Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/4a1238-cb64-4a46-af95-65be44d0dbd4/1/Dchx21CYv4OP_qmaAvZ5Nos-GrI.mft
File: Dchx21CYv4OP_qmaAvZ5Nos-GrI.mft (raw, json)
Hash identifier: 9XLH3ZTAbrIuKlPa/4TNb/pxEbMNHxAxihycA2mzFAk=
Subject key identifier: 7F:40:1D:55:47:E5:6A:42:81:E3:63:F0:E8:C4:A0:E5:94:BA:2D:2A
Authority key identifier: 0D:C8:71:DB:50:98:BF:83:8F:FE:A9:9A:02:F6:79:36:8B:3E:1A:B2
Certificate issuer: /CN=0dc871db5098bf838ffea99a02f679368b3e1ab2
Certificate serial: 0197B74564ED7FBA9166821DF19131596597
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dchx21CYv4OP_qmaAvZ5Nos-GrI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/4a1238-cb64-4a46-af95-65be44d0dbd4/1/Dchx21CYv4OP_qmaAvZ5Nos-GrI.mft
Manifest number: 15B2
Signing time: Sat 28 Jun 2025 16:01:07 +0000
Manifest this update: Sat 28 Jun 2025 16:01:07 +0000
Manifest next update: Sun 29 Jun 2025 16:01:07 +0000
Files and hashes: 1: Dchx21CYv4OP_qmaAvZ5Nos-GrI.crl (hash: qElUN7Azr9TCOr/wSTL0zofEf8p0d7eS8XTta49XdhE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/4a1238-cb64-4a46-af95-65be44d0dbd4/1/Dchx21CYv4OP_qmaAvZ5Nos-GrI.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/4a1238-cb64-4a46-af95-65be44d0dbd4/1/Dchx21CYv4OP_qmaAvZ5Nos-GrI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dchx21CYv4OP_qmaAvZ5Nos-GrI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:64:ed:7f:ba:91:66:82:1d:f1:91:31:59:65:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dc871db5098bf838ffea99a02f679368b3e1ab2
Validity
Not Before: Jun 28 16:01:07 2025 GMT
Not After : Jun 29 16:01:07 2025 GMT
Subject: CN=7f401d5547e56a4281e363f0e8c4a0e594ba2d2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:b5:bd:68:48:a3:ef:ce:d5:a8:d4:1f:fa:26:
3e:b1:04:98:79:e2:73:4d:d1:9f:38:50:04:4b:f7:
2a:1c:28:f2:14:bf:ed:64:b5:3b:47:fd:0c:ff:f2:
fa:72:fd:ea:7d:f8:95:42:58:73:1e:af:ae:9f:44:
0a:f6:fd:4f:48:e3:aa:b2:56:ea:35:94:0c:36:d8:
77:4f:e8:a1:29:b4:87:7b:ce:35:ec:94:f3:23:c6:
5d:cc:a5:55:08:52:5b:6e:1e:f5:33:ec:db:da:de:
d6:9d:23:c4:33:dd:3a:04:de:32:5a:84:36:81:d5:
9d:53:f1:06:6c:c9:27:2e:7d:3c:80:6c:84:7a:28:
03:c7:fb:f4:fc:67:82:4a:ed:0a:49:b4:4b:85:a0:
50:5c:3d:38:f8:0e:b8:92:d5:dd:a1:ea:ed:ca:2d:
35:83:0a:c4:61:10:e3:dc:82:d3:e8:cf:f0:bf:90:
18:fd:7a:df:3b:6a:7b:74:16:b7:28:c0:02:52:f7:
5c:a8:57:4a:6f:f5:08:8e:62:b7:d1:78:a9:a2:50:
07:06:ea:d0:0e:72:ba:b6:81:06:2c:86:e4:64:47:
ab:19:cc:84:ea:cc:d8:b3:9d:bb:3b:a5:b2:93:e6:
df:ee:57:40:2c:98:e4:47:4d:0a:46:f0:cf:35:3c:
ce:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:40:1D:55:47:E5:6A:42:81:E3:63:F0:E8:C4:A0:E5:94:BA:2D:2A
X509v3 Authority Key Identifier:
keyid:0D:C8:71:DB:50:98:BF:83:8F:FE:A9:9A:02:F6:79:36:8B:3E:1A:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dchx21CYv4OP_qmaAvZ5Nos-GrI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/4a1238-cb64-4a46-af95-65be44d0dbd4/1/Dchx21CYv4OP_qmaAvZ5Nos-GrI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/4a1238-cb64-4a46-af95-65be44d0dbd4/1/Dchx21CYv4OP_qmaAvZ5Nos-GrI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:74:7e:eb:61:a9:1c:08:e0:60:52:ed:1c:6a:68:f2:a0:12:
44:ba:7b:39:e7:27:fc:ee:d2:83:ba:b2:15:14:13:a8:07:7d:
aa:17:ef:9d:5e:bc:13:07:b6:34:dd:1d:ea:80:b8:53:8c:30:
da:04:4a:d7:a0:5b:96:34:ac:8f:f7:b4:50:c4:7c:1b:7b:15:
63:04:bd:74:5f:e2:35:8e:29:fc:80:41:2e:63:58:ec:69:bd:
28:cb:58:de:12:6f:5e:3e:ef:93:35:6e:eb:ec:4b:14:3d:35:
0c:b5:6b:e6:98:46:10:36:5d:db:db:5c:ee:ff:a6:76:4c:bc:
05:07:6c:20:ac:72:8e:55:6d:de:70:ca:82:36:00:24:6f:ea:
34:4f:3a:4d:32:5d:7b:21:b1:65:3f:49:7b:61:1b:97:aa:19:
1b:94:1b:87:a8:f6:b1:45:1b:c4:b7:5c:4d:d4:ce:a4:1c:cb:
01:8d:f8:53:b7:8a:e4:be:19:39:0f:4a:67:c9:d7:30:05:8f:
c9:f6:76:ac:0e:ef:e5:93:67:c0:69:2e:fb:27:d9:9d:51:c4:
76:28:4b:67:7f:c8:89:ff:1c:a6:0c:e6:b9:0b:2d:3d:8b:ae:
40:6f:b2:94:80:90:88:c8:07:6d:85:49:2d:64:97:e0:22:c4:
f6:07:8a:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:44:37 2025 by rpki-client