Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/8978cb-1a27-4f24-b552-336293734507/1/dPZ1oWeYFnk9WzCtLyU_VsjiRFw.mft
File: dPZ1oWeYFnk9WzCtLyU_VsjiRFw.mft (raw, json)
Hash identifier: QTadbFqtm/D3UTlc48WDy7M+YkAQTOFk75/tRS/XSNY=
Subject key identifier: 9A:4C:54:58:92:52:23:C2:A3:8C:07:94:C0:A0:CA:EB:01:B0:BA:B3
Authority key identifier: 74:F6:75:A1:67:98:16:79:3D:5B:30:AD:2F:25:3F:56:C8:E2:44:5C
Certificate issuer: /CN=74f675a1679816793d5b30ad2f253f56c8e2445c
Certificate serial: 0197575A5A92CC4BB737031E265B13B816D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dPZ1oWeYFnk9WzCtLyU_VsjiRFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/8978cb-1a27-4f24-b552-336293734507/1/dPZ1oWeYFnk9WzCtLyU_VsjiRFw.mft
Manifest number: 157F
Signing time: Tue 10 Jun 2025 01:00:28 +0000
Manifest this update: Tue 10 Jun 2025 01:00:28 +0000
Manifest next update: Wed 11 Jun 2025 01:00:28 +0000
Files and hashes: 1: dPZ1oWeYFnk9WzCtLyU_VsjiRFw.crl (hash: toQiy7t4rNDfepyfB15wao0xP5i0T6/Ka1W+8JIhvuI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/8978cb-1a27-4f24-b552-336293734507/1/dPZ1oWeYFnk9WzCtLyU_VsjiRFw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/8978cb-1a27-4f24-b552-336293734507/1/dPZ1oWeYFnk9WzCtLyU_VsjiRFw.mft
rsync://rpki.ripe.net/repository/DEFAULT/dPZ1oWeYFnk9WzCtLyU_VsjiRFw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 01:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:57:5a:5a:92:cc:4b:b7:37:03:1e:26:5b:13:b8:16:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74f675a1679816793d5b30ad2f253f56c8e2445c
Validity
Not Before: Jun 10 01:00:28 2025 GMT
Not After : Jun 11 01:00:28 2025 GMT
Subject: CN=9a4c5458925223c2a38c0794c0a0caeb01b0bab3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:66:18:4f:50:f9:ab:1e:04:1d:2b:28:25:b0:
16:03:7a:fe:bd:bc:f1:b7:7d:57:65:0a:1d:e4:78:
a0:a1:65:1e:3e:8a:3f:39:8c:53:d2:3f:23:4e:d2:
1a:3d:fd:c3:f4:6b:64:c2:db:ab:b8:ea:a9:7b:bd:
aa:f5:37:87:5b:3a:0d:24:24:e5:0d:4c:6e:5a:9b:
8b:60:48:3a:f9:73:d2:27:28:84:5d:db:3c:62:27:
5a:5c:f3:6b:84:5d:4c:b1:44:2d:e8:30:c0:90:c1:
1d:eb:04:ea:0c:54:e4:43:19:01:e7:9f:b5:ae:86:
4a:b0:f3:39:8d:5b:c3:2c:1f:42:ae:af:b7:dc:d7:
18:4f:06:fa:dc:50:fe:6d:99:99:07:70:e9:68:93:
14:d4:73:d4:e9:58:dd:16:92:c1:07:04:00:0b:61:
ae:7a:25:11:2f:d0:9d:eb:4b:e1:f4:86:62:88:fb:
19:75:b6:7d:4d:5f:6b:ca:6a:f2:29:e4:de:6c:02:
63:60:e6:67:dc:02:e0:fb:fd:73:32:66:7a:66:a8:
88:cc:02:1e:fb:15:92:3d:61:d7:4f:c9:21:a6:0f:
4e:3f:8f:cf:68:c6:63:1b:f9:39:04:79:d1:d5:c6:
c6:cf:c2:98:b3:3a:e1:58:d4:e1:8e:c0:27:3f:d9:
53:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:4C:54:58:92:52:23:C2:A3:8C:07:94:C0:A0:CA:EB:01:B0:BA:B3
X509v3 Authority Key Identifier:
keyid:74:F6:75:A1:67:98:16:79:3D:5B:30:AD:2F:25:3F:56:C8:E2:44:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dPZ1oWeYFnk9WzCtLyU_VsjiRFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8978cb-1a27-4f24-b552-336293734507/1/dPZ1oWeYFnk9WzCtLyU_VsjiRFw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8978cb-1a27-4f24-b552-336293734507/1/dPZ1oWeYFnk9WzCtLyU_VsjiRFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:d7:95:e1:f1:a6:66:f3:ee:87:7b:a3:f5:a2:99:f3:90:ec:
5b:bb:d0:4b:2c:c9:82:41:cd:72:6a:73:22:48:41:e3:71:8e:
3e:5a:9c:1f:5e:19:d3:85:98:af:38:3b:4d:2f:1d:2d:41:9c:
f1:1c:b2:66:7a:dc:97:cb:38:f2:7e:15:7a:66:86:9d:ce:7f:
c9:87:e6:5b:a4:c0:10:95:bd:e6:a5:05:ef:68:3f:3f:13:9c:
98:fc:8f:0c:fd:08:c1:48:52:57:d5:cd:d2:83:fd:d8:3c:7c:
7f:8b:c6:7c:63:7f:41:34:10:94:5e:ad:f3:ad:cd:cc:f9:fa:
d9:d9:47:a0:97:3c:54:8f:69:ed:25:c7:17:6e:6b:3d:d0:69:
7f:76:2a:4c:44:a8:ad:56:cc:de:df:ba:13:b0:2c:c7:56:78:
fb:20:25:f0:f9:5e:64:60:d9:95:07:bb:2d:16:1b:10:5b:2e:
09:8d:b3:01:33:30:79:08:26:f6:17:5b:0d:60:46:d5:2c:27:
f4:db:27:0d:3b:c4:e2:3c:75:6f:d4:51:23:16:3a:a5:e7:e9:
eb:25:19:50:25:d9:2f:b9:0f:83:5c:eb:d3:1a:4e:2e:df:63:
93:77:eb:c7:17:f2:e5:dd:0a:40:cd:f3:c1:28:18:92:06:ff:
2b:82:76:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 12:40:30 2025 by rpki-client