Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/c49ec2-37da-41a9-96fb-5141fa39080a/1/dCL5hcs0oDx8VYFkLG1utDLIPpQ.mft
File: dCL5hcs0oDx8VYFkLG1utDLIPpQ.mft (raw, json)
Hash identifier: OVwF3PSeQxcQNJLFI2B9Wg0AW0R2K/UejwH20TurP44=
Subject key identifier: 69:C4:6C:55:FA:8C:B8:BA:D0:5F:0E:E7:38:A9:73:43:B3:2F:80:DF
Authority key identifier: 74:22:F9:85:CB:34:A0:3C:7C:55:81:64:2C:6D:6E:B4:32:C8:3E:94
Certificate issuer: /CN=7422f985cb34a03c7c5581642c6d6eb432c83e94
Certificate serial: 0197BAEBB7985A200A995FF81634D07E7927
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dCL5hcs0oDx8VYFkLG1utDLIPpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/c49ec2-37da-41a9-96fb-5141fa39080a/1/dCL5hcs0oDx8VYFkLG1utDLIPpQ.mft
Manifest number: 0D8E
Signing time: Sun 29 Jun 2025 09:01:39 +0000
Manifest this update: Sun 29 Jun 2025 09:01:39 +0000
Manifest next update: Mon 30 Jun 2025 09:01:39 +0000
Files and hashes: 1: dCL5hcs0oDx8VYFkLG1utDLIPpQ.crl (hash: 24eIOuuA3+Ukuz8RAM0rtTIIs4F2wElBFiqQjpThpv8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/c49ec2-37da-41a9-96fb-5141fa39080a/1/dCL5hcs0oDx8VYFkLG1utDLIPpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/c49ec2-37da-41a9-96fb-5141fa39080a/1/dCL5hcs0oDx8VYFkLG1utDLIPpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/dCL5hcs0oDx8VYFkLG1utDLIPpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:eb:b7:98:5a:20:0a:99:5f:f8:16:34:d0:7e:79:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7422f985cb34a03c7c5581642c6d6eb432c83e94
Validity
Not Before: Jun 29 09:01:39 2025 GMT
Not After : Jun 30 09:01:39 2025 GMT
Subject: CN=69c46c55fa8cb8bad05f0ee738a97343b32f80df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:12:64:0c:bc:91:db:52:ad:eb:b0:63:18:71:
a2:39:7d:76:65:40:2d:9c:81:47:26:2b:51:f9:8d:
79:f3:23:28:c7:25:a2:fe:5c:6e:a1:4c:1a:72:22:
8b:06:23:25:54:3e:ca:c0:8e:49:e2:3e:f9:f4:cb:
62:87:ec:d9:05:72:ae:a8:25:65:b8:9b:80:b8:ad:
03:93:88:a4:f3:ac:4a:e0:dd:9c:c2:11:80:e5:e1:
d8:1c:07:ae:55:62:12:91:e6:6a:33:5e:28:1a:e1:
4e:c3:a1:49:0b:0f:c5:dc:51:26:39:2e:40:61:71:
1a:17:36:bd:f0:65:fa:ee:f3:5d:e9:8c:86:bf:10:
1c:1b:7c:2f:7d:6d:38:a6:d8:91:a2:31:68:59:64:
56:94:e9:aa:3e:54:8f:87:42:9b:7f:89:ea:65:23:
16:a7:cd:69:78:c1:a1:93:8d:c1:b7:3e:1c:68:c0:
fb:90:9e:9f:34:5c:7d:c7:cf:0f:48:2b:e8:f5:76:
a2:d5:3e:25:94:02:a0:20:12:69:88:02:de:dc:c8:
db:39:d2:39:c6:bd:77:c3:c5:93:91:2c:7b:28:6c:
96:1c:96:e7:b7:75:aa:cf:07:de:1d:6a:38:80:ad:
56:5f:13:a1:c4:5a:f3:31:3f:aa:31:52:81:33:de:
5d:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:C4:6C:55:FA:8C:B8:BA:D0:5F:0E:E7:38:A9:73:43:B3:2F:80:DF
X509v3 Authority Key Identifier:
keyid:74:22:F9:85:CB:34:A0:3C:7C:55:81:64:2C:6D:6E:B4:32:C8:3E:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dCL5hcs0oDx8VYFkLG1utDLIPpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/c49ec2-37da-41a9-96fb-5141fa39080a/1/dCL5hcs0oDx8VYFkLG1utDLIPpQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/c49ec2-37da-41a9-96fb-5141fa39080a/1/dCL5hcs0oDx8VYFkLG1utDLIPpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:a6:c7:2b:ea:27:ff:3c:f1:b3:52:3a:0f:3a:e6:5e:4b:a9:
1e:53:df:ed:de:fb:a3:0d:fc:fb:bb:39:7f:0d:b4:49:f0:2e:
ac:2f:9e:de:9b:d6:fc:a6:d1:18:f4:ea:3d:f8:42:e1:a3:e7:
cb:df:9f:ce:9f:ae:ea:e1:26:e0:e8:f1:be:4c:64:a8:93:69:
81:72:53:ce:16:af:35:97:17:a6:7b:42:d6:d2:91:59:ee:59:
ae:b8:3c:eb:f9:aa:74:51:73:a8:8b:91:c9:f1:25:9b:eb:36:
7d:9e:8d:91:7b:c5:dc:f3:5f:f9:da:ad:2a:db:59:2d:1a:3e:
a7:19:5c:a6:bb:9c:02:ab:29:0a:6e:97:e1:d0:d5:83:24:6a:
6e:dc:9f:8a:9d:a5:b8:34:31:32:9d:b2:b5:fd:cc:70:2b:b3:
f5:c6:d9:79:76:81:0d:7c:d0:13:32:e7:35:8a:ac:97:f4:61:
93:27:27:6e:21:9c:1b:9b:c8:5c:25:e6:68:0c:5b:3a:b8:cb:
fa:ed:0b:fa:25:d0:be:24:7d:c7:b5:50:58:75:c5:55:ed:71:
26:c0:aa:11:bd:1b:b3:91:d7:e5:67:52:b0:48:09:29:63:2b:
ab:66:c4:da:4a:80:40:60:a4:1d:3f:8b:eb:32:77:e5:21:7f:
9e:4e:cc:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 14:42:46 2025 by rpki-client