Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/e3bbdf-9585-46e5-b5cc-f68a59d2fe0d/1/dUxXhm6Xqtqtdd7MadDfBy1Qbuc.mft
File: dUxXhm6Xqtqtdd7MadDfBy1Qbuc.mft (raw, json)
Hash identifier: bNmnX8WXu0ObppB1zxzRWwOQSLhMLdgVG3pw8UOCPxM=
Subject key identifier: A1:55:85:C0:0E:CD:2A:31:14:B6:5A:88:1E:0D:1E:C0:7F:AA:6F:11
Authority key identifier: 75:4C:57:86:6E:97:AA:DA:AD:75:DE:CC:69:D0:DF:07:2D:50:6E:E7
Certificate issuer: /CN=754c57866e97aadaad75decc69d0df072d506ee7
Certificate serial: 01974BFB4147CFE4042DEB2666E82209C550
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dUxXhm6Xqtqtdd7MadDfBy1Qbuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/e3bbdf-9585-46e5-b5cc-f68a59d2fe0d/1/dUxXhm6Xqtqtdd7MadDfBy1Qbuc.mft
Manifest number: 5A
Signing time: Sat 07 Jun 2025 20:00:46 +0000
Manifest this update: Sat 07 Jun 2025 20:00:46 +0000
Manifest next update: Sun 08 Jun 2025 20:00:46 +0000
Files and hashes: 1: dUxXhm6Xqtqtdd7MadDfBy1Qbuc.crl (hash: oSx5GvviQMocVN1vejAR3Ci0YOExMRRUEDsSDZ2tKT0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/e3bbdf-9585-46e5-b5cc-f68a59d2fe0d/1/dUxXhm6Xqtqtdd7MadDfBy1Qbuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/e3bbdf-9585-46e5-b5cc-f68a59d2fe0d/1/dUxXhm6Xqtqtdd7MadDfBy1Qbuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/dUxXhm6Xqtqtdd7MadDfBy1Qbuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:fb:41:47:cf:e4:04:2d:eb:26:66:e8:22:09:c5:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=754c57866e97aadaad75decc69d0df072d506ee7
Validity
Not Before: Jun 7 20:00:46 2025 GMT
Not After : Jun 8 20:00:46 2025 GMT
Subject: CN=a15585c00ecd2a3114b65a881e0d1ec07faa6f11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:c7:fc:87:ae:92:b9:3e:2b:93:67:93:49:51:
5e:29:6a:67:fc:76:37:fe:36:92:b6:aa:30:b8:11:
c7:18:7f:c5:b5:69:1e:a9:88:56:4f:5e:cf:aa:e9:
f6:8f:f8:35:53:3f:21:5c:e5:67:1b:19:72:90:bd:
06:2f:53:79:b3:04:2c:12:62:15:60:50:22:84:f2:
9d:e1:ba:b4:ec:54:51:12:b4:ab:0e:fd:6d:fd:39:
b7:73:e4:dc:03:6e:b0:fe:6e:3d:09:15:a8:ca:0b:
0f:b5:6d:0c:92:17:ac:ee:3d:5d:42:41:74:e8:5b:
21:3a:e2:7e:7d:93:d8:26:ab:a6:82:9a:8a:1a:57:
5f:c6:f9:ec:a9:b1:a8:30:28:03:1c:1e:d2:a0:3f:
8c:9e:3a:ad:e0:d8:1d:cc:c1:66:40:c7:70:d3:87:
75:f4:b9:dc:85:c6:4f:4e:57:e7:b4:45:8e:c9:2f:
17:d5:44:0b:1b:94:16:d5:a7:30:14:c5:b0:80:6e:
1e:4a:67:ac:13:19:8a:64:63:2f:30:61:12:da:36:
2d:e7:fb:55:d8:81:60:cd:9c:f0:a9:4b:6b:3d:13:
59:44:29:9d:f9:78:24:d8:d2:e1:d9:7c:ee:84:46:
ee:0a:b8:b2:21:a5:b8:0f:61:4b:28:be:08:c8:ed:
9b:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:55:85:C0:0E:CD:2A:31:14:B6:5A:88:1E:0D:1E:C0:7F:AA:6F:11
X509v3 Authority Key Identifier:
keyid:75:4C:57:86:6E:97:AA:DA:AD:75:DE:CC:69:D0:DF:07:2D:50:6E:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dUxXhm6Xqtqtdd7MadDfBy1Qbuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/e3bbdf-9585-46e5-b5cc-f68a59d2fe0d/1/dUxXhm6Xqtqtdd7MadDfBy1Qbuc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/e3bbdf-9585-46e5-b5cc-f68a59d2fe0d/1/dUxXhm6Xqtqtdd7MadDfBy1Qbuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:c1:07:6e:09:eb:a8:75:f9:27:4e:7b:72:6c:78:a7:d7:2f:
71:43:a1:8d:16:b6:65:a3:67:9e:de:ba:72:18:d5:77:59:b8:
df:a1:14:d0:1c:66:ac:28:33:bc:74:7e:57:70:65:ad:f4:d5:
d7:57:1c:f9:ea:b5:82:6b:56:00:37:84:0d:0b:32:b2:91:4a:
8e:f3:34:5e:b6:17:01:41:c9:59:95:be:33:71:08:af:fb:a8:
37:67:f6:a3:3e:ba:a8:48:37:72:6f:14:37:ba:c4:06:7f:ef:
f0:e4:65:14:94:14:de:92:d5:32:12:38:f8:31:e4:43:ff:54:
eb:fe:ec:4a:f0:42:74:94:24:f0:cb:33:f0:d0:31:75:73:23:
ba:ad:35:bc:92:b1:34:9c:99:0d:51:e7:95:be:fc:9a:17:5f:
9a:f9:d8:13:98:c3:ec:ac:2b:3a:90:2c:e7:36:79:56:7a:65:
17:bd:c4:ef:67:00:43:59:68:46:3e:d6:09:f8:32:c9:97:31:
06:bb:47:d7:a7:ed:16:42:1b:a0:c5:d7:82:ae:a2:2c:17:a8:
05:7b:e7:4a:7d:4a:de:68:93:dd:d3:7b:d0:e6:b1:80:53:54:
8b:ec:9f:43:f4:18:ca:6f:db:e2:cd:f0:c5:42:ec:e4:33:1c:
6f:28:ab:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 05:17:15 2025 by rpki-client