Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/8978cb-1a27-4f24-b552-336293734507/1/dPZ1oWeYFnk9WzCtLyU_VsjiRFw.mft
File: dPZ1oWeYFnk9WzCtLyU_VsjiRFw.mft (raw, json)
Hash identifier: EYuEAVGmfIZAWBUas8PBmXVEX3FwS7/BZRYKjGdzMJc=
Subject key identifier: B0:19:C3:72:44:2B:BE:F9:54:5E:C5:92:0D:D4:56:84:D8:64:F9:F3
Authority key identifier: 74:F6:75:A1:67:98:16:79:3D:5B:30:AD:2F:25:3F:56:C8:E2:44:5C
Certificate issuer: /CN=74f675a1679816793d5b30ad2f253f56c8e2445c
Certificate serial: 0197610272DC17BBDB09D7C3BF519FBA00EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dPZ1oWeYFnk9WzCtLyU_VsjiRFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/8978cb-1a27-4f24-b552-336293734507/1/dPZ1oWeYFnk9WzCtLyU_VsjiRFw.mft
Manifest number: 1584
Signing time: Wed 11 Jun 2025 22:00:39 +0000
Manifest this update: Wed 11 Jun 2025 22:00:39 +0000
Manifest next update: Thu 12 Jun 2025 22:00:39 +0000
Files and hashes: 1: dPZ1oWeYFnk9WzCtLyU_VsjiRFw.crl (hash: rh3HeHY8YVDOrgYktnaF6XHEWho/jbNIFM+bm+nZgpE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/8978cb-1a27-4f24-b552-336293734507/1/dPZ1oWeYFnk9WzCtLyU_VsjiRFw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/8978cb-1a27-4f24-b552-336293734507/1/dPZ1oWeYFnk9WzCtLyU_VsjiRFw.mft
rsync://rpki.ripe.net/repository/DEFAULT/dPZ1oWeYFnk9WzCtLyU_VsjiRFw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 22:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:61:02:72:dc:17:bb:db:09:d7:c3:bf:51:9f:ba:00:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74f675a1679816793d5b30ad2f253f56c8e2445c
Validity
Not Before: Jun 11 22:00:39 2025 GMT
Not After : Jun 12 22:00:39 2025 GMT
Subject: CN=b019c372442bbef9545ec5920dd45684d864f9f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a1:c7:60:59:f7:0d:48:0d:ce:bb:a5:db:f8:
20:21:b8:e6:54:fe:53:b6:08:99:1e:a9:5c:e2:02:
0b:cb:ec:3e:0a:86:34:68:05:82:66:88:94:64:1b:
1f:68:d2:16:87:e5:c0:1d:b9:15:44:b2:8d:c1:cb:
2d:45:da:20:f5:0a:49:09:80:0a:d6:63:ba:1d:d8:
78:59:03:bd:a8:9b:e6:a1:35:e2:b4:d3:2d:7f:67:
35:18:29:00:5e:70:a9:9f:cd:8b:38:89:fc:0a:67:
a3:1b:e9:99:04:67:f0:c9:f3:54:6b:d5:c6:30:b2:
c4:9a:f3:06:23:74:b8:c5:6c:e1:cc:4a:c5:2f:4a:
f3:99:20:68:4b:32:e5:f7:43:3a:02:13:dc:be:63:
a3:2d:af:f5:0f:1a:bd:89:9a:84:b4:a9:0c:ff:c4:
f9:ba:d1:e2:70:c9:0c:de:bf:49:3a:2e:3a:ab:b1:
ae:fb:19:7b:00:e2:f2:9c:2b:a6:b4:15:5e:35:72:
ef:4d:7f:0c:ae:fd:95:8b:20:f3:6b:dd:25:d9:ba:
df:6f:f0:81:2d:70:fc:f4:82:7a:68:8b:eb:b8:1d:
5a:bb:e3:d5:60:48:0f:a9:04:d1:81:ff:76:15:8b:
0b:b1:de:96:78:72:f2:6b:5e:5f:75:70:e1:40:b8:
f4:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:19:C3:72:44:2B:BE:F9:54:5E:C5:92:0D:D4:56:84:D8:64:F9:F3
X509v3 Authority Key Identifier:
keyid:74:F6:75:A1:67:98:16:79:3D:5B:30:AD:2F:25:3F:56:C8:E2:44:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dPZ1oWeYFnk9WzCtLyU_VsjiRFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8978cb-1a27-4f24-b552-336293734507/1/dPZ1oWeYFnk9WzCtLyU_VsjiRFw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8978cb-1a27-4f24-b552-336293734507/1/dPZ1oWeYFnk9WzCtLyU_VsjiRFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:1f:ce:1e:02:3a:e2:95:ce:c3:cb:4e:89:4a:8b:d7:e6:54:
1a:9b:10:b5:1e:75:57:ea:08:6b:28:36:5a:7c:c5:ba:10:c6:
1d:b5:0a:77:c6:4e:75:0f:25:54:9c:33:08:5f:47:d1:5d:a0:
21:03:94:8f:a4:12:0d:c9:31:80:32:5b:08:f2:54:49:c9:f6:
a5:68:ae:71:90:a4:4b:11:f0:6b:6b:b6:ae:95:5c:97:0d:20:
04:f9:47:21:5d:14:ce:e0:68:cc:5b:14:e0:86:c7:16:bc:e2:
a5:b6:95:31:2f:55:01:30:7e:0b:d9:42:95:7e:a9:38:49:27:
dc:4e:bf:1f:77:9f:06:3f:95:0b:e9:a8:e1:f7:0f:00:fc:5e:
47:07:fa:06:64:87:36:7b:0a:a5:92:b8:4b:f5:41:63:a9:5c:
e2:0e:bb:30:37:dd:f6:bc:06:ea:9c:4c:d7:48:78:b9:29:2b:
b1:80:05:6a:25:27:bb:03:dd:04:b9:a8:ce:77:0b:38:b2:18:
b4:c5:4b:8b:cc:db:02:65:c4:54:d5:91:5f:c2:5d:6f:dc:b6:
54:1c:54:d8:b2:9f:f2:43:bd:24:2d:be:dd:39:d5:1e:04:1d:
37:70:cb:99:8b:c0:ce:08:5f:1e:c0:f5:bc:80:65:07:ee:24:
29:bf:3b:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 08:01:35 2025 by rpki-client