Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/dfa6a1-1e4c-49ff-a480-274232d69505/1/dQRxYHUyqMev1g1PMXqtxJDrogY.mft
File: dQRxYHUyqMev1g1PMXqtxJDrogY.mft (raw, json)
Hash identifier: 5xX8yvpvA/VeOZa9payEaYZcFxE2sxTB2OelWi3i1mQ=
Subject key identifier: 09:F4:61:F3:29:C4:9F:6C:B9:6E:22:CD:DF:40:4A:AB:77:5C:C5:DC
Authority key identifier: 75:04:71:60:75:32:A8:C7:AF:D6:0D:4F:31:7A:AD:C4:90:EB:A2:06
Certificate issuer: /CN=750471607532a8c7afd60d4f317aadc490eba206
Certificate serial: 0197BA7DFF9B0BEA016D1ECB1796149AAB92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQRxYHUyqMev1g1PMXqtxJDrogY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/dfa6a1-1e4c-49ff-a480-274232d69505/1/dQRxYHUyqMev1g1PMXqtxJDrogY.mft
Manifest number: 15B3
Signing time: Sun 29 Jun 2025 07:01:48 +0000
Manifest this update: Sun 29 Jun 2025 07:01:48 +0000
Manifest next update: Mon 30 Jun 2025 07:01:48 +0000
Files and hashes: 1: dQRxYHUyqMev1g1PMXqtxJDrogY.crl (hash: AUejgYpHZaRGsaDJ7mHlf0os/+UVCQxKjjqtoslcOx0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/dfa6a1-1e4c-49ff-a480-274232d69505/1/dQRxYHUyqMev1g1PMXqtxJDrogY.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/dfa6a1-1e4c-49ff-a480-274232d69505/1/dQRxYHUyqMev1g1PMXqtxJDrogY.mft
rsync://rpki.ripe.net/repository/DEFAULT/dQRxYHUyqMev1g1PMXqtxJDrogY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:7d:ff:9b:0b:ea:01:6d:1e:cb:17:96:14:9a:ab:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=750471607532a8c7afd60d4f317aadc490eba206
Validity
Not Before: Jun 29 07:01:48 2025 GMT
Not After : Jun 30 07:01:48 2025 GMT
Subject: CN=09f461f329c49f6cb96e22cddf404aab775cc5dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:f0:51:6a:84:eb:11:cf:b3:3f:5b:62:b9:2e:
d7:e2:40:41:33:3d:e6:c8:6d:f8:ee:bc:d4:49:0f:
7b:23:56:f4:ad:08:9a:dc:b0:26:dc:97:c8:da:0f:
3d:26:ef:52:ad:56:dd:84:5b:63:09:45:42:62:4e:
52:0c:46:53:0c:d3:1c:c0:96:33:de:84:8e:08:53:
d7:8d:86:37:5d:b2:cb:59:73:44:49:8c:66:d3:60:
78:85:68:6d:34:dd:96:c1:30:6a:86:d0:08:ad:9c:
3c:ad:90:85:11:39:31:8e:98:84:c5:f9:91:91:6e:
82:d0:d5:4e:b8:01:85:d4:d4:67:77:ba:9b:ac:28:
b9:d3:b5:c3:02:90:de:3c:55:ce:65:81:80:8e:2e:
0d:af:46:62:24:bc:8e:42:f7:40:69:d1:6b:4b:20:
86:1a:ce:6c:2d:a0:5d:07:92:f4:96:6f:d8:d3:65:
d7:1e:c7:e5:54:54:fd:d1:22:cf:53:0d:1e:da:0f:
ee:8e:6e:93:ad:02:ec:5e:d0:2e:7f:d0:50:00:5f:
89:d7:2b:a1:fb:84:06:ca:9b:44:1e:38:79:64:e1:
48:74:4a:d5:81:92:6e:61:7c:4f:9e:f3:11:6c:f4:
b9:8e:57:a7:60:09:51:08:88:78:c2:86:40:ba:f1:
04:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:F4:61:F3:29:C4:9F:6C:B9:6E:22:CD:DF:40:4A:AB:77:5C:C5:DC
X509v3 Authority Key Identifier:
keyid:75:04:71:60:75:32:A8:C7:AF:D6:0D:4F:31:7A:AD:C4:90:EB:A2:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQRxYHUyqMev1g1PMXqtxJDrogY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/dfa6a1-1e4c-49ff-a480-274232d69505/1/dQRxYHUyqMev1g1PMXqtxJDrogY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/dfa6a1-1e4c-49ff-a480-274232d69505/1/dQRxYHUyqMev1g1PMXqtxJDrogY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:db:b2:44:45:35:0c:ac:3d:db:af:31:08:3e:50:97:3b:99:
df:3a:3e:e5:74:aa:80:f4:d4:f2:4a:f4:5f:e5:04:fc:4a:80:
6d:50:d3:fa:32:bb:9e:73:b6:8a:1a:61:5a:08:8a:82:e9:de:
49:08:5a:e5:a1:4c:77:d5:7b:6c:04:d9:27:d2:b8:1f:ce:38:
48:86:67:ea:8e:82:15:53:ad:99:03:31:5d:bd:62:f5:c0:7d:
2a:a8:a4:db:d5:87:1d:f4:af:b7:9f:bd:79:fc:77:d1:3c:6c:
ad:eb:5e:ea:00:22:34:43:f2:d6:33:43:29:76:27:39:32:4a:
da:2b:95:c0:65:db:90:04:c9:d6:5a:23:13:6d:93:c3:46:34:
a4:5c:89:03:6d:e8:30:7f:9f:af:2e:4c:80:5c:4b:21:c2:e8:
2a:17:8e:da:e8:75:21:a1:28:72:d2:03:68:87:4e:a0:cd:b6:
b3:d3:27:fc:d4:2b:da:1f:b3:22:85:cd:a5:55:1a:49:37:b8:
86:85:3f:80:98:8d:4f:ee:4e:3d:88:b9:9d:c9:4c:31:7e:06:
d9:b9:92:f4:70:26:2f:98:75:cf:11:75:6f:fb:c3:33:eb:14:
4d:fa:46:63:63:f5:b7:13:13:9d:c2:bf:d4:61:c8:96:5b:6e:
6d:ff:c3:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 14:16:23 2025 by rpki-client