Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/bd1b8f-d065-4cc7-9a1f-45ab3f520f00/1/DZxWoYyYei0aLnBEt-MbMhv3rBY.mft
File: DZxWoYyYei0aLnBEt-MbMhv3rBY.mft (raw, json)
Hash identifier: WvTcVTn/+JXtREx2Ivmls3odWYk2HltlbJ3+qTeDHEI=
Subject key identifier: 82:33:BC:37:66:7D:9D:D1:A0:A2:0B:4A:76:65:1D:09:34:C7:0E:C1
Authority key identifier: 0D:9C:56:A1:8C:98:7A:2D:1A:2E:70:44:B7:E3:1B:32:1B:F7:AC:16
Certificate issuer: /CN=0d9c56a18c987a2d1a2e7044b7e31b321bf7ac16
Certificate serial: 01974C68FA160A10D089AE9CBD0372081906
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DZxWoYyYei0aLnBEt-MbMhv3rBY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/bd1b8f-d065-4cc7-9a1f-45ab3f520f00/1/DZxWoYyYei0aLnBEt-MbMhv3rBY.mft
Manifest number: 070F
Signing time: Sat 07 Jun 2025 22:00:37 +0000
Manifest this update: Sat 07 Jun 2025 22:00:37 +0000
Manifest next update: Sun 08 Jun 2025 22:00:37 +0000
Files and hashes: 1: DZxWoYyYei0aLnBEt-MbMhv3rBY.crl (hash: bTyHIv+BYQimXB49/BlhCTVt55/Ds6JfG/CGDqqdk9A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/bd1b8f-d065-4cc7-9a1f-45ab3f520f00/1/DZxWoYyYei0aLnBEt-MbMhv3rBY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/bd1b8f-d065-4cc7-9a1f-45ab3f520f00/1/DZxWoYyYei0aLnBEt-MbMhv3rBY.mft
rsync://rpki.ripe.net/repository/DEFAULT/DZxWoYyYei0aLnBEt-MbMhv3rBY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:68:fa:16:0a:10:d0:89:ae:9c:bd:03:72:08:19:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d9c56a18c987a2d1a2e7044b7e31b321bf7ac16
Validity
Not Before: Jun 7 22:00:37 2025 GMT
Not After : Jun 8 22:00:37 2025 GMT
Subject: CN=8233bc37667d9dd1a0a20b4a76651d0934c70ec1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:1b:1e:35:ff:8e:4a:33:05:14:52:1f:ba:b4:
95:c9:0d:cc:6b:a2:c5:b1:50:fb:b3:fd:2a:be:b6:
a0:5f:0a:18:bd:34:7a:ed:56:5b:76:2c:2a:77:fd:
26:20:7e:dc:42:b1:f9:6a:86:e5:b9:75:5d:c9:b5:
7e:9f:65:49:23:a6:d5:03:d8:47:e7:d6:d9:c6:dc:
2e:41:01:c3:15:85:6f:db:12:ee:4e:54:89:35:f3:
74:69:62:62:ac:a3:0e:70:fc:b2:15:fa:c8:08:38:
5f:6a:11:2b:d1:fb:26:b5:b2:7d:e3:89:90:68:cc:
53:08:99:96:63:8c:d6:fe:1a:5d:85:fa:dd:31:d9:
95:ea:e6:f6:a8:e0:4a:ff:16:18:0c:25:a1:62:dd:
0b:7f:c0:5d:92:c2:6a:ed:2c:f6:89:3c:c3:75:01:
c9:4f:27:5c:cd:61:96:ba:51:3e:6a:08:5d:0f:5d:
05:15:64:f7:5b:70:cc:b3:33:17:17:69:dc:b1:d0:
9e:34:e2:6d:80:65:24:01:d1:06:70:bf:3f:e5:89:
53:e1:b4:20:12:ed:45:2b:34:64:d1:f3:37:e7:10:
e8:a3:66:10:4b:0f:3a:b8:4e:af:2d:09:4d:4b:3f:
b0:ed:45:ec:a0:eb:98:9e:0c:3e:72:64:e2:46:61:
77:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:33:BC:37:66:7D:9D:D1:A0:A2:0B:4A:76:65:1D:09:34:C7:0E:C1
X509v3 Authority Key Identifier:
keyid:0D:9C:56:A1:8C:98:7A:2D:1A:2E:70:44:B7:E3:1B:32:1B:F7:AC:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DZxWoYyYei0aLnBEt-MbMhv3rBY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/bd1b8f-d065-4cc7-9a1f-45ab3f520f00/1/DZxWoYyYei0aLnBEt-MbMhv3rBY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/bd1b8f-d065-4cc7-9a1f-45ab3f520f00/1/DZxWoYyYei0aLnBEt-MbMhv3rBY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:9f:3e:ac:b1:ee:44:55:9f:ec:22:ee:01:92:51:99:42:4f:
f1:55:d5:fe:85:e3:31:b4:6e:91:dc:4c:ee:9b:e6:e7:17:b6:
02:9d:d9:b9:77:bd:af:62:81:07:1a:43:bf:20:9a:23:50:39:
8a:06:a1:cf:28:0f:a4:27:c5:91:4b:00:14:4b:d2:41:0a:2c:
ce:78:03:94:83:e7:3a:9c:da:ee:87:8d:7e:56:f6:fc:4a:ed:
2c:85:47:98:97:2e:0d:9e:4d:84:7f:c9:63:e5:a5:32:db:19:
b6:08:6b:39:01:7b:25:01:e8:47:b4:e2:4f:67:6a:73:d6:70:
17:33:5b:5d:87:3c:56:a0:d5:2d:2d:bd:06:eb:07:f6:2f:7e:
ad:fa:12:e8:4d:46:a0:f1:4a:a6:fd:70:9b:03:91:7a:ca:79:
f0:f1:cd:cc:3f:e7:c9:7d:69:1f:cf:c3:df:23:6d:7e:bc:9b:
26:c8:5f:5b:48:0a:fe:b1:61:0f:b7:c0:46:65:e9:0a:e5:d0:
1d:7f:b6:1b:29:10:4b:0b:4e:9d:ed:e0:a8:d8:bd:c2:f8:d5:
85:2c:7c:c3:3b:50:40:98:09:16:8e:2d:39:f5:b0:91:6a:d3:
06:ac:1f:06:5a:e2:8c:5f:b0:5f:63:7d:77:46:24:72:fb:80:
8e:23:a3:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:11:47 2025 by rpki-client