Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/da33ae-16cc-4c9a-bf9c-717998aa3cff/1/dOQ_nlrj9ur7UGiuiPGMKeRDWQc.mft
File: dOQ_nlrj9ur7UGiuiPGMKeRDWQc.mft (raw, json)
Hash identifier: HZHBMVdRoNUe3GzAUxZZT+pBu1baEU/xe4DrMBhR1Do=
Subject key identifier: D1:D7:12:FE:CB:8E:A9:12:F3:A0:7C:8E:82:B6:D9:4C:65:D1:23:EF
Authority key identifier: 74:E4:3F:9E:5A:E3:F6:EA:FB:50:68:AE:88:F1:8C:29:E4:43:59:07
Certificate issuer: /CN=74e43f9e5ae3f6eafb5068ae88f18c29e4435907
Certificate serial: 0197D1AB5D8C78AD150512E128CA47B887EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dOQ_nlrj9ur7UGiuiPGMKeRDWQc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/da33ae-16cc-4c9a-bf9c-717998aa3cff/1/dOQ_nlrj9ur7UGiuiPGMKeRDWQc.mft
Manifest number: 15BF
Signing time: Thu 03 Jul 2025 19:02:38 +0000
Manifest this update: Thu 03 Jul 2025 19:02:38 +0000
Manifest next update: Fri 04 Jul 2025 19:02:38 +0000
Files and hashes: 1: dOQ_nlrj9ur7UGiuiPGMKeRDWQc.crl (hash: rSB9PchfyqvOsgrDj3nhUhBBwkbVDqZcXH1MAtfnnEY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/da33ae-16cc-4c9a-bf9c-717998aa3cff/1/dOQ_nlrj9ur7UGiuiPGMKeRDWQc.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/da33ae-16cc-4c9a-bf9c-717998aa3cff/1/dOQ_nlrj9ur7UGiuiPGMKeRDWQc.mft
rsync://rpki.ripe.net/repository/DEFAULT/dOQ_nlrj9ur7UGiuiPGMKeRDWQc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 14:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d1:ab:5d:8c:78:ad:15:05:12:e1:28:ca:47:b8:87:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74e43f9e5ae3f6eafb5068ae88f18c29e4435907
Validity
Not Before: Jul 3 19:02:38 2025 GMT
Not After : Jul 4 19:02:38 2025 GMT
Subject: CN=d1d712fecb8ea912f3a07c8e82b6d94c65d123ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:23:45:8f:ec:41:03:70:aa:1f:9b:69:28:86:
c8:df:31:0a:9f:d8:62:39:9e:dd:15:0a:9c:0b:e9:
7c:e9:41:40:a8:55:e7:cd:34:60:99:c2:67:25:6f:
9f:2c:55:b0:58:7e:cd:90:8a:91:84:39:0a:30:ce:
b6:29:8e:d7:68:d4:2c:8f:29:88:a5:80:0b:b1:d4:
2b:10:7c:31:f7:5e:99:28:a6:f2:bb:34:e3:8d:94:
a2:3f:c9:15:da:5e:9b:a3:03:36:22:4d:ab:65:3a:
67:bf:0f:70:ec:09:1a:2a:75:83:36:ab:c7:32:db:
78:48:f4:15:50:28:ad:0d:35:e5:f0:3b:e4:f7:66:
66:b3:5c:a4:28:ec:79:11:f9:b6:a9:e3:e5:48:1c:
79:09:bd:30:56:46:88:71:21:f7:83:5f:06:b7:4b:
66:98:7d:c0:22:5d:f4:06:95:e8:e8:b4:cc:a2:b4:
22:7a:13:2c:73:17:75:f0:d2:16:09:ec:e4:37:19:
5c:95:a0:bc:eb:cb:53:d8:30:80:17:2d:ed:de:90:
29:74:3f:41:2b:05:56:c3:e5:99:75:8d:01:1e:2d:
6d:62:7d:38:a7:33:13:4e:2b:c4:8a:42:25:0e:06:
ff:a4:15:13:1d:06:8f:33:31:a5:02:47:88:73:25:
51:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:D7:12:FE:CB:8E:A9:12:F3:A0:7C:8E:82:B6:D9:4C:65:D1:23:EF
X509v3 Authority Key Identifier:
keyid:74:E4:3F:9E:5A:E3:F6:EA:FB:50:68:AE:88:F1:8C:29:E4:43:59:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dOQ_nlrj9ur7UGiuiPGMKeRDWQc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/da33ae-16cc-4c9a-bf9c-717998aa3cff/1/dOQ_nlrj9ur7UGiuiPGMKeRDWQc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/da33ae-16cc-4c9a-bf9c-717998aa3cff/1/dOQ_nlrj9ur7UGiuiPGMKeRDWQc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:de:9f:fe:bc:b6:af:ea:65:80:a7:c8:5b:18:b3:14:c1:e4:
6f:9d:76:31:6d:09:9b:c0:47:30:71:1d:49:e1:16:87:f4:90:
79:ea:5f:9c:8c:bd:c2:2c:a3:e9:62:fd:01:51:61:a1:cc:8f:
b0:b2:29:45:4a:9f:f8:19:bb:1d:ba:aa:e4:16:d6:d1:41:e5:
7b:42:c3:11:c1:60:02:dc:d6:0c:ab:b3:fe:96:a7:f5:8c:2c:
4b:ed:82:65:67:be:91:4a:ac:c1:59:c8:cf:36:b8:50:1f:73:
d8:af:81:32:ce:3b:b1:9c:5e:db:de:1c:22:da:eb:c7:f1:e0:
5b:25:a0:91:30:8e:b4:62:a7:e6:fb:7e:7d:39:e5:7f:91:3c:
ec:73:7f:38:97:97:13:4d:51:33:a4:25:e7:09:e6:15:2a:b9:
ee:3a:f4:ef:bd:85:35:8f:ef:8d:b2:3a:c1:81:27:07:8c:3d:
c2:4b:6b:76:82:be:19:2b:7c:5d:c8:47:59:81:a2:7d:ce:43:
60:9d:64:32:c7:41:8f:c7:a9:39:08:f7:1d:a1:4d:19:15:9e:
8c:2a:73:2e:6d:bd:58:6a:44:d5:58:3f:34:98:8e:cf:6a:fa:
f3:2f:9c:e2:ed:70:f1:c8:ac:7e:51:99:cb:7b:85:49:dd:80:
f9:87:fb:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 21:28:10 2025 by rpki-client