Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/8978cb-1a27-4f24-b552-336293734507/1/dPZ1oWeYFnk9WzCtLyU_VsjiRFw.mft
File: dPZ1oWeYFnk9WzCtLyU_VsjiRFw.mft (raw, json)
Hash identifier: qHbkE0cF4Wlk8Pb1g2hjT+1qcd+XQZiO4QcmVGDDFHE=
Subject key identifier: 93:D5:E8:A5:40:C3:72:75:33:D3:2D:F9:E6:EB:AB:9B:99:5E:29:14
Authority key identifier: 74:F6:75:A1:67:98:16:79:3D:5B:30:AD:2F:25:3F:56:C8:E2:44:5C
Certificate issuer: /CN=74f675a1679816793d5b30ad2f253f56c8e2445c
Certificate serial: 019764DF3340E0E848A44C153351AF58A0A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dPZ1oWeYFnk9WzCtLyU_VsjiRFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/8978cb-1a27-4f24-b552-336293734507/1/dPZ1oWeYFnk9WzCtLyU_VsjiRFw.mft
Manifest number: 1586
Signing time: Thu 12 Jun 2025 16:00:38 +0000
Manifest this update: Thu 12 Jun 2025 16:00:38 +0000
Manifest next update: Fri 13 Jun 2025 16:00:38 +0000
Files and hashes: 1: dPZ1oWeYFnk9WzCtLyU_VsjiRFw.crl (hash: sdT3oPFEcBGkjMR8dujbq9Y9Sj44yjzEwYT6W9zawEg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/8978cb-1a27-4f24-b552-336293734507/1/dPZ1oWeYFnk9WzCtLyU_VsjiRFw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/8978cb-1a27-4f24-b552-336293734507/1/dPZ1oWeYFnk9WzCtLyU_VsjiRFw.mft
rsync://rpki.ripe.net/repository/DEFAULT/dPZ1oWeYFnk9WzCtLyU_VsjiRFw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:64:df:33:40:e0:e8:48:a4:4c:15:33:51:af:58:a0:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74f675a1679816793d5b30ad2f253f56c8e2445c
Validity
Not Before: Jun 12 16:00:38 2025 GMT
Not After : Jun 13 16:00:38 2025 GMT
Subject: CN=93d5e8a540c3727533d32df9e6ebab9b995e2914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:bf:1b:72:9d:11:14:c4:eb:91:4d:09:be:92:
f8:d6:30:0b:16:97:dc:a1:8b:01:11:19:a6:a8:ff:
13:bd:61:6b:b4:94:b7:4c:27:9d:48:30:52:c6:b1:
1b:ac:0d:06:d6:c3:a5:b6:d2:ed:93:fb:b2:20:ae:
db:fe:78:16:6a:6d:42:98:f9:c5:71:a1:53:c0:c6:
b6:71:22:31:38:54:f6:bd:eb:61:70:e8:1c:f4:b0:
b0:2b:36:2e:b8:94:e3:5a:8d:5d:f6:66:cc:d5:56:
5e:fd:4c:aa:0b:e1:38:20:b6:46:81:b9:e9:b0:96:
06:cf:56:b5:05:0e:56:9b:d8:70:8f:17:67:11:a7:
05:dd:a0:9d:b5:1d:cd:c2:ad:6c:15:00:08:16:19:
e6:af:42:64:f9:83:87:6c:1c:24:02:7b:41:1c:4f:
06:a2:55:29:20:c9:49:86:93:5d:3f:91:18:8c:ff:
65:d5:c2:95:1b:ed:1f:31:4d:d7:6b:67:d4:87:47:
34:ee:f9:2d:14:22:38:7d:df:8e:b8:bd:f4:77:ce:
46:1e:9a:26:86:c4:61:b0:e1:94:11:91:ce:ec:00:
11:3e:5f:49:c1:41:25:9f:95:7a:f7:96:3d:9e:3c:
ea:86:07:83:a2:5f:99:cf:31:c6:8f:4a:56:b3:ff:
35:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:D5:E8:A5:40:C3:72:75:33:D3:2D:F9:E6:EB:AB:9B:99:5E:29:14
X509v3 Authority Key Identifier:
keyid:74:F6:75:A1:67:98:16:79:3D:5B:30:AD:2F:25:3F:56:C8:E2:44:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dPZ1oWeYFnk9WzCtLyU_VsjiRFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8978cb-1a27-4f24-b552-336293734507/1/dPZ1oWeYFnk9WzCtLyU_VsjiRFw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8978cb-1a27-4f24-b552-336293734507/1/dPZ1oWeYFnk9WzCtLyU_VsjiRFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:63:dc:0c:03:6d:df:99:16:c1:3a:5f:ba:c7:73:e1:25:20:
2b:7f:e6:d1:89:91:db:35:4a:e7:39:04:e4:5b:21:9b:81:35:
6f:f6:aa:95:9d:91:8c:53:6d:4c:7f:c3:ce:96:48:10:20:cc:
31:2c:dc:06:15:d4:e2:08:03:38:09:fb:af:ae:2d:24:94:17:
2f:cd:4a:82:d1:3d:cd:df:b8:09:e6:c6:6a:39:64:e5:ba:3f:
a3:67:c6:9f:0d:b2:21:4e:e8:fe:5a:5f:c0:54:30:19:e7:11:
cf:90:c0:7c:f8:f0:a1:0a:d7:15:15:e4:6d:bc:07:3f:d3:85:
48:e1:f9:92:48:cd:c1:86:a8:32:50:10:a0:8c:b8:fc:ca:16:
61:2a:f1:51:83:ef:4b:e5:ab:db:b4:9d:ee:1d:61:aa:cd:ec:
4d:d6:48:33:e9:b8:be:ae:2c:7d:6a:2d:af:ca:77:55:80:77:
0e:b1:5a:eb:87:27:14:37:fe:20:42:b9:e9:df:c6:73:ea:17:
1d:79:04:5f:ca:70:27:97:c1:89:30:10:52:98:70:82:d0:48:
26:70:2a:a7:51:d4:73:c0:c6:f6:a6:0a:00:9a:2f:1d:73:20:
53:a2:ad:19:23:ef:6d:c2:15:cb:87:89:b2:b8:e1:01:69:32:
61:83:e2:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 23:55:53 2025 by rpki-client