Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/2f4796-4512-464d-b9de-880f8238fe0b/1/Dp842O8xOufFpwiU9m6HGjMYA_8.mft
File: Dp842O8xOufFpwiU9m6HGjMYA_8.mft (raw, json)
Hash identifier: ckPd65pTmxDPdpCZCh2fetofkuNzbol7dEB84QE8nes=
Subject key identifier: 3A:49:0C:15:44:E1:71:69:41:37:30:7D:E4:B7:91:C3:13:ED:E6:05
Authority key identifier: 0E:9F:38:D8:EF:31:3A:E7:C5:A7:08:94:F6:6E:87:1A:33:18:03:FF
Certificate issuer: /CN=0e9f38d8ef313ae7c5a70894f66e871a331803ff
Certificate serial: 0197711AFF0BE6B4241C9ACF76B146D42AE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dp842O8xOufFpwiU9m6HGjMYA_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/2f4796-4512-464d-b9de-880f8238fe0b/1/Dp842O8xOufFpwiU9m6HGjMYA_8.mft
Manifest number: 158E
Signing time: Sun 15 Jun 2025 01:01:23 +0000
Manifest this update: Sun 15 Jun 2025 01:01:23 +0000
Manifest next update: Mon 16 Jun 2025 01:01:23 +0000
Files and hashes: 1: Dp842O8xOufFpwiU9m6HGjMYA_8.crl (hash: SbzRPexhf0Q8tvN+3beDaGbfigJqfMCLpIWcyzB/biY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/2f4796-4512-464d-b9de-880f8238fe0b/1/Dp842O8xOufFpwiU9m6HGjMYA_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/2f4796-4512-464d-b9de-880f8238fe0b/1/Dp842O8xOufFpwiU9m6HGjMYA_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dp842O8xOufFpwiU9m6HGjMYA_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 01:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:1a:ff:0b:e6:b4:24:1c:9a:cf:76:b1:46:d4:2a:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e9f38d8ef313ae7c5a70894f66e871a331803ff
Validity
Not Before: Jun 15 01:01:23 2025 GMT
Not After : Jun 16 01:01:23 2025 GMT
Subject: CN=3a490c1544e171694137307de4b791c313ede605
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a1:0c:10:f6:b6:4f:58:68:b3:ee:26:4d:64:
99:d8:fd:9e:10:bc:35:71:9a:bc:e7:4f:93:d1:98:
8f:a0:36:86:0b:14:51:b7:e4:3a:b9:95:7f:37:7b:
0c:cc:f6:3e:a1:a6:1c:a8:96:65:77:11:db:f8:a4:
66:a3:5e:e4:24:6c:cb:21:8f:04:e6:8c:a2:83:f8:
4e:5e:66:74:ac:c1:86:bf:4d:9f:36:24:62:b0:f8:
b6:f7:ff:2f:ba:cf:53:a7:c9:33:b2:9a:35:0b:cc:
0a:4c:3d:78:22:54:56:90:cc:3c:91:6f:c8:b6:ad:
9d:c2:c7:81:52:cd:c0:a2:cf:94:82:2d:68:17:1e:
0b:ad:9d:48:3f:27:ac:78:4d:dd:73:4a:f9:23:e3:
b6:a8:52:aa:9b:ce:77:58:38:32:59:92:a0:a1:f2:
5c:f6:2b:00:22:05:07:b9:00:81:94:43:4e:c1:6f:
e0:1b:f2:21:9e:8b:1b:69:cf:47:cb:52:ce:b0:0e:
c2:af:90:95:9c:17:46:52:21:97:1f:00:20:49:04:
dc:3b:d0:94:3a:3d:0f:4c:b8:3d:55:8f:fc:ef:2a:
a9:04:21:c4:2b:7e:bd:bb:1e:68:d0:3e:f9:08:68:
0c:f1:56:0f:c9:9b:5d:4e:70:ee:ee:2b:03:aa:87:
58:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:49:0C:15:44:E1:71:69:41:37:30:7D:E4:B7:91:C3:13:ED:E6:05
X509v3 Authority Key Identifier:
keyid:0E:9F:38:D8:EF:31:3A:E7:C5:A7:08:94:F6:6E:87:1A:33:18:03:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dp842O8xOufFpwiU9m6HGjMYA_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/2f4796-4512-464d-b9de-880f8238fe0b/1/Dp842O8xOufFpwiU9m6HGjMYA_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/2f4796-4512-464d-b9de-880f8238fe0b/1/Dp842O8xOufFpwiU9m6HGjMYA_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:95:4e:61:75:b9:57:48:79:c2:54:8a:c1:24:9f:78:d6:75:
87:17:c3:cd:ef:35:3f:d3:2d:af:96:a9:99:db:32:b5:8e:64:
e2:e7:47:91:aa:97:fd:97:39:b0:c3:77:36:39:96:99:ea:51:
74:b7:ec:52:d8:5f:7f:ad:fc:d3:48:f1:8a:5e:c2:8c:16:67:
e9:ee:94:6e:53:45:cc:b0:39:db:ea:48:77:7d:3e:87:16:44:
c5:af:52:1b:c4:b4:89:08:a6:84:ab:a5:a8:d7:0e:97:7d:87:
6d:75:d0:e6:39:8a:f1:93:63:a6:d6:11:0c:ae:80:72:b4:9a:
ab:43:7c:9a:e8:33:f6:20:2c:16:bf:28:b2:db:fd:2f:3e:16:
a5:19:06:dd:43:57:da:b0:b9:67:f8:71:40:ee:6e:88:02:ee:
7d:8e:e3:c9:a7:67:26:29:1c:7b:66:ad:3a:61:b8:a1:0b:b9:
d1:c6:e0:0b:b1:74:23:f7:e3:a3:ba:89:5d:19:8b:17:f3:d6:
17:62:a0:24:2c:27:8a:68:32:58:25:dd:3d:76:6c:d6:13:52:
ec:b4:cd:08:55:28:62:8b:16:3a:b4:1d:86:a6:69:fb:46:d8:
05:0e:f4:7c:88:96:90:9c:c9:be:e4:90:78:3a:45:85:80:a9:
2e:7d:5b:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 11:23:15 2025 by rpki-client