Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/72778b-c07f-49bb-9e1d-1f0b03544810/1/dQrGfFd2g13wkZmDEJYOg8I9ncY.mft
File: dQrGfFd2g13wkZmDEJYOg8I9ncY.mft (raw, json)
Hash identifier: CqdHw2jG6fiASVxh6hbN3+vEl1R09YSjiX82czE8Uk0=
Subject key identifier: EB:1A:44:BD:13:F4:90:EB:E6:62:B8:2E:63:D5:47:6A:34:0D:ED:53
Authority key identifier: 75:0A:C6:7C:57:76:83:5D:F0:91:99:83:10:96:0E:83:C2:3D:9D:C6
Certificate issuer: /CN=750ac67c5776835df091998310960e83c23d9dc6
Certificate serial: 01975C49FBCD915610414712E4D3296DEA9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQrGfFd2g13wkZmDEJYOg8I9ncY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/72778b-c07f-49bb-9e1d-1f0b03544810/1/dQrGfFd2g13wkZmDEJYOg8I9ncY.mft
Manifest number: 0971
Signing time: Wed 11 Jun 2025 00:00:41 +0000
Manifest this update: Wed 11 Jun 2025 00:00:41 +0000
Manifest next update: Thu 12 Jun 2025 00:00:41 +0000
Files and hashes: 1: dQrGfFd2g13wkZmDEJYOg8I9ncY.crl (hash: hTCzhd5ETOmZDgNDV/mecJeigosz+W7eZ+4RayAQ0Ro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/72778b-c07f-49bb-9e1d-1f0b03544810/1/dQrGfFd2g13wkZmDEJYOg8I9ncY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/72778b-c07f-49bb-9e1d-1f0b03544810/1/dQrGfFd2g13wkZmDEJYOg8I9ncY.mft
rsync://rpki.ripe.net/repository/DEFAULT/dQrGfFd2g13wkZmDEJYOg8I9ncY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 23:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5c:49:fb:cd:91:56:10:41:47:12:e4:d3:29:6d:ea:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=750ac67c5776835df091998310960e83c23d9dc6
Validity
Not Before: Jun 11 00:00:41 2025 GMT
Not After : Jun 12 00:00:41 2025 GMT
Subject: CN=eb1a44bd13f490ebe662b82e63d5476a340ded53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:92:ba:de:5b:bf:78:e2:5c:bd:25:88:b3:e3:
6c:7d:27:cd:79:6a:ed:2b:68:c5:85:c2:f2:4c:4a:
b8:f3:02:eb:2d:26:ff:57:32:cf:39:9d:34:6d:4c:
f1:79:7c:d6:a2:cb:ab:0f:5b:eb:f4:a6:84:e6:53:
90:0a:71:0d:0f:79:dd:9d:61:36:d4:3c:52:ae:d9:
cf:f9:67:8c:e4:ed:39:6f:0f:da:4d:3c:14:66:0f:
fe:ad:50:d0:68:92:d5:61:6e:66:bb:1c:85:5f:b0:
0d:0e:a8:f4:24:81:02:53:8f:64:fb:9b:fe:ce:85:
1c:33:3e:23:69:19:da:a0:a2:6c:a7:fa:47:9e:aa:
69:42:ef:0d:0e:95:80:a8:a7:b2:a1:3f:e3:24:b3:
d8:e5:b9:eb:fc:b3:b3:8a:07:6e:a4:82:c4:74:bf:
f2:b9:93:d2:fb:8f:1f:1e:5b:65:16:37:44:5f:90:
ff:51:5d:74:9a:97:6b:9d:4f:ce:2c:9b:02:e8:2c:
3b:7f:ad:ac:6e:1c:cc:83:3f:e0:6a:1d:3d:dd:c6:
00:cb:46:de:10:8c:4e:aa:97:cc:42:63:eb:55:23:
e8:80:71:6b:fc:cf:4f:42:84:f9:f3:d3:6b:87:31:
10:93:21:0b:57:8c:de:77:fd:40:64:ba:b8:d9:8b:
c4:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:1A:44:BD:13:F4:90:EB:E6:62:B8:2E:63:D5:47:6A:34:0D:ED:53
X509v3 Authority Key Identifier:
keyid:75:0A:C6:7C:57:76:83:5D:F0:91:99:83:10:96:0E:83:C2:3D:9D:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQrGfFd2g13wkZmDEJYOg8I9ncY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/72778b-c07f-49bb-9e1d-1f0b03544810/1/dQrGfFd2g13wkZmDEJYOg8I9ncY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/72778b-c07f-49bb-9e1d-1f0b03544810/1/dQrGfFd2g13wkZmDEJYOg8I9ncY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:1b:53:1e:b3:e0:70:e3:23:89:7e:a3:f4:5b:d2:dd:dd:9b:
ad:94:bc:55:f3:df:ca:8a:dd:b0:36:34:ca:a8:10:ae:32:8b:
99:cc:56:8e:2e:29:0d:99:dc:0f:49:21:b8:c6:a8:2a:ef:2e:
67:b2:e4:5c:93:af:43:2a:6b:2f:fb:47:1f:64:85:83:68:16:
80:71:73:e0:43:35:81:b4:19:58:69:81:1e:88:17:af:e4:0c:
c8:3c:40:dd:c7:f8:ca:1b:1f:4e:04:05:d4:3a:2f:59:5d:97:
db:1e:10:01:e6:4c:72:40:42:37:ec:8a:b0:9b:15:aa:84:62:
b0:49:7e:a8:6a:be:6a:8d:37:73:f4:ae:83:da:83:d6:06:37:
59:b4:b3:03:2d:09:15:97:1e:b2:a7:a2:69:00:5e:d5:78:fc:
e5:36:e2:96:73:e6:13:da:50:1c:bc:0f:01:cc:7d:2d:fc:b0:
06:86:b1:b0:a2:67:fb:a5:ab:68:f1:de:51:39:2f:2f:0d:1c:
10:6a:e4:40:a6:44:6f:da:80:c7:da:93:93:8a:d9:71:a5:9f:
8d:60:97:6d:36:75:6f:fb:5d:56:bd:e3:92:cc:bd:49:d4:ab:
e3:bc:26:67:81:71:6d:09:0d:7c:ed:7c:eb:bc:8d:1d:62:79:
f2:e6:67:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 06:51:27 2025 by rpki-client