
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/72778b-c07f-49bb-9e1d-1f0b03544810/1/dQrGfFd2g13wkZmDEJYOg8I9ncY.mft
File: dQrGfFd2g13wkZmDEJYOg8I9ncY.mft (raw, json)
Hash identifier: NlSp46AeZIDoSnGnMZ3Dtbltsek4LOJeC0H7IR/FTSE=
Subject key identifier: D0:B5:A0:E2:92:3B:65:19:02:4D:83:5B:93:BA:76:9D:F1:D5:36:BF
Authority key identifier: 75:0A:C6:7C:57:76:83:5D:F0:91:99:83:10:96:0E:83:C2:3D:9D:C6
Certificate issuer: /CN=750ac67c5776835df091998310960e83c23d9dc6
Certificate serial: 0197567F7D8FF42B939F0E2D68E18C7E4190
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQrGfFd2g13wkZmDEJYOg8I9ncY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/72778b-c07f-49bb-9e1d-1f0b03544810/1/dQrGfFd2g13wkZmDEJYOg8I9ncY.mft
Manifest number: 096E
Signing time: Mon 09 Jun 2025 21:01:25 +0000
Manifest this update: Mon 09 Jun 2025 21:01:25 +0000
Manifest next update: Tue 10 Jun 2025 21:01:25 +0000
Files and hashes: 1: dQrGfFd2g13wkZmDEJYOg8I9ncY.crl (hash: A2qw4QBHdP6HQXNYCGydbqphXo61rnH6YzDfch6Qr5I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/72778b-c07f-49bb-9e1d-1f0b03544810/1/dQrGfFd2g13wkZmDEJYOg8I9ncY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/72778b-c07f-49bb-9e1d-1f0b03544810/1/dQrGfFd2g13wkZmDEJYOg8I9ncY.mft
rsync://rpki.ripe.net/repository/DEFAULT/dQrGfFd2g13wkZmDEJYOg8I9ncY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 21:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:56:7f:7d:8f:f4:2b:93:9f:0e:2d:68:e1:8c:7e:41:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=750ac67c5776835df091998310960e83c23d9dc6
Validity
Not Before: Jun 9 21:01:25 2025 GMT
Not After : Jun 10 21:01:25 2025 GMT
Subject: CN=d0b5a0e2923b6519024d835b93ba769df1d536bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:97:cf:b4:a3:66:67:ad:cb:d7:5f:6a:a4:2b:
5a:98:aa:76:d0:df:19:f8:e7:fb:55:1c:fc:01:82:
3c:37:62:60:e3:62:57:ec:2a:fd:4e:b7:40:fc:0c:
4b:3b:c6:20:26:75:42:fd:5b:fd:b0:a9:ce:3f:bf:
df:49:e5:36:23:82:0d:2d:4e:e8:44:a9:32:dc:a8:
6a:0e:27:f0:ca:1e:e0:e2:dc:75:d7:83:f0:44:85:
46:96:6b:9e:19:51:d3:ec:97:bf:1e:b2:0a:63:73:
b4:6e:f3:15:e9:43:bb:ba:45:97:6a:2f:ac:25:d9:
88:11:86:57:89:ff:e9:7a:14:32:06:b5:18:ec:55:
02:a8:4f:a6:8a:9a:a4:8d:76:34:d8:47:e6:12:8d:
e7:e7:51:e8:33:0e:ce:ce:28:0c:28:5b:90:2c:1e:
e4:8f:ac:63:8f:38:4b:77:7f:4f:d0:f6:ad:c9:bc:
de:da:36:9e:11:a3:51:af:84:bd:06:3c:9e:33:80:
ad:0b:19:ce:67:7c:2e:4e:96:f9:20:bd:bc:58:0d:
ec:37:9b:e1:3a:f4:05:d2:e3:b2:b6:ba:b9:f7:a9:
24:d4:c0:57:ad:5c:77:3f:86:a0:76:24:8c:c4:cf:
ed:b3:3d:95:56:7f:a3:67:31:83:f7:c3:f8:23:22:
e5:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:B5:A0:E2:92:3B:65:19:02:4D:83:5B:93:BA:76:9D:F1:D5:36:BF
X509v3 Authority Key Identifier:
keyid:75:0A:C6:7C:57:76:83:5D:F0:91:99:83:10:96:0E:83:C2:3D:9D:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQrGfFd2g13wkZmDEJYOg8I9ncY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/72778b-c07f-49bb-9e1d-1f0b03544810/1/dQrGfFd2g13wkZmDEJYOg8I9ncY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/72778b-c07f-49bb-9e1d-1f0b03544810/1/dQrGfFd2g13wkZmDEJYOg8I9ncY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:a3:11:d1:16:57:d5:df:1f:b8:9d:9f:07:77:d9:0a:f9:f4:
8f:f9:88:c4:ee:9f:5b:6a:ac:b1:f7:07:c3:a8:1f:bc:04:67:
8d:82:55:fa:e8:70:50:45:b0:84:a7:5a:22:e8:63:24:86:06:
c9:44:87:92:ae:31:43:17:ce:ca:4e:7f:1b:12:4d:c8:cb:d6:
94:3a:d6:fa:74:1c:9c:bb:dc:67:ac:fe:33:8d:5f:5c:1f:4a:
e5:48:11:f1:9e:89:6b:27:39:f0:ea:8c:ec:c8:07:d4:3c:2f:
66:54:08:43:8b:16:ab:c3:b5:65:0b:a9:96:a9:8b:6b:04:f4:
0f:04:8c:b3:5e:10:93:cb:d4:b8:6f:bd:81:e7:be:c0:c9:57:
32:3c:31:2a:be:0b:29:93:1c:00:37:ee:89:40:11:d0:5b:ea:
0a:05:ff:06:8e:20:ed:51:09:09:ba:52:ca:0b:bd:9e:55:58:
6a:f6:c4:dd:7d:b8:fb:d1:2a:19:7a:98:ef:7d:51:9d:b5:d3:
c3:04:69:fa:de:f3:82:d2:6d:7e:4a:63:a9:ae:f5:fe:64:8e:
fc:5d:71:5a:03:f4:e9:a0:fc:2c:16:84:cc:a7:04:46:b9:36:
52:ed:66:36:d7:b1:a1:ba:55:b7:f6:85:e1:df:27:06:dc:35:
41:9b:30:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 07:31:15 2025 by rpki-client