Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/a9b91b-684e-4d78-aae9-c447b4193210/1/Dr8L3NkBYisW_9QUS1iIcHMixTQ.mft
File: Dr8L3NkBYisW_9QUS1iIcHMixTQ.mft (raw, json)
Hash identifier: N8ffYwyd1GJk57WBV6X5adGf2Hv9lVccT2zxUHCRVCo=
Subject key identifier: 47:DD:E8:E3:86:13:C6:B9:30:97:92:AF:2C:58:CA:ED:8B:7D:79:C4
Authority key identifier: 0E:BF:0B:DC:D9:01:62:2B:16:FF:D4:14:4B:58:88:70:73:22:C5:34
Certificate issuer: /CN=0ebf0bdcd901622b16ffd4144b5888707322c534
Certificate serial: 0197B77CB4BEE300BB73BD6AF9DD3B5EE816
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dr8L3NkBYisW_9QUS1iIcHMixTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/a9b91b-684e-4d78-aae9-c447b4193210/1/Dr8L3NkBYisW_9QUS1iIcHMixTQ.mft
Manifest number: 15A8
Signing time: Sat 28 Jun 2025 17:01:32 +0000
Manifest this update: Sat 28 Jun 2025 17:01:32 +0000
Manifest next update: Sun 29 Jun 2025 17:01:32 +0000
Files and hashes: 1: Dr8L3NkBYisW_9QUS1iIcHMixTQ.crl (hash: e4T9Edjn1HmKMUvi/s5wT8i/0AXsO+bqynLUPE+TClA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/a9b91b-684e-4d78-aae9-c447b4193210/1/Dr8L3NkBYisW_9QUS1iIcHMixTQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/a9b91b-684e-4d78-aae9-c447b4193210/1/Dr8L3NkBYisW_9QUS1iIcHMixTQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dr8L3NkBYisW_9QUS1iIcHMixTQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:b4:be:e3:00:bb:73:bd:6a:f9:dd:3b:5e:e8:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ebf0bdcd901622b16ffd4144b5888707322c534
Validity
Not Before: Jun 28 17:01:32 2025 GMT
Not After : Jun 29 17:01:32 2025 GMT
Subject: CN=47dde8e38613c6b9309792af2c58caed8b7d79c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:2a:a4:2c:9e:31:b3:47:32:a7:bc:6d:ca:47:
e2:ae:9d:a0:10:39:2b:28:6a:e5:43:ea:34:89:fd:
17:ae:d4:1d:f4:04:52:d1:b3:b0:ea:d4:3b:db:37:
e7:d4:6e:d0:f2:fd:d5:c6:df:a0:44:58:8f:3b:b3:
dd:f9:e3:98:ff:e5:f2:21:65:bc:34:99:8d:d8:17:
76:89:ec:9b:29:c4:5b:bf:af:73:29:4f:4c:c0:a2:
72:74:a9:48:d7:8f:25:6c:32:35:15:be:0e:ea:ab:
61:6c:18:fe:29:d6:49:69:a4:db:ca:1d:4a:ff:a0:
6b:dc:fe:67:fe:ac:03:eb:b7:cd:36:77:53:8d:5c:
dc:6a:73:47:70:0b:d5:b0:e7:01:6a:75:68:75:42:
4a:f1:17:11:1a:76:c5:a1:7e:c5:7c:3f:49:3a:ac:
9e:30:04:f8:49:b0:8f:b9:55:71:cc:a9:c8:2d:14:
ad:5c:11:d9:8d:f7:77:6b:4d:cb:c0:0e:bb:52:ef:
c8:97:3d:92:d7:6b:2b:38:b3:9f:cd:95:56:c0:4e:
c5:c8:49:6c:33:86:2e:f7:39:96:32:fb:16:49:bb:
50:2d:48:db:82:c2:4e:b5:6a:a4:e6:18:9f:9d:2f:
1d:ca:a3:09:77:f6:d9:dc:57:2a:7b:36:a0:3c:ee:
2e:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:DD:E8:E3:86:13:C6:B9:30:97:92:AF:2C:58:CA:ED:8B:7D:79:C4
X509v3 Authority Key Identifier:
keyid:0E:BF:0B:DC:D9:01:62:2B:16:FF:D4:14:4B:58:88:70:73:22:C5:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dr8L3NkBYisW_9QUS1iIcHMixTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/a9b91b-684e-4d78-aae9-c447b4193210/1/Dr8L3NkBYisW_9QUS1iIcHMixTQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/a9b91b-684e-4d78-aae9-c447b4193210/1/Dr8L3NkBYisW_9QUS1iIcHMixTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:2c:11:73:21:f6:e7:3a:6c:88:74:44:9c:4b:50:84:9f:7b:
18:97:73:02:7a:1e:2f:14:9c:d9:4b:4c:25:80:f6:af:8a:03:
79:ad:2a:a1:56:19:df:bf:e8:5a:0a:a1:1b:b1:c7:00:0d:17:
f7:f4:8b:6c:36:72:18:af:aa:ff:b9:c6:a0:c3:30:ef:74:a5:
c6:e0:b5:a8:e8:3d:4d:0a:22:08:66:bc:88:29:36:34:b3:14:
43:d2:32:42:5c:ae:60:aa:ad:67:24:44:33:0d:3f:f9:ac:80:
84:ea:54:9b:70:ce:d9:50:d5:7c:13:56:a9:bc:62:16:48:9b:
83:a8:4c:4a:8b:81:61:0e:ba:e8:79:04:bf:28:2e:53:03:17:
e5:f1:3e:a7:20:97:ca:fe:2a:bc:20:5b:f2:fa:34:ff:d5:6c:
f6:7f:52:91:86:31:73:0c:3d:4f:07:3c:59:1e:14:4e:d5:eb:
ca:7a:c8:bd:71:2b:f4:0a:68:67:63:4e:9b:57:06:8a:22:16:
8c:17:44:55:d7:df:67:b7:95:34:46:77:b0:3e:ec:70:11:2a:
c4:6b:a6:c7:cb:9d:58:6f:f6:61:cd:d0:d0:90:04:27:50:25:
f5:5c:1e:22:f3:c5:5d:4b:f4:bb:50:e1:77:df:a8:d8:b9:8c:
62:53:4e:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:11:04 2025 by rpki-client