Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/cd33f9-4f04-4983-a43a-3a8231edb46c/1/DSC_pCDAzV9fGNuOe9o1X-joW30.mft
File: DSC_pCDAzV9fGNuOe9o1X-joW30.mft (raw, json)
Hash identifier: qXz+4fw96F5i1OpZ9XWs7Vi5PTeslJ9fyawfcaZLZ/A=
Subject key identifier: 3B:90:38:36:25:37:FB:70:86:5A:27:17:86:76:31:9C:66:08:4E:EA
Authority key identifier: 0D:20:BF:A4:20:C0:CD:5F:5F:18:DB:8E:7B:DA:35:5F:E8:E8:5B:7D
Certificate issuer: /CN=0d20bfa420c0cd5f5f18db8e7bda355fe8e85b7d
Certificate serial: 0197B5FBF44E0DEA7F457D22459D5CA1EAEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DSC_pCDAzV9fGNuOe9o1X-joW30.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/cd33f9-4f04-4983-a43a-3a8231edb46c/1/DSC_pCDAzV9fGNuOe9o1X-joW30.mft
Manifest number: AE
Signing time: Sat 28 Jun 2025 10:01:17 +0000
Manifest this update: Sat 28 Jun 2025 10:01:17 +0000
Manifest next update: Sun 29 Jun 2025 10:01:17 +0000
Files and hashes: 1: DSC_pCDAzV9fGNuOe9o1X-joW30.crl (hash: +QP6pN9NTlid4pOrLVT7DaV0AzaF0KK/yFxftytdSJA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/cd33f9-4f04-4983-a43a-3a8231edb46c/1/DSC_pCDAzV9fGNuOe9o1X-joW30.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/cd33f9-4f04-4983-a43a-3a8231edb46c/1/DSC_pCDAzV9fGNuOe9o1X-joW30.mft
rsync://rpki.ripe.net/repository/DEFAULT/DSC_pCDAzV9fGNuOe9o1X-joW30.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:fb:f4:4e:0d:ea:7f:45:7d:22:45:9d:5c:a1:ea:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d20bfa420c0cd5f5f18db8e7bda355fe8e85b7d
Validity
Not Before: Jun 28 10:01:17 2025 GMT
Not After : Jun 29 10:01:17 2025 GMT
Subject: CN=3b9038362537fb70865a27178676319c66084eea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:75:c9:66:0d:21:6c:ed:b0:ad:bd:83:08:6a:
10:fc:17:73:31:12:f9:41:39:35:85:f0:08:b9:b9:
53:5e:1c:a4:44:c3:3f:8d:26:2c:07:29:20:8b:ee:
11:42:68:3a:3c:b8:0f:e4:e4:ce:0a:8c:e1:1e:c7:
4a:dc:e9:96:a0:ce:4f:70:aa:97:65:7c:2d:9f:77:
80:c9:e2:f5:8d:ee:29:af:6a:45:3b:3a:3e:31:7f:
29:44:e8:e2:5c:4e:10:0d:1d:e5:ce:a0:8e:77:d9:
f7:07:35:6f:99:32:9d:53:44:35:c0:34:69:d3:8a:
3c:cc:69:0e:26:7d:c3:6f:92:85:fe:f2:ec:a7:3d:
98:34:25:d2:13:5f:58:1d:3e:23:74:f1:07:91:ff:
be:07:70:0b:9f:68:b3:7d:49:49:0e:53:ed:f8:f1:
e0:86:76:a5:cd:a8:63:f9:06:ae:65:03:71:07:32:
42:90:0c:30:ca:8a:c6:6f:a5:86:d6:8c:ce:7d:8f:
03:b9:1b:ab:4d:84:38:0f:f4:77:b2:8e:e0:66:b3:
e3:ec:33:02:98:37:1c:8e:cf:0b:f8:b7:87:77:25:
58:63:76:fd:0d:b9:31:8c:57:05:e5:35:ea:60:bf:
c0:a1:b0:93:34:04:5c:60:05:61:36:3d:51:2d:3d:
9f:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:90:38:36:25:37:FB:70:86:5A:27:17:86:76:31:9C:66:08:4E:EA
X509v3 Authority Key Identifier:
keyid:0D:20:BF:A4:20:C0:CD:5F:5F:18:DB:8E:7B:DA:35:5F:E8:E8:5B:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DSC_pCDAzV9fGNuOe9o1X-joW30.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/cd33f9-4f04-4983-a43a-3a8231edb46c/1/DSC_pCDAzV9fGNuOe9o1X-joW30.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/cd33f9-4f04-4983-a43a-3a8231edb46c/1/DSC_pCDAzV9fGNuOe9o1X-joW30.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:95:c1:95:86:99:18:be:dc:ad:28:99:ca:c0:26:43:61:73:
92:b9:5d:73:20:87:20:e2:17:0d:d4:d2:cc:50:86:91:bb:d6:
0a:cd:e0:a2:e1:89:c7:33:9a:e6:2c:d9:0c:a7:23:2b:2c:0a:
0b:9d:14:40:e7:2a:a1:ef:90:5e:bd:26:b1:21:f1:8c:5b:88:
90:9b:48:77:33:5a:dc:61:d1:bc:f5:92:67:43:e8:1f:77:cf:
f5:45:e1:71:8a:8f:fd:c4:3b:d8:3d:41:50:d9:50:ee:a6:7a:
8b:9a:63:58:92:54:2d:21:61:f4:84:54:29:3a:08:2d:4a:05:
80:59:d8:9b:0f:42:6a:d2:96:3a:cb:cb:49:b7:dc:5d:21:a5:
04:27:9e:4d:f9:28:e6:c2:dc:58:49:10:ae:65:48:64:6a:22:
11:00:5f:b3:5f:c8:9a:0a:85:39:31:15:08:aa:eb:31:38:31:
c3:90:b2:7c:9c:f5:b3:a9:0b:e2:8c:b9:10:89:06:ad:8d:c5:
3a:ef:2a:be:aa:4d:e6:43:3d:25:c0:0c:d2:57:6e:7c:00:3d:
e0:db:92:91:e7:0a:b8:24:2a:cf:2c:4f:0b:98:4c:ca:23:14:
77:da:54:df:e5:f9:f7:95:53:35:a6:31:53:2f:13:a5:da:4d:
7e:1f:11:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 18:55:56 2025 by rpki-client