Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/c9c030-553e-430a-987d-1c057552691e/1/dbzZGxsvmvS3QhSm1njOBxlo4c8.mft
File: dbzZGxsvmvS3QhSm1njOBxlo4c8.mft (raw, json)
Hash identifier: L4dK4YtZQ2eSZsrY3M0V/fhYtoCMii7TmJd3TYWnag0=
Subject key identifier: CE:C7:BE:E5:72:B3:80:18:85:0C:4C:43:07:61:36:BA:5A:92:6D:22
Authority key identifier: 75:BC:D9:1B:1B:2F:9A:F4:B7:42:14:A6:D6:78:CE:07:19:68:E1:CF
Certificate issuer: /CN=75bcd91b1b2f9af4b74214a6d678ce071968e1cf
Certificate serial: 019767732D0AE2B6CBB7A336A7AF65E267B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dbzZGxsvmvS3QhSm1njOBxlo4c8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/c9c030-553e-430a-987d-1c057552691e/1/dbzZGxsvmvS3QhSm1njOBxlo4c8.mft
Manifest number: 07B5
Signing time: Fri 13 Jun 2025 04:01:30 +0000
Manifest this update: Fri 13 Jun 2025 04:01:30 +0000
Manifest next update: Sat 14 Jun 2025 04:01:30 +0000
Files and hashes: 1: dbzZGxsvmvS3QhSm1njOBxlo4c8.crl (hash: FUPngkJYTuO17C2FAO1cpcQ1oHbPEhztxmjw3orHYDo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/c9c030-553e-430a-987d-1c057552691e/1/dbzZGxsvmvS3QhSm1njOBxlo4c8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/c9c030-553e-430a-987d-1c057552691e/1/dbzZGxsvmvS3QhSm1njOBxlo4c8.mft
rsync://rpki.ripe.net/repository/DEFAULT/dbzZGxsvmvS3QhSm1njOBxlo4c8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 04:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:67:73:2d:0a:e2:b6:cb:b7:a3:36:a7:af:65:e2:67:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75bcd91b1b2f9af4b74214a6d678ce071968e1cf
Validity
Not Before: Jun 13 04:01:30 2025 GMT
Not After : Jun 14 04:01:30 2025 GMT
Subject: CN=cec7bee572b38018850c4c43076136ba5a926d22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:fb:fd:5c:02:3d:fb:55:f5:f2:b1:2a:f1:86:
28:c7:02:6d:1d:53:af:4e:28:0b:2e:b6:e1:86:54:
f9:e7:8f:e5:a9:bd:97:75:a1:36:e4:95:ba:6d:a3:
5e:74:52:c1:6d:54:92:e3:95:28:64:19:be:ba:4e:
84:c2:f3:f6:71:9b:07:9f:9b:06:e7:80:3f:8d:ee:
67:f3:9d:72:1b:67:7e:6c:2c:d1:b3:3d:64:6e:8e:
54:e1:4d:0b:11:a6:7a:c0:13:7f:b1:e5:1e:74:67:
a0:aa:2d:1b:2b:c7:b8:2d:77:43:62:91:2c:19:48:
a0:fc:d3:f6:d7:2e:c6:ec:31:36:f9:99:c1:ce:56:
b3:ea:80:c0:b7:c6:e8:c8:33:fb:88:f5:81:b0:df:
79:e3:32:34:a1:1f:a4:27:14:b2:01:a5:91:fa:8a:
f2:46:34:92:7c:d3:61:46:7b:3c:83:d5:55:ca:21:
22:c2:5d:0d:c6:d4:91:c5:5b:6a:2b:97:34:02:2e:
db:df:9f:93:65:cd:d2:4d:0f:b4:7a:5f:12:1d:13:
87:c3:58:0e:e6:d3:a2:2d:da:26:34:69:39:af:2c:
60:75:41:40:34:a3:58:15:e5:c3:52:34:e1:e0:2c:
22:d5:fa:18:fc:af:af:1c:1f:53:9b:82:0b:b2:c7:
08:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:C7:BE:E5:72:B3:80:18:85:0C:4C:43:07:61:36:BA:5A:92:6D:22
X509v3 Authority Key Identifier:
keyid:75:BC:D9:1B:1B:2F:9A:F4:B7:42:14:A6:D6:78:CE:07:19:68:E1:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dbzZGxsvmvS3QhSm1njOBxlo4c8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/c9c030-553e-430a-987d-1c057552691e/1/dbzZGxsvmvS3QhSm1njOBxlo4c8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/c9c030-553e-430a-987d-1c057552691e/1/dbzZGxsvmvS3QhSm1njOBxlo4c8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:82:6d:af:a4:f8:29:9d:15:f0:de:20:ec:8a:86:53:a1:ae:
f5:d6:04:6e:12:18:50:e7:9b:46:b3:51:14:55:f3:91:21:5f:
3b:90:0a:0e:00:b1:f6:ee:3a:3c:c8:88:45:c1:5f:1e:99:e9:
9e:5e:c2:83:26:28:56:fc:4f:a4:61:d1:02:77:1f:5d:7b:cd:
2d:67:07:1a:26:f3:1c:eb:77:9a:02:9b:e4:9b:bd:a1:50:83:
ea:6a:70:4a:c0:58:51:16:e1:66:65:19:5e:36:f2:c2:ea:42:
52:19:67:d0:8c:61:9e:bc:56:f2:30:f0:23:a4:38:79:1a:51:
16:18:cd:de:2c:11:55:09:c0:31:83:55:73:f4:7e:bf:2e:5d:
29:4e:90:ee:57:73:e9:dc:a7:d7:63:f0:31:9c:a7:7c:3f:34:
51:f5:cc:ea:e2:be:bf:3e:f7:a7:d1:d2:6a:f0:e3:fe:c7:60:
da:9d:a4:65:85:60:e9:6e:19:f4:5a:81:ce:b7:a7:43:5a:e1:
89:62:60:52:e5:8b:61:bd:4b:b6:16:fc:f9:5e:41:84:a4:e4:
9b:55:2b:13:50:4a:60:13:ed:3f:4d:49:45:40:32:16:5c:db:
89:2f:3b:89:2a:59:f2:f6:1a:0a:bd:94:9b:d3:ed:68:16:48:
0b:95:04:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 09:10:13 2025 by rpki-client