Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/1f5681-b105-4ff1-9bf4-adc56d43e0c4/1/DlNS2UQbZcIBbtjrfi8jWVRDT10.mft
File: DlNS2UQbZcIBbtjrfi8jWVRDT10.mft (raw, json)
Hash identifier: UGmGuXLnc8+F6lM6lAvWcEtZYc4bCE2vTmzizeWGJHk=
Subject key identifier: B6:18:80:9A:12:88:A5:D3:B3:A1:6A:51:E3:7A:82:0F:22:3E:DF:35
Authority key identifier: 0E:53:52:D9:44:1B:65:C2:01:6E:D8:EB:7E:2F:23:59:54:43:4F:5D
Certificate issuer: /CN=0e5352d9441b65c2016ed8eb7e2f235954434f5d
Certificate serial: 0197B70F1240A6BB429F5BCC6CEB41AE94F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DlNS2UQbZcIBbtjrfi8jWVRDT10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/1f5681-b105-4ff1-9bf4-adc56d43e0c4/1/DlNS2UQbZcIBbtjrfi8jWVRDT10.mft
Manifest number: 015C
Signing time: Sat 28 Jun 2025 15:01:47 +0000
Manifest this update: Sat 28 Jun 2025 15:01:47 +0000
Manifest next update: Sun 29 Jun 2025 15:01:47 +0000
Files and hashes: 1: DlNS2UQbZcIBbtjrfi8jWVRDT10.crl (hash: Utnd9E5icz53MrzfTnyhblk/OsaXoJTxV2IQP+g66cU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/1f5681-b105-4ff1-9bf4-adc56d43e0c4/1/DlNS2UQbZcIBbtjrfi8jWVRDT10.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/1f5681-b105-4ff1-9bf4-adc56d43e0c4/1/DlNS2UQbZcIBbtjrfi8jWVRDT10.mft
rsync://rpki.ripe.net/repository/DEFAULT/DlNS2UQbZcIBbtjrfi8jWVRDT10.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:12:40:a6:bb:42:9f:5b:cc:6c:eb:41:ae:94:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e5352d9441b65c2016ed8eb7e2f235954434f5d
Validity
Not Before: Jun 28 15:01:47 2025 GMT
Not After : Jun 29 15:01:47 2025 GMT
Subject: CN=b618809a1288a5d3b3a16a51e37a820f223edf35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:44:94:38:60:48:63:75:cd:39:c7:4b:dd:e7:
da:10:bc:5e:73:c4:2d:9f:1e:b1:54:db:58:5d:b4:
01:86:f2:c6:74:3b:24:e7:f4:70:2c:c8:5b:c7:54:
c3:58:9e:49:85:c7:48:bc:94:cb:92:aa:0a:cc:ef:
02:a4:f1:8a:41:0c:72:a1:b5:2b:06:38:73:77:0c:
59:34:87:a2:61:d4:e0:39:df:4f:ae:d2:41:36:ea:
df:e5:f4:1f:da:1a:9f:51:b3:16:0b:ac:85:6a:71:
67:7e:6a:75:64:26:cc:f8:29:6e:9c:67:d6:66:b4:
5f:7c:3f:48:df:00:d2:8b:61:a2:8d:03:10:97:8c:
d9:9f:f8:f1:a7:69:42:a2:70:08:fb:f3:34:c8:e3:
e0:f2:42:35:e0:90:e5:27:7f:12:31:8a:3d:67:f3:
62:cd:ee:ce:3f:9a:89:16:31:d1:00:4c:67:fa:57:
48:49:98:f0:fd:7d:df:b9:28:c8:24:63:a1:2f:4c:
ea:df:8f:f6:22:97:4b:8d:d2:c3:b7:20:62:e6:63:
e1:c1:b0:91:87:38:66:7b:37:3b:ae:ce:b1:5f:4b:
6d:7c:70:b7:23:a9:4c:b4:73:51:59:d6:9e:da:fc:
e6:1c:8a:ff:23:f1:af:d2:34:48:db:b8:39:f9:ac:
e5:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:18:80:9A:12:88:A5:D3:B3:A1:6A:51:E3:7A:82:0F:22:3E:DF:35
X509v3 Authority Key Identifier:
keyid:0E:53:52:D9:44:1B:65:C2:01:6E:D8:EB:7E:2F:23:59:54:43:4F:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DlNS2UQbZcIBbtjrfi8jWVRDT10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/1f5681-b105-4ff1-9bf4-adc56d43e0c4/1/DlNS2UQbZcIBbtjrfi8jWVRDT10.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/1f5681-b105-4ff1-9bf4-adc56d43e0c4/1/DlNS2UQbZcIBbtjrfi8jWVRDT10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:d4:4e:05:6b:af:4f:62:41:bf:46:e6:36:5c:83:33:2f:94:
b4:f4:99:05:90:ba:bd:ec:15:3a:0f:fe:06:78:03:3c:7d:94:
1f:54:21:a3:44:b9:a4:f5:b5:3b:07:bd:e3:fe:d7:74:3f:79:
67:a4:f7:9b:af:a7:38:da:7d:16:b4:97:a8:1f:d9:32:a0:a5:
87:ac:75:89:3b:43:e2:55:54:95:75:ea:97:87:11:24:61:29:
37:77:a2:73:fe:fb:3c:6b:20:e3:b2:19:dc:a9:20:72:f0:3e:
8e:ec:95:ea:8c:83:c5:19:1e:f2:20:8b:ad:d8:2c:2e:f1:6f:
16:61:d8:4b:d2:f9:a0:bb:c2:ed:c0:06:95:bd:8a:2a:69:0d:
89:b7:5e:36:04:66:0c:da:cf:17:ed:d0:bb:5b:89:70:4d:3f:
98:1b:7e:08:82:8a:ac:59:12:2a:ea:8c:83:bb:25:e0:7e:0b:
18:c4:57:ab:3d:0f:d0:2b:c2:7e:53:76:90:e4:53:39:28:71:
85:24:66:be:52:1f:3f:72:f2:0c:26:19:9c:6e:f5:fc:31:37:
78:8f:5f:d9:c4:13:59:16:b3:9c:ea:c7:8a:f2:16:6d:d0:fd:
0b:b0:95:c1:70:f7:bf:1f:c4:9c:ba:bf:1b:23:c6:4a:15:45:
6f:f9:32:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:46:30 2025 by rpki-client