Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/0b9773-f9d8-4d87-8772-7008bc97c7b1/1/dpx0RfVnkSzoKKX3h-yUSgjb_eM.mft
File: dpx0RfVnkSzoKKX3h-yUSgjb_eM.mft (raw, json)
Hash identifier: LoJdeuDckaq5vvW9eHFikYTbYSP/M5pFYe0K8eJETMU=
Subject key identifier: 71:FB:50:A9:7D:1C:5A:B8:5C:4F:6B:43:72:A7:5D:FC:85:40:00:0D
Authority key identifier: 76:9C:74:45:F5:67:91:2C:E8:28:A5:F7:87:EC:94:4A:08:DB:FD:E3
Certificate issuer: /CN=769c7445f567912ce828a5f787ec944a08dbfde3
Certificate serial: 0197CDCED5AC803C9FECDB4FC98E67D2516B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dpx0RfVnkSzoKKX3h-yUSgjb_eM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/0b9773-f9d8-4d87-8772-7008bc97c7b1/1/dpx0RfVnkSzoKKX3h-yUSgjb_eM.mft
Manifest number: 11A1
Signing time: Thu 03 Jul 2025 01:02:53 +0000
Manifest this update: Thu 03 Jul 2025 01:02:53 +0000
Manifest next update: Fri 04 Jul 2025 01:02:53 +0000
Files and hashes: 1: dpx0RfVnkSzoKKX3h-yUSgjb_eM.crl (hash: u/6EO5kM+HK+s7DcKi27dLKwRSVAiDMsklbe6CkLwkY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/0b9773-f9d8-4d87-8772-7008bc97c7b1/1/dpx0RfVnkSzoKKX3h-yUSgjb_eM.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/0b9773-f9d8-4d87-8772-7008bc97c7b1/1/dpx0RfVnkSzoKKX3h-yUSgjb_eM.mft
rsync://rpki.ripe.net/repository/DEFAULT/dpx0RfVnkSzoKKX3h-yUSgjb_eM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 01:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cd:ce:d5:ac:80:3c:9f:ec:db:4f:c9:8e:67:d2:51:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=769c7445f567912ce828a5f787ec944a08dbfde3
Validity
Not Before: Jul 3 01:02:53 2025 GMT
Not After : Jul 4 01:02:53 2025 GMT
Subject: CN=71fb50a97d1c5ab85c4f6b4372a75dfc8540000d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e0:18:59:0e:8b:f2:32:10:30:fb:b6:a8:3e:
eb:e5:6b:c9:8f:e4:7a:7c:54:fe:08:23:5f:5f:23:
44:13:34:d1:88:74:2d:42:03:21:5f:10:f3:cf:bc:
77:ff:29:ce:b8:75:29:45:2f:a6:b7:f7:6b:5c:d5:
9b:ca:0a:89:b4:a0:02:0f:ba:40:2f:37:bc:6d:db:
c5:69:8c:8f:48:78:c0:23:db:66:6e:49:05:5b:77:
90:82:0f:54:50:66:95:52:4b:e4:7e:5f:32:6c:2c:
b4:a5:22:d5:44:48:9f:c8:0b:e5:9b:c0:9b:61:e9:
11:03:74:e6:3c:0f:cb:35:98:a0:df:06:f7:55:cb:
0b:54:03:6d:28:ce:0e:7a:61:c0:91:9f:9c:b1:70:
24:9d:c8:04:f0:ab:15:d1:33:79:d2:ca:cf:42:95:
ed:c0:81:e4:e4:a2:67:37:ad:00:58:1d:f8:89:d0:
92:33:4c:2e:bc:e4:ce:ff:48:66:5d:fb:5d:6e:14:
20:c7:5c:f7:63:4a:5f:b6:56:76:d1:d3:d2:a2:41:
92:34:8c:c4:3f:bc:95:bb:ec:39:40:cf:ab:7e:b1:
4f:bd:2f:49:10:b4:f7:34:82:f2:d5:2c:ec:b2:f1:
11:e6:88:a5:bc:dc:b3:e7:47:63:b0:91:64:65:70:
e7:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:FB:50:A9:7D:1C:5A:B8:5C:4F:6B:43:72:A7:5D:FC:85:40:00:0D
X509v3 Authority Key Identifier:
keyid:76:9C:74:45:F5:67:91:2C:E8:28:A5:F7:87:EC:94:4A:08:DB:FD:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dpx0RfVnkSzoKKX3h-yUSgjb_eM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/0b9773-f9d8-4d87-8772-7008bc97c7b1/1/dpx0RfVnkSzoKKX3h-yUSgjb_eM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/0b9773-f9d8-4d87-8772-7008bc97c7b1/1/dpx0RfVnkSzoKKX3h-yUSgjb_eM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:6d:65:ab:5c:3b:ce:7c:0c:d3:93:2c:47:78:89:1a:91:67:
58:0f:5f:25:56:66:a0:23:f4:ec:ef:7e:f0:fa:a6:17:2a:28:
a1:56:dc:92:f7:ac:58:09:b2:37:e4:70:80:48:53:f3:6f:83:
27:78:b2:73:da:8b:41:56:e7:f0:eb:c6:59:c3:84:ef:50:51:
4b:42:68:20:6f:6e:04:c0:54:e1:96:34:06:2a:ef:77:dc:18:
94:5b:d5:51:ea:20:40:ca:14:57:10:15:a4:01:ca:16:9f:66:
2e:f5:64:10:49:1f:a1:9e:94:31:ba:7e:40:8c:06:81:4a:25:
10:69:c4:52:99:43:de:f2:10:35:34:12:8d:68:c7:5b:15:e7:
19:54:c5:a8:5e:7a:5a:a5:2e:d3:68:66:a1:0c:a5:63:13:57:
e7:4d:d0:fe:4c:5f:42:ff:1c:10:84:fc:b2:25:e5:1c:fc:16:
ae:be:d1:61:a9:b8:90:56:c3:1f:98:ff:cf:dd:f7:06:3d:9f:
94:bd:27:9a:eb:67:e0:23:8e:46:8e:5a:5f:65:0d:8b:31:48:
6d:6d:be:bf:69:24:e4:3d:7c:e4:db:86:81:4d:3a:69:f8:83:
92:cf:74:8b:fd:03:16:f4:98:3e:ec:2a:95:04:84:e0:cc:d7:
df:2c:f4:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 07:13:24 2025 by rpki-client