Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/1426a1-b553-4da5-a6d9-ac0102793c5a/1/dt0D59chnX68HyMPcGMtyRNvNBM.mft
File: dt0D59chnX68HyMPcGMtyRNvNBM.mft (raw, json)
Hash identifier: W/Ilmro3q9+x9SaWzjDvB7i2s3CcLFNDOTMMM4nQQxI=
Subject key identifier: CB:F0:83:C6:06:4C:8D:F1:18:8D:CC:0A:E0:92:A8:38:87:C3:E6:CA
Authority key identifier: 76:DD:03:E7:D7:21:9D:7E:BC:1F:23:0F:70:63:2D:C9:13:6F:34:13
Certificate issuer: /CN=76dd03e7d7219d7ebc1f230f70632dc9136f3413
Certificate serial: 0197B933BA1B6D4AB3B67F69DB17C4D66015
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dt0D59chnX68HyMPcGMtyRNvNBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/1426a1-b553-4da5-a6d9-ac0102793c5a/1/dt0D59chnX68HyMPcGMtyRNvNBM.mft
Manifest number: 04C2
Signing time: Sun 29 Jun 2025 01:01:04 +0000
Manifest this update: Sun 29 Jun 2025 01:01:04 +0000
Manifest next update: Mon 30 Jun 2025 01:01:04 +0000
Files and hashes: 1: dt0D59chnX68HyMPcGMtyRNvNBM.crl (hash: CqckcYPJmzdxcCvnYTYa9b2QZRE3XRmMITQKrrEOiJU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/1426a1-b553-4da5-a6d9-ac0102793c5a/1/dt0D59chnX68HyMPcGMtyRNvNBM.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/1426a1-b553-4da5-a6d9-ac0102793c5a/1/dt0D59chnX68HyMPcGMtyRNvNBM.mft
rsync://rpki.ripe.net/repository/DEFAULT/dt0D59chnX68HyMPcGMtyRNvNBM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 01:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:33:ba:1b:6d:4a:b3:b6:7f:69:db:17:c4:d6:60:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76dd03e7d7219d7ebc1f230f70632dc9136f3413
Validity
Not Before: Jun 29 01:01:04 2025 GMT
Not After : Jun 30 01:01:04 2025 GMT
Subject: CN=cbf083c6064c8df1188dcc0ae092a83887c3e6ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:4f:db:ca:13:48:04:8a:ef:e6:c9:af:d1:ed:
4a:1b:b4:d5:a5:86:a8:3c:2d:78:e3:e6:ea:63:42:
c0:d5:b0:f5:8d:46:6d:f3:5c:60:c6:53:a1:b4:23:
28:c2:f3:c7:97:6f:d5:1b:14:40:80:a0:40:cd:e7:
69:1f:10:2e:db:79:c8:39:0a:03:2b:ca:d4:fa:57:
4a:32:0e:6b:24:ad:e3:81:ec:51:cb:f4:ea:30:8b:
d2:61:0b:23:0a:26:84:e3:6a:b4:5a:21:c7:4e:8d:
a4:29:a9:9f:ba:18:62:85:0f:90:16:a9:f0:78:c5:
d4:a8:70:a4:93:c4:47:d2:b0:c2:50:da:22:e6:21:
08:89:64:da:6a:46:17:c0:95:0f:3c:4f:36:d1:52:
bf:14:b7:1b:ed:d3:db:9b:be:f8:61:6b:34:34:51:
1c:e1:bd:6a:31:97:e9:da:19:1e:64:1d:20:df:3f:
ce:d6:29:8d:da:5c:05:29:ab:18:cc:e0:f4:a9:32:
4a:73:ec:fb:02:e1:48:1e:9f:45:e3:0b:3c:ae:ee:
24:54:a0:ca:25:79:6f:e7:f3:b4:09:4c:4b:04:9b:
24:b9:1e:49:06:54:2b:3e:f1:c6:d7:ee:0d:a7:8b:
0a:32:ca:37:b3:67:e6:78:9e:92:ab:0e:af:7f:15:
03:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:F0:83:C6:06:4C:8D:F1:18:8D:CC:0A:E0:92:A8:38:87:C3:E6:CA
X509v3 Authority Key Identifier:
keyid:76:DD:03:E7:D7:21:9D:7E:BC:1F:23:0F:70:63:2D:C9:13:6F:34:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dt0D59chnX68HyMPcGMtyRNvNBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/1426a1-b553-4da5-a6d9-ac0102793c5a/1/dt0D59chnX68HyMPcGMtyRNvNBM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/1426a1-b553-4da5-a6d9-ac0102793c5a/1/dt0D59chnX68HyMPcGMtyRNvNBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:a1:d8:f2:7e:a6:a2:c9:7b:86:78:fc:e6:33:17:12:71:5f:
ef:cf:f1:e5:c0:1e:69:e2:90:21:93:74:dd:d6:f8:7b:c7:c0:
d6:61:65:51:73:10:bf:6c:4c:13:83:5c:64:89:df:e7:bb:9c:
5e:1d:0a:09:d0:d7:f3:78:45:60:36:42:14:bc:3d:0f:b8:af:
0c:e3:d6:0e:b6:71:e7:d8:a4:d2:2e:b2:a2:dd:40:75:01:38:
c0:6a:09:c5:db:aa:1c:d5:ba:2b:c6:29:2f:16:b0:59:87:3f:
3f:2e:2a:06:34:bf:7c:63:ee:e2:04:cc:13:35:8e:7f:e7:90:
1e:5c:76:df:53:14:d6:84:9b:3e:d2:66:a1:b5:2b:4c:bb:13:
1a:84:81:07:21:58:83:34:05:f4:39:88:b4:ac:5f:e4:21:ee:
34:fc:ce:0e:b1:0c:d1:55:1c:dd:cb:b7:75:00:b1:42:75:cb:
00:4e:5d:f8:4f:1c:51:e5:ab:5c:76:0f:53:9f:39:5a:4a:f6:
95:f5:4b:07:ae:6d:d4:0a:e8:79:7a:7f:8f:7c:ff:3c:5e:03:
13:9a:1b:3f:e0:aa:6b:dd:17:50:5f:8f:00:d7:a0:cb:50:33:
a7:6a:5c:33:22:b1:e3:84:d7:10:b7:f7:6c:de:4a:8f:78:b6:
31:9e:28:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 09:07:23 2025 by rpki-client