Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/c9c030-553e-430a-987d-1c057552691e/1/dbzZGxsvmvS3QhSm1njOBxlo4c8.mft
File: dbzZGxsvmvS3QhSm1njOBxlo4c8.mft (raw, json)
Hash identifier: IS1UehKRab1Dc6ubpXS3fm/R1Uj10VzRwFsMX2D+egQ=
Subject key identifier: 62:7F:AD:30:40:8D:CF:83:4C:0C:28:CF:91:D6:15:76:4E:C3:0D:07
Authority key identifier: 75:BC:D9:1B:1B:2F:9A:F4:B7:42:14:A6:D6:78:CE:07:19:68:E1:CF
Certificate issuer: /CN=75bcd91b1b2f9af4b74214a6d678ce071968e1cf
Certificate serial: 01975FB8E77F2492855223DAB3782D32DC8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dbzZGxsvmvS3QhSm1njOBxlo4c8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/c9c030-553e-430a-987d-1c057552691e/1/dbzZGxsvmvS3QhSm1njOBxlo4c8.mft
Manifest number: 07B1
Signing time: Wed 11 Jun 2025 16:00:42 +0000
Manifest this update: Wed 11 Jun 2025 16:00:42 +0000
Manifest next update: Thu 12 Jun 2025 16:00:42 +0000
Files and hashes: 1: dbzZGxsvmvS3QhSm1njOBxlo4c8.crl (hash: 72fj80GsswsWr27B0FOlFyuclSSKtl4OUqpEpbnhiE0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/c9c030-553e-430a-987d-1c057552691e/1/dbzZGxsvmvS3QhSm1njOBxlo4c8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/c9c030-553e-430a-987d-1c057552691e/1/dbzZGxsvmvS3QhSm1njOBxlo4c8.mft
rsync://rpki.ripe.net/repository/DEFAULT/dbzZGxsvmvS3QhSm1njOBxlo4c8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 15:40:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5f:b8:e7:7f:24:92:85:52:23:da:b3:78:2d:32:dc:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75bcd91b1b2f9af4b74214a6d678ce071968e1cf
Validity
Not Before: Jun 11 16:00:42 2025 GMT
Not After : Jun 12 16:00:42 2025 GMT
Subject: CN=627fad30408dcf834c0c28cf91d615764ec30d07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:50:11:82:f8:91:fd:70:d4:6c:c2:e7:db:0a:
9d:d8:f4:6c:5a:14:a9:4f:b5:10:5a:0a:f4:fa:6a:
3e:5c:76:f2:df:b4:7c:98:9b:3b:0c:06:06:f1:96:
01:41:1e:b7:fd:0c:5e:dc:c5:b9:42:9a:e0:e1:83:
3e:81:24:66:df:80:87:c7:cf:02:dc:d7:13:8d:18:
ed:9a:48:df:53:35:0d:cc:72:b1:83:64:91:dc:69:
99:f2:ae:4a:01:e4:7d:64:58:9a:81:5d:8c:3b:ea:
2c:21:e6:09:6a:e7:a0:d7:06:a8:72:aa:fd:ec:57:
9e:2a:03:c1:b6:23:2c:02:2a:5e:57:a9:ef:49:9c:
66:18:9f:bb:f6:3c:3d:08:a3:80:9f:1c:61:5a:50:
65:84:4c:51:66:48:7e:55:34:44:9b:6c:cc:5b:60:
94:8b:35:99:5c:1b:5a:3d:fb:86:6e:25:5a:fd:d5:
1b:11:6e:be:2f:ae:1e:0f:d5:16:74:f9:e2:d4:c4:
36:d0:12:a3:60:bc:54:19:56:97:d7:60:2a:fd:6d:
b6:1a:06:a7:16:99:d3:58:13:35:5e:80:70:cd:1a:
67:d2:8c:5c:25:2e:04:8e:28:df:58:0e:d1:db:78:
c2:e6:c9:0d:55:2e:0c:d3:6a:5b:76:ca:f3:0f:00:
4b:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:7F:AD:30:40:8D:CF:83:4C:0C:28:CF:91:D6:15:76:4E:C3:0D:07
X509v3 Authority Key Identifier:
keyid:75:BC:D9:1B:1B:2F:9A:F4:B7:42:14:A6:D6:78:CE:07:19:68:E1:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dbzZGxsvmvS3QhSm1njOBxlo4c8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/c9c030-553e-430a-987d-1c057552691e/1/dbzZGxsvmvS3QhSm1njOBxlo4c8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/c9c030-553e-430a-987d-1c057552691e/1/dbzZGxsvmvS3QhSm1njOBxlo4c8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:ff:42:06:ec:e3:b1:e2:a9:f0:da:36:b8:dd:33:fe:7e:2b:
d7:38:8f:fc:a6:e2:95:a1:86:b5:c1:68:d1:0a:3d:a8:26:ed:
92:e3:3e:03:ea:d2:d8:3a:d1:b5:4e:71:11:0a:f9:c9:36:e0:
72:b2:fc:b9:29:9e:b9:d8:ae:17:de:79:11:af:40:f0:aa:27:
75:bf:05:65:85:b0:8d:3b:b3:20:a7:75:48:56:af:10:ee:16:
95:08:9e:57:bf:6e:42:27:4a:97:d4:6f:0c:47:d3:74:9a:0e:
74:12:f6:1a:ac:58:15:2b:44:da:53:7f:b3:20:29:13:8f:1d:
b1:bf:44:bc:79:25:22:4d:b2:d1:3b:02:6c:50:c6:d8:f0:a9:
3a:6e:76:a2:4d:26:ef:1f:2e:a0:49:22:7f:58:7d:99:ed:b0:
10:c2:53:3e:00:a3:4d:ff:06:ea:19:ff:d3:3f:44:4f:fe:18:
e0:b7:34:cf:6f:de:63:d0:86:6f:16:79:64:61:1a:f3:ea:ae:
c3:c1:09:ed:f2:10:fa:ea:86:b8:e6:05:25:3d:76:ae:3c:31:
e8:03:a1:b4:45:08:5a:2e:fd:df:8c:a4:5a:77:ae:b8:0b:6f:
43:33:9b:8a:84:ac:50:6b:ca:bc:60:86:3e:c7:8b:9b:25:11:
0b:78:47:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 23:52:20 2025 by rpki-client