Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/427e2c-96f6-4e43-914a-8c7c54f3c5b0/1/daRvv8jeUjM5XHPeUflVO7doRgU.mft
File: daRvv8jeUjM5XHPeUflVO7doRgU.mft (raw, json)
Hash identifier: /edPZhwEk6wpJhq+6Y1qY63ckJB8QL2yV3+nZaBZcWM=
Subject key identifier: 08:14:A4:B1:94:4C:3B:0C:A4:11:98:FB:36:13:BF:F3:FD:41:3E:BC
Authority key identifier: 75:A4:6F:BF:C8:DE:52:33:39:5C:73:DE:51:F9:55:3B:B7:68:46:05
Certificate issuer: /CN=75a46fbfc8de5233395c73de51f9553bb7684605
Certificate serial: 0197BA7ECF89247AD10DCBDFC883A1C51B5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/daRvv8jeUjM5XHPeUflVO7doRgU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/427e2c-96f6-4e43-914a-8c7c54f3c5b0/1/daRvv8jeUjM5XHPeUflVO7doRgU.mft
Manifest number: 15B2
Signing time: Sun 29 Jun 2025 07:02:42 +0000
Manifest this update: Sun 29 Jun 2025 07:02:42 +0000
Manifest next update: Mon 30 Jun 2025 07:02:42 +0000
Files and hashes: 1: daRvv8jeUjM5XHPeUflVO7doRgU.crl (hash: NXW606bvE0+ZkvSR5Ze1KzRPkfaes1nJOBne5KQ4gFw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/427e2c-96f6-4e43-914a-8c7c54f3c5b0/1/daRvv8jeUjM5XHPeUflVO7doRgU.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/427e2c-96f6-4e43-914a-8c7c54f3c5b0/1/daRvv8jeUjM5XHPeUflVO7doRgU.mft
rsync://rpki.ripe.net/repository/DEFAULT/daRvv8jeUjM5XHPeUflVO7doRgU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:7e:cf:89:24:7a:d1:0d:cb:df:c8:83:a1:c5:1b:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75a46fbfc8de5233395c73de51f9553bb7684605
Validity
Not Before: Jun 29 07:02:42 2025 GMT
Not After : Jun 30 07:02:42 2025 GMT
Subject: CN=0814a4b1944c3b0ca41198fb3613bff3fd413ebc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:77:45:01:f6:79:38:88:a0:f6:71:81:e0:80:
fc:0d:7d:7f:dd:af:bc:b0:bc:70:7c:75:13:ba:76:
bc:ce:1d:b9:b8:38:13:a6:70:d5:ef:4c:05:9e:c6:
6e:24:b2:da:a6:b4:4f:6f:f6:7b:d7:1e:85:e2:da:
95:76:f1:a5:56:36:16:ea:f9:60:9f:2c:e4:0c:0f:
98:18:9d:ff:1a:19:2b:24:4a:30:29:44:26:d0:32:
4f:88:1c:7f:4b:a0:a1:11:48:05:0c:f4:dd:5a:1d:
1b:78:25:06:d6:4f:5b:86:64:80:49:0a:b0:e5:38:
a0:5d:40:8e:a5:37:23:d0:6a:a0:db:38:99:fa:b9:
11:7c:a9:8c:4f:11:4a:92:97:c4:58:e2:7d:e3:0f:
72:0f:fe:03:84:c5:8d:df:04:57:f0:de:65:72:39:
99:24:17:58:ef:9c:1f:1e:4c:a5:d7:f0:4f:ec:69:
77:60:59:45:11:78:05:34:ed:4a:cd:70:7b:fb:d9:
a6:35:17:5c:df:e5:6b:9f:74:8d:4c:82:2c:57:3b:
f5:8d:32:22:88:72:10:60:49:39:b6:e6:95:25:a3:
1b:a9:58:5f:c0:53:f3:cd:72:44:94:31:c0:92:d0:
0a:85:fb:24:f4:c8:17:fd:c0:56:80:86:e9:c9:3a:
78:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:14:A4:B1:94:4C:3B:0C:A4:11:98:FB:36:13:BF:F3:FD:41:3E:BC
X509v3 Authority Key Identifier:
keyid:75:A4:6F:BF:C8:DE:52:33:39:5C:73:DE:51:F9:55:3B:B7:68:46:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/daRvv8jeUjM5XHPeUflVO7doRgU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/427e2c-96f6-4e43-914a-8c7c54f3c5b0/1/daRvv8jeUjM5XHPeUflVO7doRgU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/427e2c-96f6-4e43-914a-8c7c54f3c5b0/1/daRvv8jeUjM5XHPeUflVO7doRgU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:fe:5f:ea:c3:d0:4d:81:8e:87:94:a8:16:26:aa:9b:6c:45:
a6:da:6f:74:00:dd:13:bb:3a:fd:55:43:bb:36:66:e6:3c:29:
ca:48:71:28:7b:fd:86:fb:8f:46:46:3a:0d:27:d1:dd:f3:49:
9c:74:56:38:31:60:7d:e3:2f:0e:bb:11:ac:9e:90:8d:69:b1:
bb:a4:6f:55:7d:fc:f7:9c:0d:a7:8a:8a:f2:99:93:1e:64:9f:
bd:81:e1:0c:f7:d6:30:3b:1e:d7:4d:5e:73:fc:93:86:17:de:
e1:10:52:dd:32:4f:f0:a9:52:70:e4:f0:83:bf:3e:ae:44:0b:
5f:9d:88:90:2d:6c:8c:4d:7e:b3:0a:b2:63:ab:be:ff:75:e0:
b2:f4:66:98:5e:49:26:a4:0e:20:58:e9:f6:a2:ea:1a:e3:cd:
39:3a:ba:b5:00:fe:89:62:ec:42:a2:5a:f3:42:4b:81:3a:78:
09:f8:af:ce:57:ff:68:59:b4:f8:4b:27:0a:f8:99:70:09:06:
ae:13:51:80:50:13:10:68:3e:b0:86:d2:32:b4:9d:72:4e:e0:
ef:da:57:c8:42:c4:37:05:39:d4:84:7e:89:46:1e:52:13:9e:
dd:b8:b2:38:a9:d3:58:34:1d:dd:d6:2c:1f:11:04:77:69:9a:
5a:cd:db:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 09:08:29 2025 by rpki-client