Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/8978cb-1a27-4f24-b552-336293734507/1/dPZ1oWeYFnk9WzCtLyU_VsjiRFw.mft
File: dPZ1oWeYFnk9WzCtLyU_VsjiRFw.mft (raw, json)
Hash identifier: XammLLtnILxslJZgvd1kui7J6ZIaHRmS1tYIhbrGVXM=
Subject key identifier: A1:4D:7D:07:A4:FC:29:66:E8:5D:51:3D:C2:21:05:E3:5E:2A:07:AA
Authority key identifier: 74:F6:75:A1:67:98:16:79:3D:5B:30:AD:2F:25:3F:56:C8:E2:44:5C
Certificate issuer: /CN=74f675a1679816793d5b30ad2f253f56c8e2445c
Certificate serial: 019762F0CB20EE64E0CE45A0E04E0093094C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dPZ1oWeYFnk9WzCtLyU_VsjiRFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/8978cb-1a27-4f24-b552-336293734507/1/dPZ1oWeYFnk9WzCtLyU_VsjiRFw.mft
Manifest number: 1585
Signing time: Thu 12 Jun 2025 07:00:37 +0000
Manifest this update: Thu 12 Jun 2025 07:00:37 +0000
Manifest next update: Fri 13 Jun 2025 07:00:37 +0000
Files and hashes: 1: dPZ1oWeYFnk9WzCtLyU_VsjiRFw.crl (hash: /y8j19J/k3PuZ3L178IQyOGS/rMtUuaW0KHUJCbWuEs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/8978cb-1a27-4f24-b552-336293734507/1/dPZ1oWeYFnk9WzCtLyU_VsjiRFw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/8978cb-1a27-4f24-b552-336293734507/1/dPZ1oWeYFnk9WzCtLyU_VsjiRFw.mft
rsync://rpki.ripe.net/repository/DEFAULT/dPZ1oWeYFnk9WzCtLyU_VsjiRFw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:62:f0:cb:20:ee:64:e0:ce:45:a0:e0:4e:00:93:09:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74f675a1679816793d5b30ad2f253f56c8e2445c
Validity
Not Before: Jun 12 07:00:37 2025 GMT
Not After : Jun 13 07:00:37 2025 GMT
Subject: CN=a14d7d07a4fc2966e85d513dc22105e35e2a07aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:ae:0c:07:3f:e6:d5:4d:97:95:4a:02:5b:4b:
b6:72:b0:ef:fc:dd:92:0e:7b:e9:3a:a0:8a:3a:54:
6f:83:0c:80:00:45:22:2b:7d:8d:e1:4e:9d:19:53:
25:30:43:7d:5e:2e:17:bd:8d:86:e7:3a:1b:64:8a:
99:bb:96:67:1b:f3:93:89:02:b3:94:29:6b:2f:70:
fb:4a:1c:77:cd:22:72:9b:7e:85:b1:02:f4:02:35:
f9:ba:f3:a1:e3:ee:37:53:08:f9:9f:a0:d9:8b:88:
35:99:ef:67:44:81:5d:eb:3c:b7:74:03:04:5b:ab:
b5:69:d3:64:10:47:f2:38:55:51:a3:f7:76:6f:75:
0f:e1:1c:1a:01:9c:9b:be:3e:0f:0a:e5:ef:12:30:
3c:d9:06:5b:5e:ae:bf:ea:7b:65:25:5c:4a:12:e3:
06:f0:d9:0e:5c:37:34:a5:44:6b:24:1b:13:14:9d:
8a:f3:c3:2d:56:a6:02:8f:70:74:5c:80:ea:a3:51:
19:b4:57:ad:7e:83:9d:62:19:d1:3c:e0:cb:90:a5:
05:88:f2:29:1b:b0:ad:e9:86:41:e6:ee:79:30:39:
8a:42:d0:c7:04:a6:cd:89:a2:78:e9:0f:39:70:b1:
0d:ab:73:56:40:73:ea:13:c6:73:d7:43:67:7b:89:
31:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:4D:7D:07:A4:FC:29:66:E8:5D:51:3D:C2:21:05:E3:5E:2A:07:AA
X509v3 Authority Key Identifier:
keyid:74:F6:75:A1:67:98:16:79:3D:5B:30:AD:2F:25:3F:56:C8:E2:44:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dPZ1oWeYFnk9WzCtLyU_VsjiRFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8978cb-1a27-4f24-b552-336293734507/1/dPZ1oWeYFnk9WzCtLyU_VsjiRFw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8978cb-1a27-4f24-b552-336293734507/1/dPZ1oWeYFnk9WzCtLyU_VsjiRFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:85:1c:2a:a8:16:b4:6f:24:77:88:e2:76:23:e2:31:b9:9b:
3d:f6:80:c1:fb:b6:d7:ad:b5:4e:80:1f:dd:1a:eb:28:f5:45:
01:65:8a:ed:ce:b4:2d:e0:95:a9:6a:f1:f9:ea:53:db:b1:48:
6e:32:1e:15:b5:8c:dd:cf:eb:db:b8:e2:9c:78:de:1a:4b:c5:
20:9c:24:29:73:2f:44:04:19:33:60:7d:bc:91:ad:21:d4:f3:
ab:de:70:0b:e5:8d:a2:b3:3f:3b:95:17:fc:92:b5:33:90:f1:
77:84:c4:d4:cf:bf:ce:6b:10:41:68:4e:85:d6:57:39:17:fe:
45:6f:f7:df:e3:cd:17:63:e0:d6:88:e8:e4:50:f1:eb:dd:5c:
9a:1b:66:6a:41:64:f1:b4:da:41:a7:b2:8a:85:58:a4:bc:51:
b3:0f:7f:ba:bd:eb:d7:27:75:1a:20:9c:1c:e2:09:60:8c:50:
44:49:5a:48:c3:ce:b1:32:cf:94:c6:80:06:4a:44:d7:9e:f5:
b9:00:31:60:8a:ca:09:27:a5:be:cb:77:05:75:4e:1b:aa:87:
50:ee:58:71:dd:17:02:48:6b:b8:4b:c6:11:0e:28:ab:65:42:
8f:7e:cb:66:5a:5d:e3:fb:a4:0b:f4:53:96:02:0a:b8:23:d3:
c6:6d:d6:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 10:09:46 2025 by rpki-client