Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/72778b-c07f-49bb-9e1d-1f0b03544810/1/dQrGfFd2g13wkZmDEJYOg8I9ncY.mft
File: dQrGfFd2g13wkZmDEJYOg8I9ncY.mft (raw, json)
Hash identifier: PjpZEKQv44w3pgCg1tjKRJKzOD7ajoKsqR15OUE6pwE=
Subject key identifier: AD:41:B5:89:4B:FD:2F:FD:89:13:65:81:54:6B:0E:5F:9D:4B:F9:45
Authority key identifier: 75:0A:C6:7C:57:76:83:5D:F0:91:99:83:10:96:0E:83:C2:3D:9D:C6
Certificate issuer: /CN=750ac67c5776835df091998310960e83c23d9dc6
Certificate serial: 019771888B5E11011942F1874EA7C392D170
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQrGfFd2g13wkZmDEJYOg8I9ncY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/72778b-c07f-49bb-9e1d-1f0b03544810/1/dQrGfFd2g13wkZmDEJYOg8I9ncY.mft
Manifest number: 097C
Signing time: Sun 15 Jun 2025 03:01:03 +0000
Manifest this update: Sun 15 Jun 2025 03:01:03 +0000
Manifest next update: Mon 16 Jun 2025 03:01:03 +0000
Files and hashes: 1: dQrGfFd2g13wkZmDEJYOg8I9ncY.crl (hash: d0W0dnQ9KUXjvjfFv3J8Fj3KNZlzMX/urknuVrRuu00=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/72778b-c07f-49bb-9e1d-1f0b03544810/1/dQrGfFd2g13wkZmDEJYOg8I9ncY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/72778b-c07f-49bb-9e1d-1f0b03544810/1/dQrGfFd2g13wkZmDEJYOg8I9ncY.mft
rsync://rpki.ripe.net/repository/DEFAULT/dQrGfFd2g13wkZmDEJYOg8I9ncY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 03:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:88:8b:5e:11:01:19:42:f1:87:4e:a7:c3:92:d1:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=750ac67c5776835df091998310960e83c23d9dc6
Validity
Not Before: Jun 15 03:01:03 2025 GMT
Not After : Jun 16 03:01:03 2025 GMT
Subject: CN=ad41b5894bfd2ffd89136581546b0e5f9d4bf945
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:b8:c8:83:b3:ce:2d:a0:40:4f:f6:60:34:59:
04:96:a9:a7:5e:cc:84:aa:61:44:b6:58:8e:e6:62:
98:23:45:eb:09:3a:a3:7f:ea:0b:96:64:77:7b:92:
6f:94:a7:97:00:2a:57:97:39:30:b6:71:71:77:cb:
0d:62:b7:28:20:ad:48:05:50:08:cc:33:1e:11:e0:
35:b5:8b:b7:0d:89:a0:8f:c8:1c:3f:6e:38:fd:5c:
0b:ec:39:fd:63:8a:1d:ca:f3:ba:29:0d:d9:ea:50:
ed:72:6b:e0:bb:57:48:12:19:4f:ea:d5:58:72:c4:
72:c3:af:71:40:e5:09:92:80:bf:2a:4b:03:e3:2a:
39:af:5d:0b:b2:18:c7:4b:d9:6f:a3:54:13:d7:d3:
9a:10:42:69:77:4a:9f:04:d4:18:08:b9:05:76:e6:
9d:2c:10:77:73:75:4e:3b:3e:55:c4:46:76:af:1b:
66:2e:11:26:25:52:fe:4c:cf:c1:3e:57:57:73:76:
ba:99:b2:11:9f:91:46:44:92:22:84:c7:24:3b:59:
d3:e5:bf:72:91:52:76:33:f0:9f:c7:99:3d:23:4a:
da:40:60:bb:24:86:ca:42:2d:32:6a:44:55:98:f8:
6e:ee:29:66:ed:df:da:7b:41:e1:c1:09:97:e6:2d:
ba:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:41:B5:89:4B:FD:2F:FD:89:13:65:81:54:6B:0E:5F:9D:4B:F9:45
X509v3 Authority Key Identifier:
keyid:75:0A:C6:7C:57:76:83:5D:F0:91:99:83:10:96:0E:83:C2:3D:9D:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQrGfFd2g13wkZmDEJYOg8I9ncY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/72778b-c07f-49bb-9e1d-1f0b03544810/1/dQrGfFd2g13wkZmDEJYOg8I9ncY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/72778b-c07f-49bb-9e1d-1f0b03544810/1/dQrGfFd2g13wkZmDEJYOg8I9ncY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:71:5c:24:88:25:4e:a5:24:3d:ed:ee:b1:f3:68:6f:51:30:
72:74:ea:dd:18:ab:f1:5b:f1:bf:cd:21:2a:cb:a5:da:a3:aa:
96:53:0f:36:f2:de:86:ce:dc:83:d7:67:8c:0a:2c:5e:93:db:
f7:9c:73:37:4e:ce:72:bf:61:cd:8a:b3:8c:10:4e:95:99:a6:
f6:c3:25:e8:8e:f0:a5:3f:01:6a:5c:58:8f:f3:10:db:dc:7d:
0b:34:ca:ec:60:10:87:42:b9:8f:00:34:34:15:f4:88:2e:5c:
74:23:e8:e1:cd:5a:4d:40:0b:e9:08:d6:45:bf:4f:95:2e:05:
91:24:63:d7:ba:80:c8:e5:cc:fc:b8:52:ea:f5:9a:5e:3c:04:
ff:dd:13:2f:89:48:d9:23:fb:84:4b:3a:6e:c0:f4:4c:08:24:
5b:05:d1:43:04:e5:f6:79:ee:9d:aa:1c:f1:bf:db:e8:98:d0:
22:85:c0:7a:51:ea:49:71:8f:90:89:ed:2b:0f:d9:f2:f5:9d:
3c:8b:64:7b:2b:dc:0e:45:1b:63:42:5c:7f:46:9b:cb:83:39:
c0:b1:08:ae:5b:d2:9e:a4:3b:42:8c:71:c8:41:2d:07:8d:9e:
ef:38:8d:15:8f:12:42:0e:22:0b:48:a2:fd:2d:7e:fa:af:41:
7c:fd:52:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:45:23 2025 by rpki-client