
Subject key identifier: 2A:2F:38:11:4D:18:FE:21:1A:F6:87:7A:9E:F7:0A:E5:D7:68:90:B6
Authority key identifier: 0E:9F:38:D8:EF:31:3A:E7:C5:A7:08:94:F6:6E:87:1A:33:18:03:FF
Certificate issuer: /CN=0e9f38d8ef313ae7c5a70894f66e871a331803ff
Certificate serial: 019759EE643CA733F7F23B56E2DDA6411445
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dp842O8xOufFpwiU9m6HGjMYA_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/2f4796-4512-464d-b9de-880f8238fe0b/1/Dp842O8xOufFpwiU9m6HGjMYA_8.mft
Manifest number: 1582
Signing time: Tue 10 Jun 2025 13:01:24 +0000
Manifest this update: Tue 10 Jun 2025 13:01:24 +0000
Manifest next update: Wed 11 Jun 2025 13:01:24 +0000
Files and hashes: 1: Dp842O8xOufFpwiU9m6HGjMYA_8.crl (hash: GYQ2gLbHjVy8DRInfuIflBTezTu+Nx3AZUFKtBn4H3M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/2f4796-4512-464d-b9de-880f8238fe0b/1/Dp842O8xOufFpwiU9m6HGjMYA_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/2f4796-4512-464d-b9de-880f8238fe0b/1/Dp842O8xOufFpwiU9m6HGjMYA_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dp842O8xOufFpwiU9m6HGjMYA_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 13:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:59:ee:64:3c:a7:33:f7:f2:3b:56:e2:dd:a6:41:14:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e9f38d8ef313ae7c5a70894f66e871a331803ff
Validity
Not Before: Jun 10 13:01:24 2025 GMT
Not After : Jun 11 13:01:24 2025 GMT
Subject: CN=2a2f38114d18fe211af6877a9ef70ae5d76890b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:02:59:11:98:2a:df:5b:d6:d8:55:87:1f:2a:
86:1c:d5:66:7b:7a:f0:74:88:a6:a9:7c:bc:00:50:
46:17:c6:6a:d1:76:6e:7d:0f:a5:be:71:a4:06:8b:
3f:63:ab:00:4a:c8:9d:d3:63:ae:ba:4d:dc:05:31:
92:06:06:6d:21:10:0a:4a:e1:79:7c:98:82:2d:48:
da:54:d1:de:a5:06:85:e6:6e:de:40:18:91:dc:44:
12:9d:30:87:bd:0a:37:a1:2c:8c:95:f0:63:79:ad:
d9:8e:53:8d:d4:cd:9c:00:59:06:8a:c6:3c:1c:26:
85:73:3a:68:79:c2:52:d6:98:18:ae:36:34:17:2d:
9e:90:e6:d5:4b:e0:90:3f:a0:26:15:64:a0:d6:71:
c8:cc:82:64:63:8e:ac:0e:c5:0a:0c:49:5b:55:75:
67:36:a4:e2:1b:42:12:32:10:e9:9e:63:ee:c4:15:
45:13:b9:30:fd:b9:bb:00:2d:46:89:e7:9f:85:46:
a4:ec:79:1d:40:8a:a8:65:06:f7:22:b0:b4:29:da:
b6:24:20:02:6d:c0:74:74:4a:85:76:df:bb:34:ec:
e8:09:4d:96:cd:70:d3:2b:e9:cd:87:3f:cc:64:cd:
b2:d1:2b:c1:c9:1d:e0:55:b4:cc:51:7f:34:56:ed:
31:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:2F:38:11:4D:18:FE:21:1A:F6:87:7A:9E:F7:0A:E5:D7:68:90:B6
X509v3 Authority Key Identifier:
keyid:0E:9F:38:D8:EF:31:3A:E7:C5:A7:08:94:F6:6E:87:1A:33:18:03:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dp842O8xOufFpwiU9m6HGjMYA_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/2f4796-4512-464d-b9de-880f8238fe0b/1/Dp842O8xOufFpwiU9m6HGjMYA_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/2f4796-4512-464d-b9de-880f8238fe0b/1/Dp842O8xOufFpwiU9m6HGjMYA_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:87:23:e9:9e:0f:2b:b2:8c:7c:56:23:38:0b:32:d1:5d:8c:
d8:9e:ff:82:fa:1a:33:f9:76:5f:55:d4:6c:10:b4:46:36:69:
1e:f0:0f:b6:63:f6:df:89:4d:ff:36:4f:ef:e0:80:19:53:06:
80:73:2c:ec:10:e7:0e:c6:be:86:82:54:81:8a:2a:2b:2f:10:
fd:ca:2b:f3:3c:90:84:b7:98:d5:9e:da:5e:44:6d:0d:69:7a:
36:db:7a:90:11:4e:47:cc:42:32:97:0c:fd:32:fd:ca:d5:bd:
f2:82:b6:ee:de:bf:c4:2e:e3:06:bb:59:d1:b4:fc:d3:fe:be:
eb:17:a0:ec:c9:9f:03:e2:93:b2:0c:01:f2:0c:86:3c:a0:e0:
06:bf:d0:24:cc:13:9d:89:e3:00:15:a4:e9:27:e8:d4:d3:20:
db:34:e2:3c:33:bb:75:68:b4:4f:8a:98:20:5b:b8:ce:c5:46:
d9:fe:e5:3a:27:b4:ad:15:f6:10:7d:6d:c8:98:50:00:73:4b:
ca:34:f0:3c:54:08:3a:e9:01:4a:51:a1:4a:93:04:7f:f8:48:
0e:9f:29:d4:60:98:00:d9:38:94:51:83:1a:6e:03:5d:38:8c:
74:79:6d:f0:83:00:c3:ec:c7:78:c1:fa:a2:0c:98:75:4d:22:
ad:0e:0f:3a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdZ7mQ8pzP38jtW4t2mQRRFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlOWYzOGQ4ZWYzMTNhZTdjNWE3MDg5NGY2NmU4NzFhMzMx
ODAzZmYwHhcNMjUwNjEwMTMwMTI0WhcNMjUwNjExMTMwMTI0WjAzMTEwLwYDVQQD
EygyYTJmMzgxMTRkMThmZTIxMWFmNjg3N2E5ZWY3MGFlNWQ3Njg5MGI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuwJZEZgq31vW2FWHHyqGHNVme3rw
dIimqXy8AFBGF8Zq0XZufQ+lvnGkBos/Y6sASsid02Ouuk3cBTGSBgZtIRAKSuF5
fJiCLUjaVNHepQaF5m7eQBiR3EQSnTCHvQo3oSyMlfBjea3ZjlON1M2cAFkGisY8
HCaFczpoecJS1pgYrjY0Fy2ekObVS+CQP6AmFWSg1nHIzIJkY46sDsUKDElbVXVn
NqTiG0ISMhDpnmPuxBVFE7kw/bm7AC1GieefhUak7HkdQIqoZQb3IrC0Kdq2JCAC
bcB0dEqFdt+7NOzoCU2WzXDTK+nNhz/MZM2y0SvByR3gVbTMUX80Vu0xgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCovOBFNGP4hGvaHep73CuXXaJC2MB8GA1UdIwQY
MBaAFA6fONjvMTrnxacIlPZuhxozGAP/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRHA4NDJPOHhPdWZGcHdpVTltNkhHak1ZQV84LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS8yZjQ3OTYtNDUxMi00NjRkLWI5ZGUt
ODgwZjgyMzhmZTBiLzEvRHA4NDJPOHhPdWZGcHdpVTltNkhHak1ZQV84Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS8yZjQ3OTYtNDUxMi00NjRkLWI5ZGUtODgwZjgyMzhmZTBi
LzEvRHA4NDJPOHhPdWZGcHdpVTltNkhHak1ZQV84LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnocj6Z4P
K7KMfFYjOAsy0V2M2J7/gvoaM/l2X1XUbBC0RjZpHvAPtmP234lN/zZP7+CAGVMG
gHMs7BDnDsa+hoJUgYoqKy8Q/cor8zyQhLeY1Z7aXkRtDWl6Ntt6kBFOR8xCMpcM
/TL9ytW98oK27t6/xC7jBrtZ0bT80/6+6xeg7MmfA+KTsgwB8gyGPKDgBr/QJMwT
nYnjABWk6Sfo1NMg2zTiPDO7dWi0T4qYIFu4zsVG2f7lOie0rRX2EH1tyJhQAHNL
yjTwPFQIOukBSlGhSpMEf/hIDp8p1GCYANk4lFGDGm4DXTiMdHlt8IMAw+zHeMH6
ogyYdU0irQ4POg==
-----END CERTIFICATE-----
Generated at Tue Jun 10 18:04:17 2025 by rpki-client