Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/0d2ca3-0234-4dbf-8190-12d28d7d4223/1/DykT4xUxAZpDKBkGVbRd2WvdLJ4.mft
File: DykT4xUxAZpDKBkGVbRd2WvdLJ4.mft (raw, json)
Hash identifier: rryTM8OgF4Eviu6x4pSMDeT9+H9oirt4SJUPewJMW4w=
Subject key identifier: 64:34:3A:C0:DD:4A:43:59:EE:E6:BF:EF:C8:14:EF:6D:A5:BE:72:FC
Authority key identifier: 0F:29:13:E3:15:31:01:9A:43:28:19:06:55:B4:5D:D9:6B:DD:2C:9E
Certificate issuer: /CN=0f2913e31531019a4328190655b45dd96bdd2c9e
Certificate serial: 01974D7C233319338E1E1E8879D530A36AA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DykT4xUxAZpDKBkGVbRd2WvdLJ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/0d2ca3-0234-4dbf-8190-12d28d7d4223/1/DykT4xUxAZpDKBkGVbRd2WvdLJ4.mft
Manifest number: 0598
Signing time: Sun 08 Jun 2025 03:01:10 +0000
Manifest this update: Sun 08 Jun 2025 03:01:10 +0000
Manifest next update: Mon 09 Jun 2025 03:01:10 +0000
Files and hashes: 1: DykT4xUxAZpDKBkGVbRd2WvdLJ4.crl (hash: hwd+XukUnPm8KySsU805sRCrwbbtUIqvL9ddnbIJWX0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/0d2ca3-0234-4dbf-8190-12d28d7d4223/1/DykT4xUxAZpDKBkGVbRd2WvdLJ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/0d2ca3-0234-4dbf-8190-12d28d7d4223/1/DykT4xUxAZpDKBkGVbRd2WvdLJ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/DykT4xUxAZpDKBkGVbRd2WvdLJ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:7c:23:33:19:33:8e:1e:1e:88:79:d5:30:a3:6a:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f2913e31531019a4328190655b45dd96bdd2c9e
Validity
Not Before: Jun 8 03:01:10 2025 GMT
Not After : Jun 9 03:01:10 2025 GMT
Subject: CN=64343ac0dd4a4359eee6bfefc814ef6da5be72fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:6a:c6:20:a4:af:ec:12:c7:b8:33:fa:a4:b5:
37:57:af:41:c3:49:ba:55:bb:d2:30:b3:bd:f1:b2:
22:d6:da:f1:d7:c8:d4:0c:69:64:52:d3:06:21:55:
8a:4e:11:4f:30:8b:e5:62:67:ad:27:22:2b:d5:15:
40:8e:c3:44:3c:c3:32:66:25:36:58:e9:53:67:7c:
b9:b8:25:27:05:de:ba:3c:5f:97:a1:7d:a3:be:cb:
68:4a:bf:68:21:ed:a6:37:2d:3a:69:84:68:e8:d5:
06:7c:4d:a1:da:f1:2e:db:b1:3a:37:bd:65:e5:46:
a6:79:99:31:02:dc:12:ba:78:0f:12:0c:61:ab:71:
63:a3:02:d2:9b:3c:36:db:21:5a:84:68:82:8b:9a:
8a:c6:07:a2:74:93:1b:fa:3c:ea:14:b1:19:33:11:
8a:08:35:05:cb:fb:15:6b:29:9a:41:07:12:37:b3:
53:c4:43:4d:e5:15:2d:ca:1b:3a:34:4d:a4:2e:bd:
55:ce:25:2b:ba:13:15:bd:b1:00:69:ba:68:ac:a9:
a3:ea:b3:36:d2:1f:aa:41:94:b7:2b:57:72:e0:57:
de:46:71:9b:61:d4:f0:d9:6e:b8:51:42:a6:05:34:
41:ac:8b:4b:49:81:17:70:62:4f:63:01:7b:05:10:
8f:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:34:3A:C0:DD:4A:43:59:EE:E6:BF:EF:C8:14:EF:6D:A5:BE:72:FC
X509v3 Authority Key Identifier:
keyid:0F:29:13:E3:15:31:01:9A:43:28:19:06:55:B4:5D:D9:6B:DD:2C:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DykT4xUxAZpDKBkGVbRd2WvdLJ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/0d2ca3-0234-4dbf-8190-12d28d7d4223/1/DykT4xUxAZpDKBkGVbRd2WvdLJ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/0d2ca3-0234-4dbf-8190-12d28d7d4223/1/DykT4xUxAZpDKBkGVbRd2WvdLJ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:65:85:31:ee:03:ab:7f:c9:bb:fe:fa:35:fa:1e:14:12:fc:
a1:52:60:b5:ae:3b:11:c8:3d:d8:aa:68:ab:ee:2f:22:d2:66:
02:e6:69:63:d0:71:8c:85:65:44:81:90:aa:82:45:47:9e:82:
b0:38:d5:3a:1e:4d:86:5c:0e:81:61:ba:82:a4:a4:49:a3:5b:
5c:88:59:90:70:e3:72:6e:b2:98:ec:15:08:51:04:09:bc:cf:
75:de:dd:8e:e8:dd:16:c0:6a:c8:38:93:e0:6e:62:ad:21:03:
88:07:6b:d4:02:d0:8d:c5:bd:c4:7e:8f:bd:e2:5a:f4:ed:26:
1c:80:33:72:51:f6:e9:0d:f8:76:02:e8:30:c6:c1:2c:8b:31:
3c:b4:4c:c5:51:d3:5d:6a:df:5e:76:f2:29:24:ed:fe:04:f8:
97:a0:47:6d:1e:1c:c3:e2:0a:f0:17:4e:4a:bf:41:11:53:1c:
cb:92:64:32:da:bb:d1:e8:48:50:be:86:14:ab:97:3b:6f:f2:
9d:60:04:7e:99:00:a1:b5:66:9b:a9:4c:c6:8d:a3:b8:bb:77:
98:2a:6d:f3:4c:bf:b9:62:24:c5:15:1c:42:22:59:c0:b1:52:
f8:ef:a0:cc:06:8a:db:9c:f9:d4:50:17:9a:29:43:ed:d7:9f:
50:19:4a:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:20:40 2025 by rpki-client