Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/49d813-2d9e-44b6-97ba-ea9c2c5222fb/1/dCadQgSZl1rpNPNM45WTgRTJuns.mft
File: dCadQgSZl1rpNPNM45WTgRTJuns.mft (raw, json)
Hash identifier: DehmzYwQxol5DwJvF4hoso5zYakK70traLnHihmzVdY=
Subject key identifier: C7:24:69:70:72:7E:DB:9F:90:CD:0E:06:A6:50:60:5A:07:6F:7C:EE
Authority key identifier: 74:26:9D:42:04:99:97:5A:E9:34:F3:4C:E3:95:93:81:14:C9:BA:7B
Certificate issuer: /CN=74269d420499975ae934f34ce395938114c9ba7b
Certificate serial: 01974E576545D8DC34D55076985D12F67BD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dCadQgSZl1rpNPNM45WTgRTJuns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/49d813-2d9e-44b6-97ba-ea9c2c5222fb/1/dCadQgSZl1rpNPNM45WTgRTJuns.mft
Manifest number: 10D3
Signing time: Sun 08 Jun 2025 07:00:39 +0000
Manifest this update: Sun 08 Jun 2025 07:00:39 +0000
Manifest next update: Mon 09 Jun 2025 07:00:39 +0000
Files and hashes: 1: dCadQgSZl1rpNPNM45WTgRTJuns.crl (hash: x4Dl+lelww0JEaaoyvCPZ97JnpF6UxnBK5hRyPEud8A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/49d813-2d9e-44b6-97ba-ea9c2c5222fb/1/dCadQgSZl1rpNPNM45WTgRTJuns.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/49d813-2d9e-44b6-97ba-ea9c2c5222fb/1/dCadQgSZl1rpNPNM45WTgRTJuns.mft
rsync://rpki.ripe.net/repository/DEFAULT/dCadQgSZl1rpNPNM45WTgRTJuns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 07:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:57:65:45:d8:dc:34:d5:50:76:98:5d:12:f6:7b:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74269d420499975ae934f34ce395938114c9ba7b
Validity
Not Before: Jun 8 07:00:39 2025 GMT
Not After : Jun 9 07:00:39 2025 GMT
Subject: CN=c7246970727edb9f90cd0e06a650605a076f7cee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:3c:88:63:c4:6b:90:d5:89:b5:71:1a:05:8d:
e8:14:8e:3d:51:3d:1a:60:d1:4f:76:ef:65:92:c9:
1a:b2:fd:f5:40:74:92:e4:10:c8:84:e4:f7:38:9e:
a3:20:70:cf:54:d5:17:e8:56:ba:52:56:8d:e8:bf:
91:b6:75:51:df:b6:c0:92:d9:6f:f2:1f:c4:d5:f4:
18:ab:f0:60:d8:2f:89:cc:8b:82:01:4c:ab:2a:5d:
23:52:8e:64:a7:b1:67:b1:3a:58:46:a8:db:16:a3:
d4:a9:40:4c:05:7d:86:64:fc:62:ea:55:b0:0b:54:
2c:25:4c:26:d2:14:21:88:07:d3:3a:ec:e6:ea:41:
a5:7d:fe:f3:8e:e9:80:85:4a:16:10:b9:eb:fb:21:
15:36:1b:17:cf:d9:c7:57:80:d8:20:33:b1:45:01:
58:f9:39:0d:07:8d:97:d1:a0:fd:8f:21:0e:89:7e:
c9:47:8e:9f:ea:d4:c6:d3:a9:40:4a:ef:92:95:53:
79:63:92:b8:5e:37:7f:da:6b:2e:cf:e9:21:db:f2:
e3:5c:d4:c7:d3:a0:d7:62:50:59:a3:44:d9:cb:58:
14:30:09:c4:b7:53:9a:f7:8c:86:cb:1f:72:8f:4b:
7d:5d:67:b4:ba:c0:fd:d8:68:c5:c7:87:8c:90:2c:
ff:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:24:69:70:72:7E:DB:9F:90:CD:0E:06:A6:50:60:5A:07:6F:7C:EE
X509v3 Authority Key Identifier:
keyid:74:26:9D:42:04:99:97:5A:E9:34:F3:4C:E3:95:93:81:14:C9:BA:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dCadQgSZl1rpNPNM45WTgRTJuns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/49d813-2d9e-44b6-97ba-ea9c2c5222fb/1/dCadQgSZl1rpNPNM45WTgRTJuns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/49d813-2d9e-44b6-97ba-ea9c2c5222fb/1/dCadQgSZl1rpNPNM45WTgRTJuns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:80:a7:fd:3e:12:b3:70:a7:47:e7:9f:ee:e5:e7:39:8e:45:
a7:7e:04:10:7f:eb:a3:61:4a:7e:ca:8a:b8:c3:9b:60:eb:4d:
a4:56:a5:75:47:2d:ab:9d:b8:7a:2f:01:1b:c5:87:6b:4d:42:
39:34:79:c8:cd:b6:47:27:12:79:e5:62:ec:fe:55:42:78:6f:
58:9b:5e:95:8f:0e:f3:74:2d:1e:86:f1:ed:2c:9a:c1:6f:09:
20:92:ec:b8:a7:fa:dd:65:d2:a6:53:90:5d:94:b2:da:25:fc:
5b:df:db:a4:2b:51:c7:8d:d6:ad:d8:a3:66:76:09:cf:43:3d:
94:ac:5f:1c:25:43:b3:d0:d8:f3:3b:36:b6:ee:86:7d:af:af:
a0:fc:84:3f:8e:42:0a:73:d1:18:86:a5:b2:30:b8:c9:dd:02:
63:22:e3:87:fe:4c:7d:aa:9c:d6:5d:c6:f3:67:8f:60:d3:76:
38:0e:89:1e:09:06:50:0d:ff:60:85:48:67:4e:fb:ba:35:ad:
bf:12:42:c8:58:3e:43:2d:62:ae:8f:7b:62:fc:ff:8a:ed:d4:
c3:07:ee:6e:f9:c4:b9:a7:9d:f6:df:e6:97:a0:77:a4:1a:30:
d0:43:6b:ae:1b:85:91:ad:cf:1c:f9:08:90:fd:03:ce:0c:c4:
9a:a6:08:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 14:44:44 2025 by rpki-client