Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/72778b-c07f-49bb-9e1d-1f0b03544810/1/dQrGfFd2g13wkZmDEJYOg8I9ncY.mft
File: dQrGfFd2g13wkZmDEJYOg8I9ncY.mft (raw, json)
Hash identifier: QFwDWnirOT8Bz/Av2PZm3aaWyxmODVLmrNuG9EITeQw=
Subject key identifier: 21:E0:E6:A7:AB:EB:93:7E:61:3E:A9:A1:B2:D5:81:10:8B:7C:38:50
Authority key identifier: 75:0A:C6:7C:57:76:83:5D:F0:91:99:83:10:96:0E:83:C2:3D:9D:C6
Certificate issuer: /CN=750ac67c5776835df091998310960e83c23d9dc6
Certificate serial: 0197586D1F09E4D3D2C3DEDC324B0E2A579A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQrGfFd2g13wkZmDEJYOg8I9ncY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/72778b-c07f-49bb-9e1d-1f0b03544810/1/dQrGfFd2g13wkZmDEJYOg8I9ncY.mft
Manifest number: 096F
Signing time: Tue 10 Jun 2025 06:00:35 +0000
Manifest this update: Tue 10 Jun 2025 06:00:35 +0000
Manifest next update: Wed 11 Jun 2025 06:00:35 +0000
Files and hashes: 1: dQrGfFd2g13wkZmDEJYOg8I9ncY.crl (hash: BXG+Dn0VUCoNXM29bIL4I6vi91o/PSyzPr4sNVsaF+k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/72778b-c07f-49bb-9e1d-1f0b03544810/1/dQrGfFd2g13wkZmDEJYOg8I9ncY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/72778b-c07f-49bb-9e1d-1f0b03544810/1/dQrGfFd2g13wkZmDEJYOg8I9ncY.mft
rsync://rpki.ripe.net/repository/DEFAULT/dQrGfFd2g13wkZmDEJYOg8I9ncY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 06:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:58:6d:1f:09:e4:d3:d2:c3:de:dc:32:4b:0e:2a:57:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=750ac67c5776835df091998310960e83c23d9dc6
Validity
Not Before: Jun 10 06:00:35 2025 GMT
Not After : Jun 11 06:00:35 2025 GMT
Subject: CN=21e0e6a7abeb937e613ea9a1b2d581108b7c3850
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:ca:35:99:c3:25:cc:9f:9a:2e:ce:7a:c8:0d:
a6:67:ba:b4:8e:8a:2b:e3:db:08:59:69:94:cd:04:
83:01:4b:65:24:cc:42:95:28:25:11:0d:28:a5:aa:
cf:0c:47:b2:98:6a:17:a9:56:9f:76:a5:1f:5d:1d:
17:31:09:56:83:22:fe:07:1c:01:33:68:f1:33:49:
05:e8:3c:e1:73:f3:5e:37:2a:a3:a0:a4:7a:52:c3:
fc:e1:b4:b3:b5:6e:4b:b6:35:69:0c:f9:da:6f:c0:
63:f3:19:e3:00:bb:26:e1:52:03:1a:5a:01:89:61:
69:66:90:87:25:b3:21:1f:8d:a9:24:eb:bd:bc:1f:
b4:3b:df:db:5e:4e:e5:91:e6:42:80:f9:3d:72:a0:
6b:f4:01:e7:72:a8:a8:84:81:88:c7:4d:b3:89:31:
c5:b7:e9:3e:06:16:f9:13:75:04:98:bf:29:81:62:
9d:25:6a:fa:ae:71:1f:c2:94:1a:1a:a0:cf:27:25:
50:78:8d:11:59:d8:d6:9a:9b:ff:39:93:56:d0:61:
b5:5c:a2:0e:ea:cf:19:4d:ab:5a:f6:ca:35:46:c6:
0e:73:bb:49:d4:5b:45:d4:e6:79:ff:e0:7a:51:ee:
6c:a3:fb:08:53:be:14:4d:0f:87:68:b9:0e:02:64:
36:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:E0:E6:A7:AB:EB:93:7E:61:3E:A9:A1:B2:D5:81:10:8B:7C:38:50
X509v3 Authority Key Identifier:
keyid:75:0A:C6:7C:57:76:83:5D:F0:91:99:83:10:96:0E:83:C2:3D:9D:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQrGfFd2g13wkZmDEJYOg8I9ncY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/72778b-c07f-49bb-9e1d-1f0b03544810/1/dQrGfFd2g13wkZmDEJYOg8I9ncY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/72778b-c07f-49bb-9e1d-1f0b03544810/1/dQrGfFd2g13wkZmDEJYOg8I9ncY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:6f:1c:a3:ac:94:88:23:d8:23:5c:ba:59:0c:e4:60:66:18:
c6:66:03:4c:f0:d7:8a:7e:c1:cd:14:d9:7b:d2:e0:dc:b5:1e:
ae:9b:dc:a3:08:19:9e:7a:2a:e0:6e:a3:28:56:20:d2:49:f1:
7d:b4:2e:a6:b5:6c:64:35:e6:75:f8:dc:37:e7:25:e5:bc:6e:
8a:6d:8c:42:f6:53:56:10:f9:77:f2:67:71:87:94:62:07:2d:
13:63:51:c6:a2:ca:67:b6:98:e8:cf:2c:7e:a2:5d:95:2b:ac:
57:3b:3f:9b:76:91:ba:14:55:42:dc:b5:bb:f0:58:d9:12:5e:
bc:fe:ec:2a:b2:c9:d8:b3:5e:32:ea:33:87:02:e5:fd:88:03:
44:ec:d1:0a:c0:b1:e6:c9:06:6e:a7:85:9e:00:a4:be:ff:0c:
f8:df:48:2d:14:ac:49:d6:39:79:a1:58:2a:9e:74:f7:d0:0e:
34:b7:d8:7e:07:c2:6f:4c:db:4d:e6:b9:07:fa:14:98:65:c6:
b9:0b:fd:2d:5c:af:a7:f2:de:33:de:2c:e4:85:31:a1:b8:c6:
4c:39:22:f8:67:76:cf:10:cf:06:3e:32:4c:1a:ec:cf:93:e8:
54:77:b3:c1:22:85:d4:5e:65:12:ce:6f:66:b1:ac:c7:7c:a7:
49:8c:b4:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 13:47:58 2025 by rpki-client