Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/c9c030-553e-430a-987d-1c057552691e/1/dbzZGxsvmvS3QhSm1njOBxlo4c8.mft
File: dbzZGxsvmvS3QhSm1njOBxlo4c8.mft (raw, json)
Hash identifier: r1qRUYxZC1dj3ZhE2MnXkijcyO/73hfnKJGi7hO6qd0=
Subject key identifier: C4:7B:C7:8D:D5:18:EF:3B:A8:EF:7C:B3:EA:AF:C4:09:58:0F:53:3E
Authority key identifier: 75:BC:D9:1B:1B:2F:9A:F4:B7:42:14:A6:D6:78:CE:07:19:68:E1:CF
Certificate issuer: /CN=75bcd91b1b2f9af4b74214a6d678ce071968e1cf
Certificate serial: 019769619C70FCE90AC070F528A269D84776
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dbzZGxsvmvS3QhSm1njOBxlo4c8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/c9c030-553e-430a-987d-1c057552691e/1/dbzZGxsvmvS3QhSm1njOBxlo4c8.mft
Manifest number: 07B6
Signing time: Fri 13 Jun 2025 13:01:33 +0000
Manifest this update: Fri 13 Jun 2025 13:01:33 +0000
Manifest next update: Sat 14 Jun 2025 13:01:33 +0000
Files and hashes: 1: dbzZGxsvmvS3QhSm1njOBxlo4c8.crl (hash: rwjN8jDcHEqJIdY2BTS5HsqPjsnA7cgBijZ8rweVwbw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/c9c030-553e-430a-987d-1c057552691e/1/dbzZGxsvmvS3QhSm1njOBxlo4c8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/c9c030-553e-430a-987d-1c057552691e/1/dbzZGxsvmvS3QhSm1njOBxlo4c8.mft
rsync://rpki.ripe.net/repository/DEFAULT/dbzZGxsvmvS3QhSm1njOBxlo4c8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:61:9c:70:fc:e9:0a:c0:70:f5:28:a2:69:d8:47:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75bcd91b1b2f9af4b74214a6d678ce071968e1cf
Validity
Not Before: Jun 13 13:01:33 2025 GMT
Not After : Jun 14 13:01:33 2025 GMT
Subject: CN=c47bc78dd518ef3ba8ef7cb3eaafc409580f533e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d1:66:62:98:02:cd:60:69:f6:1a:4a:b3:7d:
e1:72:06:3e:ca:ba:7f:38:09:0d:4e:0c:d4:8d:d4:
bb:d3:41:00:c6:c8:f9:4d:7e:12:c5:01:4c:d9:b9:
a0:f0:5d:e7:5b:a7:83:0f:66:2b:f2:bb:a8:48:e8:
57:a6:d7:d4:92:62:3a:d5:e7:47:64:b6:57:ed:52:
45:87:74:24:d6:d2:fb:4e:ee:02:f1:56:54:1d:e1:
be:74:52:a0:e0:51:ad:fb:02:de:61:bb:1a:37:a3:
aa:98:b6:b1:28:b5:68:2c:c8:1e:06:1b:08:d7:f9:
bb:e2:2c:03:39:80:2c:d5:79:8a:29:5e:f8:58:2c:
2d:27:5f:b7:c7:6d:02:23:17:6d:57:c0:54:05:7f:
a8:97:0c:e0:30:49:7a:aa:b0:09:61:93:f3:f3:47:
32:f0:75:09:aa:ea:c5:b0:97:5e:ff:fd:0e:d6:9c:
51:c2:20:48:77:94:f8:9e:4f:61:4e:f5:3b:25:84:
14:da:e4:aa:03:07:cb:08:9e:c5:57:80:ca:dd:13:
3c:4c:b4:9c:7b:00:27:bf:98:dd:b0:b8:4b:93:11:
99:bb:75:b9:4e:a2:ae:69:ca:01:16:98:a0:56:e8:
06:5c:c2:28:0e:06:84:a3:cd:65:2c:c9:e5:15:f6:
2f:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:7B:C7:8D:D5:18:EF:3B:A8:EF:7C:B3:EA:AF:C4:09:58:0F:53:3E
X509v3 Authority Key Identifier:
keyid:75:BC:D9:1B:1B:2F:9A:F4:B7:42:14:A6:D6:78:CE:07:19:68:E1:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dbzZGxsvmvS3QhSm1njOBxlo4c8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/c9c030-553e-430a-987d-1c057552691e/1/dbzZGxsvmvS3QhSm1njOBxlo4c8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/c9c030-553e-430a-987d-1c057552691e/1/dbzZGxsvmvS3QhSm1njOBxlo4c8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:cf:9f:f3:08:0e:ca:ae:3a:07:76:ba:6c:4f:0e:14:00:74:
bc:3b:d7:6b:fa:2b:8e:df:73:4b:8e:e3:49:2b:50:20:b0:5e:
91:65:31:a0:5f:3e:29:ae:3d:0c:c9:59:1e:ed:4b:69:19:b2:
bd:b3:1e:37:84:e6:f2:ab:2b:e4:3a:8d:fe:e8:11:67:14:1f:
c3:33:7f:eb:b9:83:f5:20:e8:88:15:30:f5:1f:5f:cd:e7:f1:
1b:9f:3c:2b:5f:a4:3c:c5:0f:02:bc:9e:08:38:b5:20:12:51:
d0:5a:34:eb:02:f8:30:ca:ed:af:86:d9:de:dc:46:3c:70:57:
12:98:a3:52:fc:67:be:95:d5:5a:91:3d:d6:37:32:7c:f1:b6:
da:a5:f7:c4:a2:fa:c7:98:b4:92:f2:90:cb:fa:06:88:66:5a:
df:4f:c0:40:d7:c6:b6:ad:d2:32:5a:1f:d2:ae:d2:11:4e:53:
a7:22:8e:1e:dd:d2:3f:e9:c2:aa:d0:f6:47:8a:c1:82:33:17:
df:ec:7b:89:4e:02:0a:53:6a:e0:78:9c:d0:27:ff:94:0b:ab:
ac:b0:04:eb:85:29:83:9b:70:c8:64:51:71:0a:10:fc:60:fe:
33:42:4a:d7:c3:14:36:27:1e:b7:35:11:87:37:1b:ed:c6:d1:
56:fe:53:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 21:25:49 2025 by rpki-client