Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/7b2dac-0fb4-4309-8861-7231146d156f/1/DxoYFt02i3fPMr0hqeC61d9s3_A.mft
File: DxoYFt02i3fPMr0hqeC61d9s3_A.mft (raw, json)
Hash identifier: dOff2lk+DIRr26nTSIXLUnecoAzqtnoY8Z72Z6Ll/z8=
Subject key identifier: 93:FC:5E:92:26:65:BC:97:D7:A4:5E:72:3B:25:5B:CB:87:A7:6A:D7
Authority key identifier: 0F:1A:18:16:DD:36:8B:77:CF:32:BD:21:A9:E0:BA:D5:DF:6C:DF:F0
Certificate issuer: /CN=0f1a1816dd368b77cf32bd21a9e0bad5df6cdff0
Certificate serial: 0197B7452BE843BFA8656882F73798C4EB4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DxoYFt02i3fPMr0hqeC61d9s3_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/7b2dac-0fb4-4309-8861-7231146d156f/1/DxoYFt02i3fPMr0hqeC61d9s3_A.mft
Manifest number: 15B3
Signing time: Sat 28 Jun 2025 16:00:52 +0000
Manifest this update: Sat 28 Jun 2025 16:00:52 +0000
Manifest next update: Sun 29 Jun 2025 16:00:52 +0000
Files and hashes: 1: DxoYFt02i3fPMr0hqeC61d9s3_A.crl (hash: AMgi37MWejRbaBgryTjJtSz/f8aQnJJhnVoGJyk+AVI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/7b2dac-0fb4-4309-8861-7231146d156f/1/DxoYFt02i3fPMr0hqeC61d9s3_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/7b2dac-0fb4-4309-8861-7231146d156f/1/DxoYFt02i3fPMr0hqeC61d9s3_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/DxoYFt02i3fPMr0hqeC61d9s3_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:2b:e8:43:bf:a8:65:68:82:f7:37:98:c4:eb:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f1a1816dd368b77cf32bd21a9e0bad5df6cdff0
Validity
Not Before: Jun 28 16:00:52 2025 GMT
Not After : Jun 29 16:00:52 2025 GMT
Subject: CN=93fc5e922665bc97d7a45e723b255bcb87a76ad7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:88:7f:49:39:46:dd:17:f4:be:6c:31:35:39:
34:c9:cd:42:ea:14:f1:e0:e2:9c:c1:4f:4b:bb:46:
75:56:40:50:f3:e3:94:80:6b:37:51:c6:01:b3:36:
9d:e4:79:e0:fa:e4:6a:4f:d8:0a:93:54:88:00:a1:
53:96:b9:c6:7c:ff:44:89:26:61:b1:c7:d6:8e:18:
41:a0:80:68:ef:91:ff:2d:ca:d1:c4:0d:9c:f0:9a:
83:2c:be:60:e0:75:c5:e4:1c:da:6e:8f:4c:d8:f0:
33:f6:7c:37:f6:2a:b3:a6:4e:3f:86:06:5d:f9:87:
6d:f0:a8:7c:1b:2f:1b:24:0a:ce:b8:e9:60:52:b2:
e2:9d:bd:5c:c9:4a:5b:4e:79:f0:4f:37:5e:b8:e1:
a0:6d:c7:ab:71:ca:b1:e3:ec:f0:d8:bf:0a:37:3d:
c6:bb:35:fd:d6:67:d8:e3:7e:cd:d8:8f:c9:1b:c3:
86:b7:ef:30:9d:ea:9d:07:90:84:ec:7e:9b:9f:63:
ca:c2:a1:5f:1f:7b:a6:4c:dd:e8:12:f6:96:c9:33:
04:e1:a7:1c:c4:34:3b:cf:32:e3:68:fe:c9:2b:9f:
d6:9f:cd:dc:b1:40:06:79:b3:f5:f0:f2:99:ce:73:
7f:5d:46:84:43:cc:c5:44:34:e1:a3:38:e0:64:bc:
aa:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:FC:5E:92:26:65:BC:97:D7:A4:5E:72:3B:25:5B:CB:87:A7:6A:D7
X509v3 Authority Key Identifier:
keyid:0F:1A:18:16:DD:36:8B:77:CF:32:BD:21:A9:E0:BA:D5:DF:6C:DF:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DxoYFt02i3fPMr0hqeC61d9s3_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/7b2dac-0fb4-4309-8861-7231146d156f/1/DxoYFt02i3fPMr0hqeC61d9s3_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/7b2dac-0fb4-4309-8861-7231146d156f/1/DxoYFt02i3fPMr0hqeC61d9s3_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:cd:ad:1e:cc:60:31:9b:2f:52:76:8d:82:5b:47:c4:72:a3:
4c:33:01:63:89:2d:bf:88:9c:63:1a:06:2a:84:e3:21:f5:4c:
68:e8:f4:84:ee:a4:07:b8:32:b7:06:c4:7a:31:e8:31:25:de:
93:45:79:ce:9d:a1:39:58:ff:8d:57:6d:4e:35:23:0e:b9:72:
d2:ef:7f:63:9c:3b:90:f6:5d:39:cc:d6:19:a9:ce:5c:09:c2:
71:a2:9f:d2:24:9c:fa:6d:63:93:78:3c:e8:6b:70:29:9e:2e:
af:5b:52:7e:23:b6:76:07:fc:51:fe:56:1b:8b:20:c9:f5:a0:
7a:36:ad:61:09:4c:9c:7f:18:c1:a9:f6:57:d5:4c:f7:60:01:
e7:7d:e2:66:f2:af:55:31:3b:6f:65:0f:00:9d:14:3c:fd:54:
6b:0f:d4:73:6b:1c:a4:9f:7b:d7:02:3b:cd:51:01:1b:ad:10:
15:44:ef:1a:39:a9:9c:b6:72:fc:96:3c:85:d5:29:38:b0:5d:
82:f8:f7:36:f7:03:bd:cf:46:83:7e:20:79:2e:59:26:e0:2a:
a8:3c:b5:c8:94:a5:de:11:14:81:0c:96:0f:1a:e0:c5:58:3d:
f3:6b:d8:56:92:7f:20:5f:36:cd:e7:6f:c1:6a:79:19:01:1f:
21:2f:9a:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:44:32 2025 by rpki-client