Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/101dba-64eb-4267-b075-c02f775fbf3f/1/dXJV3ckKTQ-C-yZ0RpPtfJhtios.mft
File: dXJV3ckKTQ-C-yZ0RpPtfJhtios.mft (raw, json)
Hash identifier: 8TDo/wuzZMth/Ic9EYFqxWKVBuIRygqKpWdjD7VDveY=
Subject key identifier: DF:A6:19:48:DE:A8:BD:6E:B7:09:21:29:BD:7F:6A:05:A0:B2:50:44
Authority key identifier: 75:72:55:DD:C9:0A:4D:0F:82:FB:26:74:46:93:ED:7C:98:6D:8A:8B
Certificate issuer: /CN=757255ddc90a4d0f82fb26744693ed7c986d8a8b
Certificate serial: 0197B7EA2507627B680B8E9A2F79B63B7EA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dXJV3ckKTQ-C-yZ0RpPtfJhtios.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/101dba-64eb-4267-b075-c02f775fbf3f/1/dXJV3ckKTQ-C-yZ0RpPtfJhtios.mft
Manifest number: 15B1
Signing time: Sat 28 Jun 2025 19:01:04 +0000
Manifest this update: Sat 28 Jun 2025 19:01:04 +0000
Manifest next update: Sun 29 Jun 2025 19:01:04 +0000
Files and hashes: 1: dXJV3ckKTQ-C-yZ0RpPtfJhtios.crl (hash: i+9S3VyeKCA9OM0nKFwjUU6fVkjftSZPQw0fkDWtMX8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/101dba-64eb-4267-b075-c02f775fbf3f/1/dXJV3ckKTQ-C-yZ0RpPtfJhtios.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/101dba-64eb-4267-b075-c02f775fbf3f/1/dXJV3ckKTQ-C-yZ0RpPtfJhtios.mft
rsync://rpki.ripe.net/repository/DEFAULT/dXJV3ckKTQ-C-yZ0RpPtfJhtios.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:25:07:62:7b:68:0b:8e:9a:2f:79:b6:3b:7e:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=757255ddc90a4d0f82fb26744693ed7c986d8a8b
Validity
Not Before: Jun 28 19:01:04 2025 GMT
Not After : Jun 29 19:01:04 2025 GMT
Subject: CN=dfa61948dea8bd6eb7092129bd7f6a05a0b25044
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:63:f7:cd:e2:2f:e0:a7:1f:f1:88:7c:08:15:
75:ad:81:8a:23:92:23:cc:80:15:51:5a:8e:de:0a:
55:70:9c:20:c9:cb:bb:e4:3a:2e:fd:05:31:ae:51:
a1:53:d1:c8:5c:1a:f5:15:9e:de:50:ca:a5:e2:51:
1b:a1:44:fc:6f:df:c9:5d:e5:13:b9:a8:52:76:93:
76:88:5e:d1:ed:56:f9:b1:a9:d0:68:01:c3:b4:01:
3e:d5:c6:d4:97:55:00:bf:62:87:6e:db:4b:5d:2e:
4a:73:86:11:65:73:a4:6e:b5:29:c7:e3:a6:d1:35:
46:0f:2e:4c:6b:57:25:5c:ef:8e:8a:4d:52:67:2a:
10:cc:13:11:94:70:9b:12:ae:a9:37:78:4e:99:e3:
4f:70:42:ad:5d:b9:64:0c:5a:f3:df:c8:cf:5d:59:
db:8d:89:3c:9e:98:82:21:57:2c:ed:8d:c6:66:c1:
79:d3:83:29:d8:6f:c0:54:fe:c1:02:6e:25:ac:dd:
06:7d:ff:41:5a:ab:bb:e9:2c:08:f6:a4:dd:62:06:
76:30:1b:f0:46:71:4a:13:ed:60:2c:2a:d1:f8:26:
10:ce:c6:6f:1e:e7:a3:c1:ff:ee:5e:f1:3c:9c:ac:
e6:e9:86:9a:72:e6:6c:71:98:d7:4d:cd:da:67:a8:
50:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:A6:19:48:DE:A8:BD:6E:B7:09:21:29:BD:7F:6A:05:A0:B2:50:44
X509v3 Authority Key Identifier:
keyid:75:72:55:DD:C9:0A:4D:0F:82:FB:26:74:46:93:ED:7C:98:6D:8A:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dXJV3ckKTQ-C-yZ0RpPtfJhtios.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/101dba-64eb-4267-b075-c02f775fbf3f/1/dXJV3ckKTQ-C-yZ0RpPtfJhtios.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/101dba-64eb-4267-b075-c02f775fbf3f/1/dXJV3ckKTQ-C-yZ0RpPtfJhtios.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:b9:0d:04:db:5c:e8:89:f4:3c:d0:e1:12:7e:45:a3:47:c5:
b5:ac:10:86:04:31:9e:97:da:e9:ba:64:ea:49:e3:04:05:72:
b9:69:f5:51:09:a8:1e:55:31:dc:4a:c0:f7:2e:dc:bd:d9:ad:
35:3b:e9:ae:f2:39:19:2d:54:e7:c3:3e:ff:a5:0b:a5:41:45:
02:69:7e:ab:9d:9b:fd:90:eb:3d:07:30:78:c7:39:72:25:ab:
93:5e:88:92:46:5d:4e:d9:97:e7:6a:79:31:e3:15:e5:61:d6:
48:77:e3:19:b7:1d:27:04:81:f3:f7:b9:1d:cb:5e:72:e7:4a:
48:c2:4b:f9:52:21:47:31:96:e0:de:b1:30:1e:05:6b:5c:3f:
80:9a:a3:7e:3f:66:32:c9:6c:54:66:58:3c:65:89:75:5a:53:
a1:43:64:ea:a7:1f:7a:09:53:12:4d:13:0d:9d:ea:77:42:fc:
ed:e0:12:f6:b4:d2:f9:c9:cc:1b:d0:61:f4:4e:37:0f:ee:27:
91:29:59:cd:ce:87:e5:d6:b3:d1:24:e1:9d:43:53:4a:26:cf:
61:98:6f:e9:7d:82:59:cf:6b:00:c1:1a:7d:d6:5e:98:23:63:
84:59:0f:0a:98:9e:91:4b:cb:22:7c:a4:e0:37:40:e3:f4:b9:
12:53:0c:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:25:09 2025 by rpki-client