Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/ca7809-a7a8-48bc-84e8-6304232bec3c/1/DwgImqp8KDZUvNpQqTNGTnEnkbA.mft
File: DwgImqp8KDZUvNpQqTNGTnEnkbA.mft (raw, json)
Hash identifier: IFQhCEFqmfhjNAdAvzpQ27JTXU3VgioNu0IsHUxXwzA=
Subject key identifier: 1B:30:6E:AE:49:26:53:A5:7E:1B:66:A6:BC:DD:59:11:EE:D4:04:F6
Authority key identifier: 0F:08:08:9A:AA:7C:28:36:54:BC:DA:50:A9:33:46:4E:71:27:91:B0
Certificate issuer: /CN=0f08089aaa7c283654bcda50a933464e712791b0
Certificate serial: 0197B70E68A4F726CA95B2CD233B0620BCC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DwgImqp8KDZUvNpQqTNGTnEnkbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/ca7809-a7a8-48bc-84e8-6304232bec3c/1/DwgImqp8KDZUvNpQqTNGTnEnkbA.mft
Manifest number: 1263
Signing time: Sat 28 Jun 2025 15:01:04 +0000
Manifest this update: Sat 28 Jun 2025 15:01:04 +0000
Manifest next update: Sun 29 Jun 2025 15:01:04 +0000
Files and hashes: 1: DwgImqp8KDZUvNpQqTNGTnEnkbA.crl (hash: w8dfUXS+2cC9DMQk3Sc4t60MrIaICOvKvgSnbZOAyrg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/ca7809-a7a8-48bc-84e8-6304232bec3c/1/DwgImqp8KDZUvNpQqTNGTnEnkbA.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/ca7809-a7a8-48bc-84e8-6304232bec3c/1/DwgImqp8KDZUvNpQqTNGTnEnkbA.mft
rsync://rpki.ripe.net/repository/DEFAULT/DwgImqp8KDZUvNpQqTNGTnEnkbA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:68:a4:f7:26:ca:95:b2:cd:23:3b:06:20:bc:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f08089aaa7c283654bcda50a933464e712791b0
Validity
Not Before: Jun 28 15:01:04 2025 GMT
Not After : Jun 29 15:01:04 2025 GMT
Subject: CN=1b306eae492653a57e1b66a6bcdd5911eed404f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:6d:4c:bb:a4:da:09:8f:28:20:fb:71:4b:88:
10:4f:0d:ee:c7:c4:82:58:fc:0c:a5:0f:ad:d9:9c:
53:14:1e:c6:12:d4:4c:dc:61:12:63:4b:42:95:a2:
45:7e:75:d4:7f:13:42:8e:01:f8:de:af:6d:2a:8f:
46:b1:5e:80:6c:ef:68:e3:e7:2d:f2:23:6b:be:78:
04:ad:45:01:36:73:d9:43:2c:95:b7:3f:65:bc:23:
90:fe:91:94:d4:f7:64:6e:f8:35:98:b1:4a:95:a1:
fc:e4:40:3e:0e:52:78:90:ca:e3:d4:f0:db:ed:63:
55:9d:bb:37:2d:6d:bf:3b:0f:75:5b:82:4b:dc:86:
44:3d:10:20:ae:09:76:5c:99:1a:19:e2:b8:ba:a5:
b9:a4:e4:27:7c:e5:fd:ac:56:b1:4c:84:62:db:ae:
85:6f:ea:d0:de:0c:7c:88:c8:7d:7a:8c:1d:03:8a:
9c:8f:8c:24:49:89:40:87:0f:17:ca:e5:a8:37:f2:
79:89:08:f2:ca:58:5f:7b:e2:3c:9d:71:88:cb:07:
c2:7f:64:cb:d0:26:fc:a4:73:05:ef:b7:f7:fe:99:
f2:50:26:aa:7a:4d:3c:35:47:4a:84:f7:fc:7c:ed:
34:d8:4a:e7:0c:57:b1:35:9d:bf:82:49:8e:f9:26:
e9:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:30:6E:AE:49:26:53:A5:7E:1B:66:A6:BC:DD:59:11:EE:D4:04:F6
X509v3 Authority Key Identifier:
keyid:0F:08:08:9A:AA:7C:28:36:54:BC:DA:50:A9:33:46:4E:71:27:91:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DwgImqp8KDZUvNpQqTNGTnEnkbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/ca7809-a7a8-48bc-84e8-6304232bec3c/1/DwgImqp8KDZUvNpQqTNGTnEnkbA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/ca7809-a7a8-48bc-84e8-6304232bec3c/1/DwgImqp8KDZUvNpQqTNGTnEnkbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:be:66:1b:1c:6a:3d:0d:0b:77:bf:a4:db:cc:f8:b9:b0:f1:
8c:84:b3:5e:11:c5:b4:12:07:5a:37:c3:a8:1a:a1:ae:62:d9:
49:fc:31:e5:d1:99:d8:6a:14:dc:17:2f:7e:45:29:05:c6:ed:
24:8a:29:12:50:35:6c:7f:bc:0e:06:aa:08:3a:1e:23:7a:cd:
c3:cc:8f:00:68:02:92:24:75:88:7f:48:2d:73:f5:92:c8:a0:
38:e2:f5:07:22:ca:ff:cd:82:9e:47:3f:a5:da:fb:97:cd:f5:
1d:da:98:ca:2b:e8:43:a1:9f:23:cd:8c:c3:3a:ec:5b:7b:46:
65:f6:57:09:54:f4:10:f2:e4:3f:da:88:22:f9:67:4e:e2:56:
0e:0a:5b:a1:15:24:0f:4c:d9:89:31:75:df:70:a9:ce:6e:e0:
3c:15:3b:cb:5b:be:95:2e:25:5e:9d:6b:39:dd:57:15:d3:5e:
68:d2:c7:7f:c5:5c:cb:42:12:c2:02:5d:fa:66:94:07:1c:e4:
77:e1:f9:ba:e4:09:3f:74:4d:c6:08:56:fd:e7:6f:c7:4b:9c:
2e:22:6b:26:b0:ff:16:d9:fe:4b:20:28:b4:16:16:6d:a7:a1:
e2:31:51:cc:81:2b:c1:f0:ce:bf:b8:f6:e9:5d:01:8a:62:11:
ac:5b:78:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:20:14 2025 by rpki-client