Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/9a6bc2-8e5f-4a6d-b206-27cb9dcd60fc/1/Dh-3D5C6LPBYwSBt6w73lzcCbpA.mft
File: Dh-3D5C6LPBYwSBt6w73lzcCbpA.mft (raw, json)
Hash identifier: uTy07Xex1XUT1nmHJybZ//6o0iSZNNFwI+LIhPyzbYE=
Subject key identifier: 33:FD:94:54:76:2B:F5:0D:D6:00:6C:4A:8D:A0:9C:1C:D6:46:AE:63
Authority key identifier: 0E:1F:B7:0F:90:BA:2C:F0:58:C1:20:6D:EB:0E:F7:97:37:02:6E:90
Certificate issuer: /CN=0e1fb70f90ba2cf058c1206deb0ef79737026e90
Certificate serial: 01974F33339F3C714741A70CCC6264A9579E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dh-3D5C6LPBYwSBt6w73lzcCbpA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/9a6bc2-8e5f-4a6d-b206-27cb9dcd60fc/1/Dh-3D5C6LPBYwSBt6w73lzcCbpA.mft
Manifest number: 0664
Signing time: Sun 08 Jun 2025 11:00:44 +0000
Manifest this update: Sun 08 Jun 2025 11:00:44 +0000
Manifest next update: Mon 09 Jun 2025 11:00:44 +0000
Files and hashes: 1: Dh-3D5C6LPBYwSBt6w73lzcCbpA.crl (hash: p4qvQS52GL2IV1SFqeoOaRlrhRqK76HRsK/FFRvLGEU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/9a6bc2-8e5f-4a6d-b206-27cb9dcd60fc/1/Dh-3D5C6LPBYwSBt6w73lzcCbpA.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/9a6bc2-8e5f-4a6d-b206-27cb9dcd60fc/1/Dh-3D5C6LPBYwSBt6w73lzcCbpA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dh-3D5C6LPBYwSBt6w73lzcCbpA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 11:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4f:33:33:9f:3c:71:47:41:a7:0c:cc:62:64:a9:57:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e1fb70f90ba2cf058c1206deb0ef79737026e90
Validity
Not Before: Jun 8 11:00:44 2025 GMT
Not After : Jun 9 11:00:44 2025 GMT
Subject: CN=33fd9454762bf50dd6006c4a8da09c1cd646ae63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:11:d8:c8:77:a3:39:07:10:03:c6:d4:b5:d7:
e4:4b:c7:80:97:84:c0:0e:27:0f:f0:bb:8b:bb:7b:
76:77:b0:8f:52:08:fb:58:a8:36:5a:a3:b6:1e:2c:
3f:44:23:c7:c7:32:38:17:1a:d0:d2:ff:1e:6e:bb:
5c:78:48:bd:41:f7:d7:de:d3:47:d7:ff:dc:d4:b0:
2e:ae:df:9e:6b:f0:af:21:26:35:76:ba:27:68:67:
fe:80:f5:e0:1d:43:09:5d:f3:81:89:8f:e4:9a:2c:
d4:f3:51:a1:82:d5:0c:26:ce:16:21:cf:a6:80:2b:
25:ef:8c:48:03:f5:5b:76:97:cd:da:a1:55:bc:f2:
4d:57:21:76:7a:79:4d:d8:be:3e:ba:86:7c:eb:c8:
9e:ef:04:c2:c8:bb:54:3d:55:9c:de:aa:85:27:41:
46:05:e6:19:30:f1:81:ea:a0:31:e9:17:db:3a:ff:
05:09:c3:01:39:27:33:3d:b3:a7:5a:4f:cc:e0:89:
32:15:a8:bb:82:dc:71:5b:9b:90:84:04:2f:ba:97:
6d:b2:dc:5b:5c:8c:b7:9a:91:dc:8a:e3:1e:d4:3f:
49:ed:52:d1:be:ae:2d:96:31:ab:0c:4b:d3:8e:3b:
bc:e2:c9:61:50:6d:fe:e1:07:b4:6e:c4:95:d9:f0:
da:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:FD:94:54:76:2B:F5:0D:D6:00:6C:4A:8D:A0:9C:1C:D6:46:AE:63
X509v3 Authority Key Identifier:
keyid:0E:1F:B7:0F:90:BA:2C:F0:58:C1:20:6D:EB:0E:F7:97:37:02:6E:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dh-3D5C6LPBYwSBt6w73lzcCbpA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/9a6bc2-8e5f-4a6d-b206-27cb9dcd60fc/1/Dh-3D5C6LPBYwSBt6w73lzcCbpA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/9a6bc2-8e5f-4a6d-b206-27cb9dcd60fc/1/Dh-3D5C6LPBYwSBt6w73lzcCbpA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:85:8c:95:aa:df:f5:e8:7d:22:c6:fe:f7:37:63:a1:0f:2d:
d5:c9:b7:9b:28:fc:45:2e:ea:e0:b7:fb:5c:00:c6:71:1b:21:
f8:69:af:d8:f6:6b:0f:7d:d9:6c:1a:ee:6f:20:2d:7c:b0:3d:
1f:13:69:59:b7:5e:21:8d:52:f4:a7:33:ad:08:9f:8b:6f:60:
b7:46:76:e0:71:3c:f7:a5:20:3d:18:6a:27:9c:57:70:00:3e:
2d:67:3d:8a:bf:74:ec:5b:09:0e:6e:23:e8:e9:98:43:45:4c:
3b:9e:97:d5:31:e8:a8:b7:cd:21:7d:39:fe:09:30:9c:47:4f:
a6:df:a4:56:ac:56:7d:b0:16:2c:29:a9:9c:c0:29:ef:0d:e3:
ff:fa:bb:1b:7d:e4:64:9e:ba:2a:54:fa:99:67:b2:f5:11:52:
e4:4c:6f:0e:08:f1:a8:63:17:cd:02:ac:1f:e4:e9:7d:98:15:
28:17:28:c8:7b:c6:41:b5:83:10:c3:49:40:cc:ad:64:77:69:
84:db:2f:cd:36:2d:bb:8f:d7:89:b6:84:9c:98:e6:7e:e4:2f:
ba:0d:ab:90:a7:75:d0:ad:39:5f:21:e2:12:32:6c:b6:ef:58:
94:0d:a9:00:54:19:59:1a:56:40:d6:ef:da:7a:b8:42:fd:a8:
5c:c4:2e:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 18:51:41 2025 by rpki-client