Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/53be2f-e997-470d-93bf-41b5863ca8db/1/DhI9xSvlTkcrv-N18u1B5JqHg-c.mft
File: DhI9xSvlTkcrv-N18u1B5JqHg-c.mft (raw, json)
Hash identifier: JR+v1VTvBYq31uV9fZykdzVvZyN2awVXbdMAUeeDSxI=
Subject key identifier: 3F:61:4E:B1:BD:0D:9E:94:FA:36:B1:4F:56:C5:75:95:51:5C:62:6E
Authority key identifier: 0E:12:3D:C5:2B:E5:4E:47:2B:BF:E3:75:F2:ED:41:E4:9A:87:83:E7
Certificate issuer: /CN=0e123dc52be54e472bbfe375f2ed41e49a8783e7
Certificate serial: 0197B7B32D0CC164E04FE5C571D6B7E7A920
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DhI9xSvlTkcrv-N18u1B5JqHg-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/53be2f-e997-470d-93bf-41b5863ca8db/1/DhI9xSvlTkcrv-N18u1B5JqHg-c.mft
Manifest number: 05E4
Signing time: Sat 28 Jun 2025 18:01:02 +0000
Manifest this update: Sat 28 Jun 2025 18:01:02 +0000
Manifest next update: Sun 29 Jun 2025 18:01:02 +0000
Files and hashes: 1: DhI9xSvlTkcrv-N18u1B5JqHg-c.crl (hash: 5lw0BMFQVwn/LwdMsns4XIHNupHgXhnJCdcdna1+s1M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/53be2f-e997-470d-93bf-41b5863ca8db/1/DhI9xSvlTkcrv-N18u1B5JqHg-c.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/53be2f-e997-470d-93bf-41b5863ca8db/1/DhI9xSvlTkcrv-N18u1B5JqHg-c.mft
rsync://rpki.ripe.net/repository/DEFAULT/DhI9xSvlTkcrv-N18u1B5JqHg-c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:2d:0c:c1:64:e0:4f:e5:c5:71:d6:b7:e7:a9:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e123dc52be54e472bbfe375f2ed41e49a8783e7
Validity
Not Before: Jun 28 18:01:02 2025 GMT
Not After : Jun 29 18:01:02 2025 GMT
Subject: CN=3f614eb1bd0d9e94fa36b14f56c57595515c626e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:8c:7c:c3:1d:9c:2d:a1:df:89:af:15:fc:e7:
8c:31:0c:d9:b1:ba:31:ad:03:4e:0a:5f:ca:ee:a9:
4c:b7:b5:52:39:7b:1c:c9:d5:42:f3:0d:8e:47:22:
03:a6:7a:5b:09:d5:19:43:74:38:f4:86:4b:19:e3:
36:0d:37:d0:38:54:d6:eb:a7:d5:ca:38:4e:8c:a3:
39:b9:00:07:c2:0e:3d:73:35:31:a2:fa:a9:b0:1d:
55:12:55:d1:85:8d:dc:07:47:c0:09:45:64:6e:0f:
d1:63:40:16:20:cd:01:38:33:31:ee:fc:06:04:6c:
f8:f9:d3:ac:d2:8f:3c:73:b3:50:0d:9d:b6:8a:aa:
db:a2:2b:27:11:3e:27:08:d5:45:dd:86:33:a4:9c:
04:7d:36:42:a0:82:73:a4:1e:b6:72:4c:70:44:94:
7a:47:83:0d:eb:16:6c:9e:85:f8:6c:85:74:83:1d:
8f:9f:6d:1d:ae:25:f6:13:76:53:e2:1c:ac:dd:e9:
eb:04:2a:f8:cf:49:5e:35:88:11:48:aa:35:00:f7:
2d:e9:e8:ff:3b:c6:e8:8f:48:1f:6b:cc:9c:b6:cb:
5a:ef:58:f6:dd:d1:49:08:3d:e5:f1:b6:d3:80:38:
07:66:0f:4a:45:da:3d:0d:fb:1e:ea:c8:31:9e:8e:
41:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:61:4E:B1:BD:0D:9E:94:FA:36:B1:4F:56:C5:75:95:51:5C:62:6E
X509v3 Authority Key Identifier:
keyid:0E:12:3D:C5:2B:E5:4E:47:2B:BF:E3:75:F2:ED:41:E4:9A:87:83:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DhI9xSvlTkcrv-N18u1B5JqHg-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/53be2f-e997-470d-93bf-41b5863ca8db/1/DhI9xSvlTkcrv-N18u1B5JqHg-c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/53be2f-e997-470d-93bf-41b5863ca8db/1/DhI9xSvlTkcrv-N18u1B5JqHg-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:2b:4b:16:79:d7:04:8e:cd:a1:46:fa:0b:ac:37:c7:cd:29:
c5:45:c1:5e:bf:a1:88:b9:7a:99:4b:a6:17:ab:bd:ed:b9:fa:
56:e9:5b:99:64:53:bf:19:73:b6:e0:4f:58:cc:ae:64:e6:f1:
b3:1a:b0:7d:94:ad:a5:a0:71:bf:ca:96:e5:8f:4d:d1:07:76:
dd:fb:40:cb:63:69:b3:40:83:49:6c:65:c3:0d:75:bc:14:22:
48:eb:8d:10:e6:00:b4:ad:62:8c:f1:b4:ba:0b:ba:a9:84:2e:
de:e5:27:b7:53:26:5a:eb:d3:e1:7d:bb:4e:43:fc:b8:60:a1:
c8:46:f1:b8:99:a1:ef:f7:bf:e9:2f:e2:07:ec:3d:c7:64:cb:
24:d6:b6:64:f4:1f:d4:f5:22:1e:97:48:e0:da:e5:d0:db:f0:
e2:21:10:fa:54:14:59:5f:a3:15:0e:37:4d:22:86:78:50:9f:
50:24:d5:65:5c:56:1a:75:6d:5a:34:9d:b4:7f:c2:06:a3:2e:
ed:c3:b4:5b:53:dc:93:ed:ee:ea:06:ff:0d:4b:f4:6f:eb:ea:
d9:07:7c:e8:c0:51:72:c6:8d:b3:0b:66:ae:fb:ed:f6:fa:e7:
f9:d2:eb:c0:47:a7:fc:f8:46:e8:90:88:80:6f:8d:ee:51:d0:
76:bc:9d:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:20:29 2025 by rpki-client