Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/742d35-8274-49af-bc12-da85c5732b85/1/DtjJoWGXLWi0RTPg4x9R5NzlunU.mft
File: DtjJoWGXLWi0RTPg4x9R5NzlunU.mft (raw, json)
Hash identifier: SQmycD9vDXcm0Lk92Ds/qjZGF6P/ud9PWLzw+0R8a54=
Subject key identifier: 77:A5:DD:A8:63:11:2C:B6:B9:8A:76:E6:6E:8F:49:39:0E:30:9B:55
Authority key identifier: 0E:D8:C9:A1:61:97:2D:68:B4:45:33:E0:E3:1F:51:E4:DC:E5:BA:75
Certificate issuer: /CN=0ed8c9a161972d68b44533e0e31f51e4dce5ba75
Certificate serial: 019750463C5E0E2D2B09392BC4B4760CE1FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DtjJoWGXLWi0RTPg4x9R5NzlunU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/742d35-8274-49af-bc12-da85c5732b85/1/DtjJoWGXLWi0RTPg4x9R5NzlunU.mft
Manifest number: 157B
Signing time: Sun 08 Jun 2025 16:01:09 +0000
Manifest this update: Sun 08 Jun 2025 16:01:09 +0000
Manifest next update: Mon 09 Jun 2025 16:01:09 +0000
Files and hashes: 1: DtjJoWGXLWi0RTPg4x9R5NzlunU.crl (hash: EXuCkWXT3LGiDSi81n2QqabR0UlmpvG++t5LhCAxwfI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/742d35-8274-49af-bc12-da85c5732b85/1/DtjJoWGXLWi0RTPg4x9R5NzlunU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/742d35-8274-49af-bc12-da85c5732b85/1/DtjJoWGXLWi0RTPg4x9R5NzlunU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DtjJoWGXLWi0RTPg4x9R5NzlunU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 11:44:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:46:3c:5e:0e:2d:2b:09:39:2b:c4:b4:76:0c:e1:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ed8c9a161972d68b44533e0e31f51e4dce5ba75
Validity
Not Before: Jun 8 16:01:09 2025 GMT
Not After : Jun 9 16:01:09 2025 GMT
Subject: CN=77a5dda863112cb6b98a76e66e8f49390e309b55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:ab:6b:05:33:a2:c0:6b:45:f3:2f:fd:0e:09:
80:b2:66:a4:de:5a:5d:ae:01:0f:a0:c9:3e:8e:14:
b5:c3:2c:70:5d:40:79:30:89:f3:0b:39:c6:5c:43:
c8:75:e4:d8:6d:05:de:3e:28:e4:28:e4:4a:91:1c:
3e:9a:a0:c0:08:e7:aa:ff:f4:d4:d1:7d:96:df:b7:
eb:ae:09:10:93:a7:1d:71:47:a0:68:3f:6b:65:09:
a6:00:1f:0a:34:e0:c4:6a:54:17:91:56:ca:3c:d4:
88:5f:cd:02:88:73:d7:a9:54:13:34:d4:a2:53:36:
39:cf:c5:ec:eb:0a:96:17:ed:54:3a:6f:a6:ae:fd:
0e:6d:ad:cf:69:f7:6e:b4:cb:7f:25:35:f0:b6:27:
e4:ee:59:b7:8e:aa:f9:9c:da:d6:e3:19:29:f9:51:
13:94:fe:3d:94:33:1a:1d:f3:8b:38:81:64:ae:2c:
f3:35:5d:6d:96:f5:f5:77:66:cb:cb:75:c3:c9:09:
07:82:8a:9d:dd:d0:06:7c:af:b9:98:9d:47:82:3d:
2b:a3:8a:64:b5:79:b5:8d:62:12:8d:8b:7e:2c:8b:
69:4e:2f:99:af:01:8a:67:b3:1e:7c:d6:cd:17:d0:
6d:c5:3c:46:4f:37:ea:11:26:44:ec:08:28:67:dc:
b8:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:A5:DD:A8:63:11:2C:B6:B9:8A:76:E6:6E:8F:49:39:0E:30:9B:55
X509v3 Authority Key Identifier:
keyid:0E:D8:C9:A1:61:97:2D:68:B4:45:33:E0:E3:1F:51:E4:DC:E5:BA:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DtjJoWGXLWi0RTPg4x9R5NzlunU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/742d35-8274-49af-bc12-da85c5732b85/1/DtjJoWGXLWi0RTPg4x9R5NzlunU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/742d35-8274-49af-bc12-da85c5732b85/1/DtjJoWGXLWi0RTPg4x9R5NzlunU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:62:b7:24:93:c4:76:e2:6f:f6:8c:9b:0c:dc:f4:ed:6f:2f:
02:44:2c:8e:da:ab:f3:4a:8d:61:81:45:e3:bb:e3:13:81:c4:
28:96:9d:cf:19:34:cf:41:b4:31:66:cd:28:d6:5f:2a:d3:ed:
fe:19:3f:09:b7:24:1b:95:97:62:01:77:93:db:4e:44:c4:91:
47:7e:91:61:04:83:c9:c4:76:df:a3:f5:52:58:bd:6d:1b:2b:
82:6a:75:86:b2:10:01:2f:11:8c:2d:ae:41:0b:c1:7c:c1:df:
0f:27:8a:c9:91:bc:ba:9c:47:e3:72:c8:e3:21:5b:8e:42:69:
d0:d8:6a:c2:a7:1d:bd:57:16:49:1d:2b:77:58:7b:56:21:0a:
3d:01:35:9d:49:ba:8a:b6:b6:6f:91:87:da:ba:d8:79:0b:ae:
7f:cd:f6:88:ad:4c:27:81:46:9e:36:a4:21:0d:ba:bc:1f:0d:
ec:a3:72:ed:97:f5:22:19:1d:1e:0c:44:c0:ad:d3:3b:a4:51:
63:1e:b9:1b:4d:6c:76:1e:e6:63:ab:6a:80:3a:d0:e7:39:9b:
76:02:fa:de:ad:9a:f7:8c:f1:52:1c:d8:78:95:19:ef:e9:70:
24:e3:ab:fc:45:fe:73:f2:2e:74:f9:72:43:1f:01:98:69:9d:
f0:bc:eb:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 18:40:57 2025 by rpki-client