Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/31a78f-c31b-4381-8631-6829c0fc738e/1/1-P-dpDC_8mjIQ6LlhgmMjXAhygY.mft
File: 1-P-dpDC_8mjIQ6LlhgmMjXAhygY.mft (raw, json)
Hash identifier: SNdGmfgCQrGxOEA7ZdKSqRUFb2H1Q0BExNYMzbhLxZY=
Subject key identifier: D2:EE:84:A4:E4:E7:CD:E0:08:63:A0:60:1C:81:A8:37:99:09:FB:41
Authority key identifier: F8:FF:9D:A4:30:BF:F2:68:C8:43:A2:E5:86:09:8C:8D:70:21:CA:06
Certificate issuer: /CN=f8ff9da430bff268c843a2e586098c8d7021ca06
Certificate serial: 0197488D1707603DCEAA1B9AB4D28F67513D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-P-dpDC_8mjIQ6LlhgmMjXAhygY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/31a78f-c31b-4381-8631-6829c0fc738e/1/1-P-dpDC_8mjIQ6LlhgmMjXAhygY.mft
Manifest number: 0C6F
Signing time: Sat 07 Jun 2025 04:01:35 +0000
Manifest this update: Sat 07 Jun 2025 04:01:35 +0000
Manifest next update: Sun 08 Jun 2025 04:01:35 +0000
Files and hashes: 1: 1-P-dpDC_8mjIQ6LlhgmMjXAhygY.crl (hash: ypqU5OUHnXJryUK8xauNvyDQHxNg40gc4eDnjPkTXcA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/31a78f-c31b-4381-8631-6829c0fc738e/1/1-P-dpDC_8mjIQ6LlhgmMjXAhygY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/31a78f-c31b-4381-8631-6829c0fc738e/1/1-P-dpDC_8mjIQ6LlhgmMjXAhygY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-P-dpDC_8mjIQ6LlhgmMjXAhygY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 04:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8d:17:07:60:3d:ce:aa:1b:9a:b4:d2:8f:67:51:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8ff9da430bff268c843a2e586098c8d7021ca06
Validity
Not Before: Jun 7 04:01:35 2025 GMT
Not After : Jun 8 04:01:35 2025 GMT
Subject: CN=d2ee84a4e4e7cde00863a0601c81a8379909fb41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:90:7f:3f:79:3c:82:55:a9:5a:58:e4:9b:39:
02:be:88:3d:c1:b5:f2:f8:f2:e8:b4:66:64:d7:f9:
d5:b6:43:40:78:36:eb:f1:ba:93:e0:3b:8a:d8:dd:
ff:a8:f8:2c:3b:66:83:51:4b:1f:44:97:fc:d8:9f:
47:02:b0:be:b9:66:66:77:04:2b:42:5d:4c:15:c3:
58:c6:e3:66:e0:16:4b:74:f5:b0:ab:e3:c9:5c:df:
0a:80:94:93:ed:15:fb:53:b7:d0:21:11:8e:07:ff:
13:24:74:6d:b8:0b:7c:ca:bd:c2:90:2a:f1:a3:2e:
84:2c:c1:ff:b5:5e:b0:86:67:56:41:d6:f1:16:13:
53:f9:55:50:e7:4a:ce:25:b8:7a:38:68:fb:48:79:
6d:34:a3:c5:32:d0:e9:55:af:62:22:da:87:3b:bf:
19:1d:a7:26:bb:f3:72:dd:49:36:4b:2b:45:b3:92:
31:e1:1f:3e:c8:41:64:a9:0b:da:de:63:cd:62:e2:
b3:9d:ae:71:59:bf:6e:73:bc:5c:50:ca:92:5d:4b:
5c:f7:ac:1d:da:cf:27:2b:6e:94:80:6d:89:5d:94:
8c:f1:fd:f1:cb:97:fb:56:b3:e0:6f:de:44:cf:42:
09:24:0e:09:91:7a:4d:6a:d7:35:85:00:d6:9d:11:
12:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:EE:84:A4:E4:E7:CD:E0:08:63:A0:60:1C:81:A8:37:99:09:FB:41
X509v3 Authority Key Identifier:
keyid:F8:FF:9D:A4:30:BF:F2:68:C8:43:A2:E5:86:09:8C:8D:70:21:CA:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-P-dpDC_8mjIQ6LlhgmMjXAhygY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/31a78f-c31b-4381-8631-6829c0fc738e/1/1-P-dpDC_8mjIQ6LlhgmMjXAhygY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/31a78f-c31b-4381-8631-6829c0fc738e/1/1-P-dpDC_8mjIQ6LlhgmMjXAhygY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:8b:f5:e0:dc:fa:52:6f:32:4d:ac:33:5f:b8:25:46:f1:64:
7a:6d:ac:3f:fa:d8:f8:fc:fe:fa:bf:44:c4:dd:7a:bb:32:07:
ea:57:b3:74:fa:e5:22:56:96:b7:ee:a8:49:f0:09:52:8c:02:
ad:ba:65:aa:b8:17:25:e8:59:60:6d:5d:27:5e:f6:a9:7e:e0:
09:32:a7:b1:92:87:34:0f:cd:d9:e3:c1:cd:6d:7b:1b:fb:82:
a0:be:14:95:0c:b9:ad:f6:e5:b9:40:ba:d7:61:1d:f1:51:ef:
cd:d2:6f:34:ab:94:60:67:cf:3d:d6:2e:43:33:65:53:10:18:
48:69:46:dd:83:bc:73:b9:8f:c7:a8:f3:0d:3c:50:96:41:08:
a8:f1:95:81:bd:28:21:93:2e:99:1f:91:84:a6:ab:10:13:90:
a3:63:51:0e:63:25:60:75:1e:b0:6f:9a:18:49:b3:cd:d6:f7:
69:0f:c7:ff:75:69:5f:f4:23:23:1d:e6:90:5d:07:cc:f2:69:
da:70:5c:ac:a9:38:df:72:55:43:68:c1:8e:83:e4:1c:19:d4:
00:28:70:6d:67:9a:77:67:32:c9:ba:8a:4f:71:5b:a0:7e:6a:
ec:44:38:67:09:c2:1e:90:cb:a0:23:ee:58:66:e4:94:da:06:
39:89:e9:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:52:31 2025 by rpki-client