Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/2f7894-756d-4cbf-977c-3c5ae761cab0/1/DLeircbcrxd7k6M2y47OzFrzAlg.mft
File: DLeircbcrxd7k6M2y47OzFrzAlg.mft (raw, json)
Hash identifier: ohJcURpxgronsq+e9WXS0UhvCm3AWX0p+b5X7GUh9P4=
Subject key identifier: DE:B5:C7:31:5D:35:8D:93:4E:4F:3D:48:32:2F:11:F3:7C:C2:E9:66
Authority key identifier: 0C:B7:A2:AD:C6:DC:AF:17:7B:93:A3:36:CB:8E:CE:CC:5A:F3:02:58
Certificate issuer: /CN=0cb7a2adc6dcaf177b93a336cb8ececc5af30258
Certificate serial: 0197B77CD063EA573D6203A14A98CC9C29BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DLeircbcrxd7k6M2y47OzFrzAlg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/2f7894-756d-4cbf-977c-3c5ae761cab0/1/DLeircbcrxd7k6M2y47OzFrzAlg.mft
Manifest number: 085C
Signing time: Sat 28 Jun 2025 17:01:39 +0000
Manifest this update: Sat 28 Jun 2025 17:01:39 +0000
Manifest next update: Sun 29 Jun 2025 17:01:39 +0000
Files and hashes: 1: DLeircbcrxd7k6M2y47OzFrzAlg.crl (hash: +r6dTbXlVKlvYyl0YU1Fh/xwtjrqvVXBwzmB5yoy5BM=)
2: DXgX_cMOKWmvyb5MDCu-yzGISYQ.roa (hash: fFfPzCo7zqTjJgcKhX4SxPHlq4HGUqWFQ0c7O8IZwwY=)
3: OVOzZ2g8zifvqCY8wDqOXjL1AOc.roa (hash: ei5vXf6WAl7FEI5d5Hm8KKAZYtO3URaho5E46M2Vof8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/2f7894-756d-4cbf-977c-3c5ae761cab0/1/DLeircbcrxd7k6M2y47OzFrzAlg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/2f7894-756d-4cbf-977c-3c5ae761cab0/1/DLeircbcrxd7k6M2y47OzFrzAlg.mft
rsync://rpki.ripe.net/repository/DEFAULT/DLeircbcrxd7k6M2y47OzFrzAlg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:d0:63:ea:57:3d:62:03:a1:4a:98:cc:9c:29:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cb7a2adc6dcaf177b93a336cb8ececc5af30258
Validity
Not Before: Jun 28 17:01:39 2025 GMT
Not After : Jun 29 17:01:39 2025 GMT
Subject: CN=deb5c7315d358d934e4f3d48322f11f37cc2e966
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:43:46:da:0f:20:e8:24:23:9c:ef:23:af:53:
2a:88:13:78:dd:16:2d:d9:86:3e:e5:f4:aa:b2:4d:
20:13:e9:74:d8:cb:c1:55:16:fe:2b:77:73:8a:62:
53:f1:a3:f2:53:89:8b:c9:f2:a4:b9:3c:ea:c9:bd:
f6:8b:df:07:a7:eb:a9:86:67:e7:e1:fb:ac:8e:f2:
b9:53:8d:fa:d6:79:a6:a6:d9:75:f0:79:84:47:1a:
21:64:dd:f0:df:2d:79:bf:70:ae:c9:ed:a1:0f:f2:
9e:a4:88:b3:ab:c2:95:11:f0:55:09:7a:14:77:ae:
68:8d:d6:4f:52:d8:c7:e4:9f:32:11:5a:bd:db:7a:
84:83:c5:82:64:86:68:a6:af:30:58:8e:c3:74:a9:
58:98:64:37:9f:d3:a4:1f:cc:95:80:57:38:70:25:
9f:a8:35:4b:e4:e2:12:32:56:f6:1a:11:7c:75:d5:
98:c1:ed:f3:06:37:8f:25:18:5c:da:e1:40:8e:1e:
fa:5d:6f:cd:f9:3c:2d:b3:b9:03:b3:68:ce:31:5a:
62:3c:f0:33:10:68:c1:c6:60:00:9c:cf:b4:4d:6c:
ac:84:bb:5e:11:c2:09:b1:88:48:36:44:90:8a:cf:
32:0b:c9:37:d3:1b:62:6c:d5:2b:ac:c3:9c:9c:d0:
dd:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:B5:C7:31:5D:35:8D:93:4E:4F:3D:48:32:2F:11:F3:7C:C2:E9:66
X509v3 Authority Key Identifier:
keyid:0C:B7:A2:AD:C6:DC:AF:17:7B:93:A3:36:CB:8E:CE:CC:5A:F3:02:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DLeircbcrxd7k6M2y47OzFrzAlg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/2f7894-756d-4cbf-977c-3c5ae761cab0/1/DLeircbcrxd7k6M2y47OzFrzAlg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/2f7894-756d-4cbf-977c-3c5ae761cab0/1/DLeircbcrxd7k6M2y47OzFrzAlg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:f9:21:b9:9c:ca:60:c7:c4:87:40:ab:f2:4a:f1:29:f1:d0:
45:09:49:da:ec:9b:bb:1b:11:ae:70:3e:8d:ab:70:18:b4:f4:
f8:13:a8:d4:bf:06:a0:76:80:e4:8a:11:9b:0e:20:66:8d:0b:
bd:55:52:df:cf:7a:2e:51:f1:c4:bb:be:6d:e6:24:aa:17:cf:
ba:48:2f:33:a9:fd:48:04:07:73:44:42:39:02:bd:8a:aa:5d:
19:c7:3c:dc:68:73:66:00:51:db:27:e1:29:a9:c5:0a:14:51:
f5:89:d5:13:15:53:fd:55:9d:5d:84:6a:d4:0f:62:e6:cf:ea:
66:db:6c:74:d7:ab:70:47:86:9e:d9:e3:bd:ba:26:59:31:c2:
59:e3:ec:f2:d4:ac:eb:e7:bd:d5:c6:a4:0a:33:4d:80:af:95:
dc:bb:b2:f0:3e:cc:9c:33:2c:cd:67:82:63:bf:37:66:79:08:
1f:1a:6e:da:e0:f6:fd:27:34:b1:2c:46:21:06:7d:66:89:03:
51:74:12:50:fe:c3:07:69:04:5e:06:d1:08:fc:85:48:a0:f4:
ff:dd:36:3e:f1:0d:08:a6:88:48:86:c1:f2:38:06:e1:08:ff:
3f:37:67:d2:7e:66:ac:05:dc:d4:bc:f2:79:5e:2d:83:0e:3c:
7f:07:2e:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:53:20 2025 by rpki-client