Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/0d2ca3-0234-4dbf-8190-12d28d7d4223/1/DykT4xUxAZpDKBkGVbRd2WvdLJ4.mft
File: DykT4xUxAZpDKBkGVbRd2WvdLJ4.mft (raw, json)
Hash identifier: SB9PCp1ZXjQra/afeI60/f8oi3tL4XwWpooIqWGKFHs=
Subject key identifier: FF:FD:F8:9E:6C:65:49:55:31:F7:6C:F1:DA:28:64:81:20:80:54:73
Authority key identifier: 0F:29:13:E3:15:31:01:9A:43:28:19:06:55:B4:5D:D9:6B:DD:2C:9E
Certificate issuer: /CN=0f2913e31531019a4328190655b45dd96bdd2c9e
Certificate serial: 0197B7B317447F1D62D012337FF68205431B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DykT4xUxAZpDKBkGVbRd2WvdLJ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/0d2ca3-0234-4dbf-8190-12d28d7d4223/1/DykT4xUxAZpDKBkGVbRd2WvdLJ4.mft
Manifest number: 05CF
Signing time: Sat 28 Jun 2025 18:00:56 +0000
Manifest this update: Sat 28 Jun 2025 18:00:56 +0000
Manifest next update: Sun 29 Jun 2025 18:00:56 +0000
Files and hashes: 1: DykT4xUxAZpDKBkGVbRd2WvdLJ4.crl (hash: gPumSbrZ4MbQHBXa3hZ6JNF906YauqO1xTQ04cpcIcU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/0d2ca3-0234-4dbf-8190-12d28d7d4223/1/DykT4xUxAZpDKBkGVbRd2WvdLJ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/0d2ca3-0234-4dbf-8190-12d28d7d4223/1/DykT4xUxAZpDKBkGVbRd2WvdLJ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/DykT4xUxAZpDKBkGVbRd2WvdLJ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:17:44:7f:1d:62:d0:12:33:7f:f6:82:05:43:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f2913e31531019a4328190655b45dd96bdd2c9e
Validity
Not Before: Jun 28 18:00:56 2025 GMT
Not After : Jun 29 18:00:56 2025 GMT
Subject: CN=fffdf89e6c65495531f76cf1da28648120805473
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e9:2d:03:1f:12:e6:ad:b1:ab:e6:26:8c:18:
43:4d:b1:e9:57:ce:0f:f8:1e:8d:02:aa:d9:47:fc:
cc:78:50:a1:01:2d:ea:0e:50:38:41:cd:e2:bf:e0:
04:a5:59:f1:c8:e2:56:0b:95:52:9f:39:ad:39:58:
8e:09:19:3e:e1:0a:47:6b:e7:47:65:99:ec:27:78:
c3:0f:5a:0e:c8:a0:41:7a:5d:a3:e6:4b:77:9a:11:
f5:78:43:43:9a:26:cc:f1:5e:f1:7a:2f:7d:72:c1:
34:61:14:28:16:98:14:0d:0a:ca:5f:65:0f:a7:2b:
51:2f:65:2c:07:5b:5b:ed:98:ce:df:db:34:76:02:
2f:16:a3:e7:6c:fa:bf:dd:a7:e5:40:c7:66:23:44:
81:a5:2f:10:70:a9:88:61:a1:d9:64:f8:27:48:90:
38:a8:bd:35:64:e4:0a:11:1f:dd:59:ff:fc:bd:9f:
07:60:8b:8a:bd:dd:a5:ab:1f:0c:1d:ad:f6:08:08:
3e:35:5f:15:b7:8b:b2:41:9d:55:63:52:ab:a7:5c:
75:16:85:26:2b:fc:04:11:0c:1d:7d:95:f4:91:d3:
34:ef:4e:3d:71:e9:b3:f2:63:5b:89:4a:1d:e0:52:
34:10:81:e4:5f:cf:01:f5:1c:73:47:7c:91:cc:71:
d5:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:FD:F8:9E:6C:65:49:55:31:F7:6C:F1:DA:28:64:81:20:80:54:73
X509v3 Authority Key Identifier:
keyid:0F:29:13:E3:15:31:01:9A:43:28:19:06:55:B4:5D:D9:6B:DD:2C:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DykT4xUxAZpDKBkGVbRd2WvdLJ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/0d2ca3-0234-4dbf-8190-12d28d7d4223/1/DykT4xUxAZpDKBkGVbRd2WvdLJ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/0d2ca3-0234-4dbf-8190-12d28d7d4223/1/DykT4xUxAZpDKBkGVbRd2WvdLJ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:e7:3a:c7:0e:76:b6:5b:8b:12:82:e7:51:42:48:1f:44:06:
36:f7:c2:04:d8:5e:6f:fa:00:d4:49:fd:14:b4:70:12:c4:41:
ed:66:cc:cd:73:39:aa:2a:1a:e9:5c:36:4a:64:c7:32:d6:17:
d4:24:5f:7d:cc:8c:12:8b:d3:31:f0:95:48:e5:db:5a:0e:76:
73:eb:be:36:ca:2a:f3:9c:24:07:48:0b:0c:63:c3:0b:84:22:
6a:65:8a:23:a9:7c:60:06:9a:3f:31:28:44:69:1a:c9:cd:fe:
f8:db:4e:96:c1:42:e1:ad:f4:30:d3:13:42:46:d9:a2:00:0d:
44:95:62:ec:53:97:88:7f:ed:1e:c2:f2:f3:09:bc:8c:34:1b:
69:53:80:1d:3f:67:33:97:c5:8a:e6:ac:87:ab:35:02:fd:b9:
81:c3:30:22:7c:52:31:64:ea:53:11:93:fe:f2:7e:0d:81:aa:
e2:c5:32:3c:8d:cc:75:b3:1a:b5:39:30:c5:6c:49:10:93:16:
59:74:dd:56:cd:a1:c8:2a:3f:01:74:af:49:d0:44:63:cd:e5:
3c:e4:5d:05:f8:fc:43:0e:bd:bb:2e:21:da:81:4a:f1:13:bd:
e0:9a:e0:a6:a9:1c:2e:43:80:f0:a6:b7:be:d2:f3:9a:fd:fa:
e3:91:ca:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:35:56 2025 by rpki-client