Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/8978cb-1a27-4f24-b552-336293734507/1/dPZ1oWeYFnk9WzCtLyU_VsjiRFw.mft
File: dPZ1oWeYFnk9WzCtLyU_VsjiRFw.mft (raw, json)
Hash identifier: 25mIMig8TEIt3yQzJAbNItvkgVxcwKc0YJewamT9xck=
Subject key identifier: 5E:A3:2D:2B:26:38:61:39:12:D7:40:36:D3:BA:97:69:D6:97:D2:6F
Authority key identifier: 74:F6:75:A1:67:98:16:79:3D:5B:30:AD:2F:25:3F:56:C8:E2:44:5C
Certificate issuer: /CN=74f675a1679816793d5b30ad2f253f56c8e2445c
Certificate serial: 01976C988F89CCD01D1D2737F18907EEFA9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dPZ1oWeYFnk9WzCtLyU_VsjiRFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/8978cb-1a27-4f24-b552-336293734507/1/dPZ1oWeYFnk9WzCtLyU_VsjiRFw.mft
Manifest number: 158A
Signing time: Sat 14 Jun 2025 04:00:26 +0000
Manifest this update: Sat 14 Jun 2025 04:00:26 +0000
Manifest next update: Sun 15 Jun 2025 04:00:26 +0000
Files and hashes: 1: dPZ1oWeYFnk9WzCtLyU_VsjiRFw.crl (hash: 7irciuYBQzb7LBVqAd7QblxPd9bTf2ka97fgk91T1jw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/8978cb-1a27-4f24-b552-336293734507/1/dPZ1oWeYFnk9WzCtLyU_VsjiRFw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/8978cb-1a27-4f24-b552-336293734507/1/dPZ1oWeYFnk9WzCtLyU_VsjiRFw.mft
rsync://rpki.ripe.net/repository/DEFAULT/dPZ1oWeYFnk9WzCtLyU_VsjiRFw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:98:8f:89:cc:d0:1d:1d:27:37:f1:89:07:ee:fa:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74f675a1679816793d5b30ad2f253f56c8e2445c
Validity
Not Before: Jun 14 04:00:26 2025 GMT
Not After : Jun 15 04:00:26 2025 GMT
Subject: CN=5ea32d2b2638613912d74036d3ba9769d697d26f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:4f:50:4d:98:e5:86:5c:a0:77:2e:5c:90:5a:
ed:bb:92:7a:b1:4a:11:29:f2:0f:65:50:e7:15:c8:
08:a3:22:30:48:62:36:6c:84:d8:41:d6:9a:30:bc:
19:6a:17:fb:22:7a:00:53:13:03:8a:86:12:f8:88:
e9:dc:90:cc:3f:86:85:dc:bf:80:33:fb:67:1b:52:
d1:0f:d7:69:a4:b2:a5:f2:78:2a:77:db:62:dd:38:
49:f8:32:03:1b:09:cd:98:bf:46:62:f7:ad:9c:97:
66:ae:7b:e7:76:2c:88:c9:a6:41:cd:46:28:2d:4c:
5c:4f:ae:ab:d1:b6:01:41:bf:8d:92:c2:7d:85:06:
e4:18:8c:be:04:b1:38:b7:3f:9f:83:46:25:d4:88:
c9:10:82:9d:6f:e9:b4:14:36:59:87:a8:b1:d4:30:
38:4e:d9:96:d5:e2:82:61:eb:08:ba:89:52:e9:e5:
fb:ff:aa:5d:1e:fe:c4:7f:1b:fc:93:66:3e:33:70:
ba:19:86:03:c0:34:d1:d6:79:4b:37:02:64:32:5b:
12:30:9c:3e:7d:34:1a:81:38:27:1c:65:dc:6f:7a:
e3:3a:89:97:ba:93:9d:4b:f4:01:41:a7:ff:f5:1a:
6f:71:a6:fa:b4:d5:f0:51:7b:07:1f:d7:5a:54:9b:
fe:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:A3:2D:2B:26:38:61:39:12:D7:40:36:D3:BA:97:69:D6:97:D2:6F
X509v3 Authority Key Identifier:
keyid:74:F6:75:A1:67:98:16:79:3D:5B:30:AD:2F:25:3F:56:C8:E2:44:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dPZ1oWeYFnk9WzCtLyU_VsjiRFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8978cb-1a27-4f24-b552-336293734507/1/dPZ1oWeYFnk9WzCtLyU_VsjiRFw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8978cb-1a27-4f24-b552-336293734507/1/dPZ1oWeYFnk9WzCtLyU_VsjiRFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:67:2b:9c:60:6d:53:a7:24:99:d0:10:41:60:cf:c4:a2:35:
71:5c:be:5e:15:dd:e7:0e:43:b6:4c:48:48:ad:ca:17:69:64:
1f:cf:18:24:71:aa:a4:79:e2:25:ea:1e:ad:e1:97:2e:11:3e:
cc:9d:a1:24:4a:be:31:09:70:fd:42:01:82:ec:a3:ff:c4:69:
7b:10:50:df:d8:21:f6:83:df:0a:d4:bf:89:ef:bb:2d:5a:d1:
95:b8:5b:81:0e:6c:2c:93:15:a5:b4:da:a6:e5:4e:62:9a:32:
df:37:6d:a8:3d:26:2a:b4:a9:cd:52:09:29:fb:63:6b:58:ac:
93:24:a5:f0:2e:42:f6:ec:59:f1:a5:39:3c:c8:1b:ee:e5:f1:
f4:09:13:8c:c1:ec:f7:0c:aa:a6:60:b4:c6:52:f8:7f:c4:00:
3a:26:5e:b4:38:04:9c:22:ba:9c:fb:8c:24:bf:45:86:e3:7d:
a2:6d:73:36:9e:6e:88:1b:eb:fe:8c:b8:13:83:d6:8d:f6:bd:
aa:ee:a1:0d:77:68:60:a7:4e:c9:09:d1:0c:bb:d5:22:a1:43:
c1:48:f9:19:98:49:5e:3e:a9:6d:5f:71:fb:69:f9:99:9e:5a:
72:13:29:3b:84:cf:c4:ae:8f:c8:3e:03:5b:a1:a1:21:a2:6f:
89:cc:46:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:05:46 2025 by rpki-client