Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/2c8dbc-40ae-49c6-8dd3-c25debcb1197/1/DudNGMQEmi2bgSwqWFXP63Wvpmc.mft
File: DudNGMQEmi2bgSwqWFXP63Wvpmc.mft (raw, json)
Hash identifier: 4HMa+XG8l0BjtmFzW3fzF7FEEnpOMlXRlXzvUtAERYM=
Subject key identifier: D3:E4:9C:30:06:C0:A4:EC:A2:5C:7A:4B:09:BF:86:BC:79:05:9B:C6
Authority key identifier: 0E:E7:4D:18:C4:04:9A:2D:9B:81:2C:2A:58:55:CF:EB:75:AF:A6:67
Certificate issuer: /CN=0ee74d18c4049a2d9b812c2a5855cfeb75afa667
Certificate serial: 019748F9D5A37E8625D93E7491068DFBD7A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DudNGMQEmi2bgSwqWFXP63Wvpmc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/2c8dbc-40ae-49c6-8dd3-c25debcb1197/1/DudNGMQEmi2bgSwqWFXP63Wvpmc.mft
Manifest number: 1578
Signing time: Sat 07 Jun 2025 06:00:21 +0000
Manifest this update: Sat 07 Jun 2025 06:00:21 +0000
Manifest next update: Sun 08 Jun 2025 06:00:21 +0000
Files and hashes: 1: DudNGMQEmi2bgSwqWFXP63Wvpmc.crl (hash: ngo2EUogRkwvLXaZf2/S0qiUaSZWzYfWVjhBV06Bnkw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/2c8dbc-40ae-49c6-8dd3-c25debcb1197/1/DudNGMQEmi2bgSwqWFXP63Wvpmc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/2c8dbc-40ae-49c6-8dd3-c25debcb1197/1/DudNGMQEmi2bgSwqWFXP63Wvpmc.mft
rsync://rpki.ripe.net/repository/DEFAULT/DudNGMQEmi2bgSwqWFXP63Wvpmc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 06:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:f9:d5:a3:7e:86:25:d9:3e:74:91:06:8d:fb:d7:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ee74d18c4049a2d9b812c2a5855cfeb75afa667
Validity
Not Before: Jun 7 06:00:21 2025 GMT
Not After : Jun 8 06:00:21 2025 GMT
Subject: CN=d3e49c3006c0a4eca25c7a4b09bf86bc79059bc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:67:3e:6b:af:1a:c7:c4:2b:59:17:d3:10:a1:
71:e2:36:bf:97:54:13:3b:3a:78:b7:21:4a:29:01:
e9:2d:49:d2:2b:2c:fc:fa:b1:34:8d:3a:24:82:81:
04:dd:f3:dd:d5:c4:ae:b5:54:d0:76:e4:ff:41:e7:
ba:4d:f9:82:c9:1a:24:cc:c5:92:33:52:af:bb:0b:
d1:f1:2c:20:30:97:aa:1f:69:e2:76:57:68:fc:2e:
f7:cc:62:63:ed:c4:a8:1a:b2:f5:8e:c5:44:5d:73:
68:5b:a6:20:4f:c7:8a:66:a2:bb:f0:77:08:90:6c:
d1:d3:85:56:1b:91:ca:75:a9:ce:1b:36:11:ae:d7:
5f:e2:cb:19:7a:d7:1f:ae:8f:9b:cc:c8:27:d9:e6:
ed:21:2f:90:3f:31:6f:69:45:2d:dc:70:72:a5:f4:
01:d3:f6:c2:9f:5b:be:4f:f1:60:5e:43:5a:96:72:
fc:82:53:25:60:b5:b5:78:5e:46:8f:6d:56:c7:f5:
8a:d1:dd:22:e7:e7:cb:5d:b6:c4:f5:d9:5c:72:4d:
cb:c9:f3:63:fb:58:a6:c1:91:d5:28:56:f9:cf:c1:
35:05:ff:5b:60:22:70:39:fa:67:a7:a3:bf:f6:f7:
e6:6b:f1:cc:ac:89:22:d3:89:4b:b2:a0:a9:fc:62:
3b:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:E4:9C:30:06:C0:A4:EC:A2:5C:7A:4B:09:BF:86:BC:79:05:9B:C6
X509v3 Authority Key Identifier:
keyid:0E:E7:4D:18:C4:04:9A:2D:9B:81:2C:2A:58:55:CF:EB:75:AF:A6:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DudNGMQEmi2bgSwqWFXP63Wvpmc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/2c8dbc-40ae-49c6-8dd3-c25debcb1197/1/DudNGMQEmi2bgSwqWFXP63Wvpmc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/2c8dbc-40ae-49c6-8dd3-c25debcb1197/1/DudNGMQEmi2bgSwqWFXP63Wvpmc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:8c:ef:6f:18:a6:6f:7b:f8:30:0c:0f:3e:d7:be:a5:56:cb:
39:55:f6:f0:78:35:97:f7:bd:05:a3:50:ff:03:9e:8e:70:86:
aa:12:6f:4c:c5:76:37:43:b7:69:ff:94:e5:d4:06:1e:d8:0b:
fa:ff:4d:10:bf:6e:5a:b7:5c:34:aa:d3:f3:f4:23:06:5a:cc:
11:89:06:ab:74:2a:53:6b:c1:61:ed:9a:57:b1:91:b4:d7:2d:
07:cf:41:cd:8e:34:86:a2:1c:e5:fb:9c:6f:67:21:26:77:b5:
0b:b0:06:5d:1c:e1:bb:c3:43:7a:8a:e5:34:18:74:49:06:d4:
1c:c7:94:32:cf:99:45:75:05:0d:23:e7:0f:5d:28:0c:e1:e6:
93:93:86:ae:a1:b0:6e:7d:0e:db:bd:4f:02:a8:b1:28:f6:12:
d8:2d:f3:a7:20:9d:b0:2b:0e:01:44:ed:fe:2a:f1:30:c3:06:
bc:55:a9:62:aa:e1:12:9f:23:73:52:65:54:9c:53:79:b5:b1:
5f:19:69:be:e7:cc:82:7a:53:b6:98:99:05:a9:ae:0a:07:68:
6d:98:9c:ac:d5:b1:bf:ed:d8:fc:57:33:0d:6e:45:ae:2c:37:
6d:c7:4b:3c:45:cd:b5:38:28:c0:2f:54:57:c4:cc:71:26:c2:
05:39:47:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 11:33:50 2025 by rpki-client