Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/8203d9-7e3f-40ab-a6e0-085bc77bcc1c/1/danDqBE5lKqnp7EhGTd3kbIB8Gw.mft
File: danDqBE5lKqnp7EhGTd3kbIB8Gw.mft (raw, json)
Hash identifier: kD+2wraJSSxROR/IWhbPrvl3vRu9CjDe5mIVmBuLY0s=
Subject key identifier: 24:4D:64:D4:01:91:72:29:4D:28:FA:A3:73:19:B4:87:DE:6B:65:CB
Authority key identifier: 75:A9:C3:A8:11:39:94:AA:A7:A7:B1:21:19:37:77:91:B2:01:F0:6C
Certificate issuer: /CN=75a9c3a8113994aaa7a7b12119377791b201f06c
Certificate serial: 01974A43F176C3C00B9A809A9A9525898B52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/danDqBE5lKqnp7EhGTd3kbIB8Gw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/8203d9-7e3f-40ab-a6e0-085bc77bcc1c/1/danDqBE5lKqnp7EhGTd3kbIB8Gw.mft
Manifest number: 024E
Signing time: Sat 07 Jun 2025 12:00:56 +0000
Manifest this update: Sat 07 Jun 2025 12:00:56 +0000
Manifest next update: Sun 08 Jun 2025 12:00:56 +0000
Files and hashes: 1: danDqBE5lKqnp7EhGTd3kbIB8Gw.crl (hash: b7mDRDBPpXgDbalZzWSAjX8+bw5XzVhrtxnMAW6DFrE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/8203d9-7e3f-40ab-a6e0-085bc77bcc1c/1/danDqBE5lKqnp7EhGTd3kbIB8Gw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/8203d9-7e3f-40ab-a6e0-085bc77bcc1c/1/danDqBE5lKqnp7EhGTd3kbIB8Gw.mft
rsync://rpki.ripe.net/repository/DEFAULT/danDqBE5lKqnp7EhGTd3kbIB8Gw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:43:f1:76:c3:c0:0b:9a:80:9a:9a:95:25:89:8b:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75a9c3a8113994aaa7a7b12119377791b201f06c
Validity
Not Before: Jun 7 12:00:56 2025 GMT
Not After : Jun 8 12:00:56 2025 GMT
Subject: CN=244d64d4019172294d28faa37319b487de6b65cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:03:8f:cb:1e:78:b2:aa:08:41:7b:49:44:12:
57:a9:eb:69:07:53:ef:87:4e:b7:da:c6:ac:98:d6:
47:94:72:37:d1:a6:ad:30:e2:fb:bf:bc:b4:40:82:
10:92:40:3d:e9:4c:41:8e:54:1d:47:12:92:2d:8b:
91:1e:3e:47:9a:55:8d:8a:89:36:2a:ef:e0:6c:17:
54:e0:94:e6:df:6a:d4:0f:fc:f7:f4:87:16:5f:2a:
dd:94:68:18:76:d9:ee:86:76:90:c5:13:61:5c:50:
5b:6e:3d:d4:20:23:4f:a4:c0:a6:dc:91:77:8d:98:
fd:35:ca:4d:99:90:26:1c:15:14:94:bb:49:60:4f:
83:0f:08:c5:69:1d:0c:1e:69:db:8f:de:91:e5:3f:
76:42:8b:2d:df:ef:8f:8c:b2:2a:3f:eb:1e:ed:b5:
df:c6:cb:35:71:c6:5b:b5:b2:13:df:03:4a:8a:ef:
79:1a:98:4a:9e:64:de:ad:b7:11:35:74:ee:e1:d5:
33:e5:73:7f:b0:c6:31:f8:d5:f2:18:49:63:98:9e:
dc:65:4d:5e:61:09:f9:ef:38:9a:45:6d:f3:8b:23:
3d:0f:32:9b:40:76:73:eb:d9:90:7c:f8:2c:56:0d:
df:81:6f:1c:ef:28:27:c5:a0:65:fc:99:ef:8d:da:
d1:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:4D:64:D4:01:91:72:29:4D:28:FA:A3:73:19:B4:87:DE:6B:65:CB
X509v3 Authority Key Identifier:
keyid:75:A9:C3:A8:11:39:94:AA:A7:A7:B1:21:19:37:77:91:B2:01:F0:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/danDqBE5lKqnp7EhGTd3kbIB8Gw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/8203d9-7e3f-40ab-a6e0-085bc77bcc1c/1/danDqBE5lKqnp7EhGTd3kbIB8Gw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/8203d9-7e3f-40ab-a6e0-085bc77bcc1c/1/danDqBE5lKqnp7EhGTd3kbIB8Gw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:a8:ad:b3:a0:36:45:76:17:32:2e:3c:37:27:d7:72:b9:99:
a6:06:a0:6b:b1:56:75:82:20:01:02:d2:79:d6:e6:4e:32:58:
a5:c2:1c:b9:5f:cf:f3:c2:42:9d:bf:a9:8b:d4:50:b0:51:f4:
88:3c:1e:a8:c2:f2:48:0b:c1:1d:ac:cf:e0:18:23:d6:51:dd:
7b:39:de:f0:53:05:f7:81:3d:c7:ec:c9:ce:f7:51:e1:45:0e:
2a:63:2f:9a:65:8e:6e:7d:a4:3b:ad:7a:30:d1:ba:64:e9:84:
fa:d1:5d:1b:7a:9d:e1:83:1c:b2:1b:5a:4b:2b:9f:a3:d2:9c:
9f:13:cf:51:59:84:34:1b:49:f9:80:20:a4:a8:e6:a1:62:8c:
d0:87:0c:26:cf:83:ea:01:5e:28:4b:fd:a9:2e:6c:f1:93:6e:
4d:e2:6a:4b:34:67:ed:ac:68:b1:ca:f7:64:04:b3:79:68:95:
da:c8:51:e1:b9:1d:55:48:68:b4:15:ac:27:9f:f0:cd:19:3f:
0b:6c:ee:a9:10:43:35:5c:63:2f:34:a6:3f:5e:b1:81:e2:6b:
dc:06:1f:ba:fc:15:9d:95:21:22:99:fa:dc:89:1d:71:70:e0:
7b:85:3f:74:08:1c:91:c8:6d:6d:b3:6c:f0:ef:86:6c:eb:44:
e3:73:da:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:47:47 2025 by rpki-client