Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/8978cb-1a27-4f24-b552-336293734507/1/dPZ1oWeYFnk9WzCtLyU_VsjiRFw.mft
File: dPZ1oWeYFnk9WzCtLyU_VsjiRFw.mft (raw, json)
Hash identifier: FEeKIq6kB3OHZDLtWIadlnlwitsUE0B++1u96uEhBsI=
Subject key identifier: 40:1B:58:60:BD:82:B5:37:4E:D3:C7:65:B3:5B:51:89:E6:F7:F9:7B
Authority key identifier: 74:F6:75:A1:67:98:16:79:3D:5B:30:AD:2F:25:3F:56:C8:E2:44:5C
Certificate issuer: /CN=74f675a1679816793d5b30ad2f253f56c8e2445c
Certificate serial: 01975948C7D498369BC0078570C4DD022EF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dPZ1oWeYFnk9WzCtLyU_VsjiRFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/8978cb-1a27-4f24-b552-336293734507/1/dPZ1oWeYFnk9WzCtLyU_VsjiRFw.mft
Manifest number: 1580
Signing time: Tue 10 Jun 2025 10:00:31 +0000
Manifest this update: Tue 10 Jun 2025 10:00:31 +0000
Manifest next update: Wed 11 Jun 2025 10:00:31 +0000
Files and hashes: 1: dPZ1oWeYFnk9WzCtLyU_VsjiRFw.crl (hash: vTab1xy7AWoHAVeSRcyyJmQi12gL/LYEGpN01M89Iac=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/8978cb-1a27-4f24-b552-336293734507/1/dPZ1oWeYFnk9WzCtLyU_VsjiRFw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/8978cb-1a27-4f24-b552-336293734507/1/dPZ1oWeYFnk9WzCtLyU_VsjiRFw.mft
rsync://rpki.ripe.net/repository/DEFAULT/dPZ1oWeYFnk9WzCtLyU_VsjiRFw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 10:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:59:48:c7:d4:98:36:9b:c0:07:85:70:c4:dd:02:2e:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74f675a1679816793d5b30ad2f253f56c8e2445c
Validity
Not Before: Jun 10 10:00:31 2025 GMT
Not After : Jun 11 10:00:31 2025 GMT
Subject: CN=401b5860bd82b5374ed3c765b35b5189e6f7f97b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:77:b8:d2:73:50:01:18:75:9f:3b:46:e6:9b:
b3:9f:d5:10:62:b7:6f:bd:7a:b1:8e:7c:3f:01:9d:
c3:9d:bd:e7:54:fd:98:62:3b:1c:4b:29:1f:13:7a:
2b:51:4e:b1:e9:e6:94:b2:60:d7:6f:84:d6:19:71:
43:00:9f:55:19:42:a1:2a:4a:60:27:9a:8d:5b:ea:
64:ae:83:d1:88:b7:46:66:39:d7:83:3e:80:70:39:
8d:0d:52:de:89:db:57:79:4d:2d:be:cf:11:f1:0e:
ca:56:d7:4b:5f:ea:26:a4:ae:cd:f8:4c:36:f9:b9:
98:24:0c:2c:a4:70:68:b0:3b:f3:c6:33:ef:1d:2a:
85:b6:a9:8e:cc:d1:25:d2:5d:c4:a1:99:8d:df:ec:
ea:f8:3c:9f:3a:25:e2:af:01:38:4d:f0:7a:60:69:
ae:ff:bb:63:6b:2e:72:13:46:95:c1:c8:35:5a:85:
5c:25:07:05:3d:c6:50:34:9e:ca:20:ea:0c:8b:d7:
17:3c:41:36:35:6a:db:a6:69:db:6b:3a:e2:bb:70:
87:e7:41:8e:02:1f:0b:c8:d0:16:8b:2e:bb:d3:94:
0a:37:30:9f:a1:f3:17:13:17:3f:5e:1a:77:43:5a:
61:f8:92:00:de:05:6f:be:6d:0b:e8:02:64:d0:84:
69:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:1B:58:60:BD:82:B5:37:4E:D3:C7:65:B3:5B:51:89:E6:F7:F9:7B
X509v3 Authority Key Identifier:
keyid:74:F6:75:A1:67:98:16:79:3D:5B:30:AD:2F:25:3F:56:C8:E2:44:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dPZ1oWeYFnk9WzCtLyU_VsjiRFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8978cb-1a27-4f24-b552-336293734507/1/dPZ1oWeYFnk9WzCtLyU_VsjiRFw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8978cb-1a27-4f24-b552-336293734507/1/dPZ1oWeYFnk9WzCtLyU_VsjiRFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:12:e2:6b:2f:97:f4:1f:52:a0:6a:0a:6d:17:af:82:18:93:
63:41:0c:e1:77:d9:5f:e5:f2:ca:8d:3c:7c:b9:d0:83:ea:60:
66:45:c2:b8:0b:ef:ff:8c:1d:67:88:ad:80:a1:8c:17:bc:43:
a0:e3:87:70:d7:bc:f3:03:e6:df:06:bf:8e:10:07:6e:97:aa:
a1:de:f6:fc:ee:01:ed:43:2f:dc:f0:64:7d:c2:e0:62:5b:fe:
06:db:8e:c1:51:91:ee:5e:43:63:51:73:65:d5:1b:b8:c4:3c:
b6:6d:cf:0a:cb:be:54:71:00:45:95:26:c1:6b:6e:f0:ab:cc:
44:b3:29:0f:30:3a:e4:40:47:9e:31:b0:f1:48:f9:27:4a:14:
24:dd:e3:f2:b9:7e:f2:28:cb:29:52:8e:2a:66:d0:c5:38:ad:
19:87:03:5f:b6:a5:34:71:85:82:81:7e:98:5f:63:b3:63:05:
86:b1:59:ec:b3:9a:be:6e:ea:9c:ff:56:34:c1:99:cc:4d:7a:
2a:13:f5:22:84:5d:a6:50:cc:ed:e2:96:eb:f4:72:35:d6:00:
6f:8d:71:f4:c2:78:46:50:86:77:99:4f:c9:a5:db:86:b2:03:
b2:41:48:f4:b3:bc:2b:d2:e1:22:05:0b:00:71:e1:c3:de:8a:
d3:52:05:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 16:38:42 2025 by rpki-client