Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/dece63-f0c0-465b-ad82-c8751f954524/1/dlIO_x7h4o493PuJ58tvfYmnfJw.mft
File: dlIO_x7h4o493PuJ58tvfYmnfJw.mft (raw, json)
Hash identifier: RLN9xS4mgbGIE6oe81lpvtGA098RVm4TOtiJd9PpFnU=
Subject key identifier: E5:98:DC:FD:9C:47:37:50:01:D7:4F:36:75:31:AD:A3:5A:7A:61:0D
Authority key identifier: 76:52:0E:FF:1E:E1:E2:8E:3D:DC:FB:89:E7:CB:6F:7D:89:A7:7C:9C
Certificate issuer: /CN=76520eff1ee1e28e3ddcfb89e7cb6f7d89a77c9c
Certificate serial: 0197C45BECA7FEE49E150206E1F33F7E16D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dlIO_x7h4o493PuJ58tvfYmnfJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/dece63-f0c0-465b-ad82-c8751f954524/1/dlIO_x7h4o493PuJ58tvfYmnfJw.mft
Manifest number: 0148
Signing time: Tue 01 Jul 2025 05:00:47 +0000
Manifest this update: Tue 01 Jul 2025 05:00:47 +0000
Manifest next update: Wed 02 Jul 2025 05:00:47 +0000
Files and hashes: 1: dlIO_x7h4o493PuJ58tvfYmnfJw.crl (hash: tMBuXgShhO9mHXo5eSjOXfx0yqVT6so+OEsd7A+Pye4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/dece63-f0c0-465b-ad82-c8751f954524/1/dlIO_x7h4o493PuJ58tvfYmnfJw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/dece63-f0c0-465b-ad82-c8751f954524/1/dlIO_x7h4o493PuJ58tvfYmnfJw.mft
rsync://rpki.ripe.net/repository/DEFAULT/dlIO_x7h4o493PuJ58tvfYmnfJw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 23:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c4:5b:ec:a7:fe:e4:9e:15:02:06:e1:f3:3f:7e:16:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76520eff1ee1e28e3ddcfb89e7cb6f7d89a77c9c
Validity
Not Before: Jul 1 05:00:47 2025 GMT
Not After : Jul 2 05:00:47 2025 GMT
Subject: CN=e598dcfd9c47375001d74f367531ada35a7a610d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:13:2f:dc:3e:e2:22:69:37:e5:eb:6f:50:50:
69:e8:15:80:39:aa:67:a5:0e:7b:ba:71:b1:d8:0f:
70:48:d6:2c:b1:a5:a8:fc:1c:9d:80:a8:d2:c7:4d:
9c:83:da:66:bc:0e:10:c4:12:a9:e2:5f:08:77:06:
e5:ba:1e:0e:a6:ac:d0:95:2d:c0:33:f7:2d:9b:8c:
81:1b:20:3d:4d:d0:bc:d2:48:19:21:3c:e8:68:91:
46:95:35:52:dd:14:ff:7d:f9:75:9d:eb:7f:5e:01:
19:fd:32:3c:7a:67:36:25:8a:5e:22:37:21:e1:41:
c0:1e:ea:34:25:68:ca:3a:33:4f:78:5d:a7:7c:93:
85:9d:03:42:aa:89:e6:a3:9c:c5:d6:35:4b:9e:57:
9b:27:e8:f3:12:c2:fa:66:3a:e0:b2:cc:d5:ba:51:
b7:e7:e5:a8:80:9a:c5:50:50:9c:c5:90:c3:de:57:
cb:a8:c9:d2:76:3b:a7:b9:91:52:61:1e:ac:ff:f0:
e9:9d:cb:e9:c7:ec:c7:45:94:b1:68:50:49:7e:79:
71:b2:0d:d4:3e:73:a7:c5:02:77:87:7c:1c:66:cf:
a4:4f:35:25:26:d6:96:49:48:e5:2a:96:ea:f7:65:
da:df:11:fe:12:3a:21:c6:87:dc:f7:93:e0:3e:b0:
28:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:98:DC:FD:9C:47:37:50:01:D7:4F:36:75:31:AD:A3:5A:7A:61:0D
X509v3 Authority Key Identifier:
keyid:76:52:0E:FF:1E:E1:E2:8E:3D:DC:FB:89:E7:CB:6F:7D:89:A7:7C:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dlIO_x7h4o493PuJ58tvfYmnfJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/dece63-f0c0-465b-ad82-c8751f954524/1/dlIO_x7h4o493PuJ58tvfYmnfJw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/dece63-f0c0-465b-ad82-c8751f954524/1/dlIO_x7h4o493PuJ58tvfYmnfJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:c3:54:cc:e0:5c:dc:34:cc:71:87:9d:2b:ef:11:bb:f3:7e:
e6:2c:4a:23:a0:0d:2b:19:21:ed:41:c6:9c:72:f7:48:11:f1:
9d:6a:a4:f5:00:9b:12:35:8d:8a:a9:94:c7:97:27:2b:8c:69:
1c:8d:56:37:5e:bd:fc:78:0d:b4:6b:16:92:29:fc:e9:7d:d6:
05:07:64:e5:e2:03:78:f4:f4:23:53:44:61:3d:68:f2:18:8b:
77:5d:bc:24:80:cc:1a:5d:2c:f1:3e:b8:b3:75:09:9c:cd:ff:
38:a9:6a:4c:90:79:9b:b5:1d:91:fa:3c:f8:ee:d8:66:96:58:
98:45:1f:9a:49:ca:00:b7:5d:4d:03:59:b5:02:75:3d:72:d8:
07:58:a9:6e:f1:b4:71:1a:a0:81:70:ca:c1:2f:35:d0:cb:7e:
73:53:07:09:26:28:b0:97:74:74:0a:4b:b1:97:f7:ce:e4:ab:
f0:39:28:fd:19:a3:c6:27:5e:cc:ad:00:02:c4:26:f8:5a:32:
ce:a8:1b:af:f8:0c:2f:a2:c4:95:1c:e3:6d:d8:53:bf:c6:ba:
95:9b:8c:90:65:a8:94:66:a8:64:0d:4f:0b:6f:3a:11:c2:69:
1e:9c:b2:bb:22:ff:8d:07:b1:1f:a6:9f:24:f9:47:a3:48:5e:
99:52:ad:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 06:22:19 2025 by rpki-client