Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/d531a8-02ae-4b0b-8f44-5287698aff3c/1/dLCDZQKVGJ8AmqdMEsvGHuI_p1M.mft
File: dLCDZQKVGJ8AmqdMEsvGHuI_p1M.mft (raw, json)
Hash identifier: zuQ4daxWeBLUQ6+ixx9vjBP47BNvqdmWczs+wnZT1Mc=
Subject key identifier: 14:A7:B6:C4:72:38:A4:40:EC:87:60:20:04:29:8C:03:93:5B:80:F5
Authority key identifier: 74:B0:83:65:02:95:18:9F:00:9A:A7:4C:12:CB:C6:1E:E2:3F:A7:53
Certificate issuer: /CN=74b083650295189f009aa74c12cbc61ee23fa753
Certificate serial: 0197B6A1856BAE31E48C1873F1397769546E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dLCDZQKVGJ8AmqdMEsvGHuI_p1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/d531a8-02ae-4b0b-8f44-5287698aff3c/1/dLCDZQKVGJ8AmqdMEsvGHuI_p1M.mft
Manifest number: 15B3
Signing time: Sat 28 Jun 2025 13:02:08 +0000
Manifest this update: Sat 28 Jun 2025 13:02:08 +0000
Manifest next update: Sun 29 Jun 2025 13:02:08 +0000
Files and hashes: 1: dLCDZQKVGJ8AmqdMEsvGHuI_p1M.crl (hash: ObfsTebvToEAO9kSTANmOeZv+HfUdRzUEnMVe2cW7C8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/d531a8-02ae-4b0b-8f44-5287698aff3c/1/dLCDZQKVGJ8AmqdMEsvGHuI_p1M.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/d531a8-02ae-4b0b-8f44-5287698aff3c/1/dLCDZQKVGJ8AmqdMEsvGHuI_p1M.mft
rsync://rpki.ripe.net/repository/DEFAULT/dLCDZQKVGJ8AmqdMEsvGHuI_p1M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:85:6b:ae:31:e4:8c:18:73:f1:39:77:69:54:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74b083650295189f009aa74c12cbc61ee23fa753
Validity
Not Before: Jun 28 13:02:08 2025 GMT
Not After : Jun 29 13:02:08 2025 GMT
Subject: CN=14a7b6c47238a440ec87602004298c03935b80f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:07:91:c3:12:de:94:c2:18:7d:54:df:1a:ae:
0c:29:71:bb:b5:b6:e2:54:15:26:bf:db:70:a4:a7:
f6:70:f6:00:f8:f3:9f:1e:6a:de:72:2b:4e:08:ef:
dd:27:2c:90:4d:c4:f7:27:33:34:95:b6:4d:a6:95:
a7:11:61:d7:e2:11:3d:8d:ec:93:bb:a8:67:45:f5:
a4:dd:33:d7:fc:7e:9a:cb:c2:fc:71:29:8d:da:fe:
3f:9d:19:4e:5b:5e:a0:4b:56:1c:a3:0f:3b:5c:2c:
f6:15:57:c9:6e:4d:fd:1f:c1:48:f8:ba:a8:92:92:
f2:cf:c1:5f:00:75:f9:7a:fe:39:38:4c:eb:ab:b0:
5e:f2:5a:0e:2a:12:b4:bd:3c:4e:40:60:25:4f:9b:
98:62:7b:b5:75:41:62:32:fb:3a:2c:8e:c5:8f:f3:
97:f9:1f:bc:db:d7:ad:d1:20:25:76:45:ad:34:0c:
0a:f4:26:55:69:a6:c6:fd:59:24:8f:18:72:99:ee:
be:c0:02:ff:c5:43:e4:51:06:f3:60:c2:e9:87:9b:
85:ee:41:65:7e:e4:b6:23:87:a0:ed:db:f6:1c:d6:
9d:16:7d:b8:28:c7:17:39:4f:ed:76:1b:60:0c:a2:
db:3a:47:70:41:7c:bb:31:9f:b6:d6:99:03:d1:37:
ef:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:A7:B6:C4:72:38:A4:40:EC:87:60:20:04:29:8C:03:93:5B:80:F5
X509v3 Authority Key Identifier:
keyid:74:B0:83:65:02:95:18:9F:00:9A:A7:4C:12:CB:C6:1E:E2:3F:A7:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dLCDZQKVGJ8AmqdMEsvGHuI_p1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d531a8-02ae-4b0b-8f44-5287698aff3c/1/dLCDZQKVGJ8AmqdMEsvGHuI_p1M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d531a8-02ae-4b0b-8f44-5287698aff3c/1/dLCDZQKVGJ8AmqdMEsvGHuI_p1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:fd:fc:5c:e9:95:5e:17:66:00:94:c3:9e:2f:c2:af:a9:b5:
0a:65:b6:f3:61:26:c7:99:db:43:3b:d8:38:b9:51:82:84:f1:
96:a0:03:f2:b7:e4:2d:af:bc:e4:83:b1:ea:4b:d3:3d:fc:c2:
2b:63:cb:b8:2c:1f:95:e2:99:9f:f5:a0:70:0e:ac:81:ef:d0:
8c:6f:ea:88:b8:4d:c8:13:47:87:d3:84:8b:c7:fe:6e:c3:c6:
29:4f:14:20:54:0c:b5:c3:bb:89:2c:b1:af:fd:55:f1:58:91:
a8:cd:1d:be:40:ff:ff:9d:3d:d6:2d:3b:e3:db:28:d6:b9:58:
9b:e9:fc:0f:4d:3a:3c:14:20:bb:62:b0:4e:9b:ba:c5:5e:47:
3a:35:4e:50:16:91:79:6e:b5:dc:a7:c1:76:f9:98:a8:b4:9d:
67:e8:e1:11:a1:2e:21:d3:eb:d0:bd:ea:d5:49:c2:79:be:5c:
14:68:04:37:f8:17:54:d8:75:0e:fc:99:d8:4b:be:3f:89:ef:
d4:a2:2e:57:d8:a2:f3:f4:e7:ad:16:60:f5:be:5b:7b:b7:eb:
2f:10:70:e5:9e:49:1e:ca:be:84:07:dc:e8:3b:68:ba:51:7a:
00:d9:c4:8f:a4:0f:fb:46:a9:cd:ce:00:8f:d6:23:1d:32:83:
ec:db:ba:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:42:35 2025 by rpki-client