Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/ffac24-7ac5-45a6-a946-e0812df1221f/1/D2vaHb-nfHTacoBe7lQY0_DMU50.mft
File: D2vaHb-nfHTacoBe7lQY0_DMU50.mft (raw, json)
Hash identifier: tC0cbkE9mEa1Sh+0fp2o2QiVG8iSphyxZ6faeIdFuDc=
Subject key identifier: 19:DC:94:68:CD:02:CA:CA:2C:86:C0:18:3C:45:4B:95:FD:9E:65:A6
Authority key identifier: 0F:6B:DA:1D:BF:A7:7C:74:DA:72:80:5E:EE:54:18:D3:F0:CC:53:9D
Certificate issuer: /CN=0f6bda1dbfa77c74da72805eee5418d3f0cc539d
Certificate serial: 0197B5FC0356A7EFB8C194651E9645785065
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D2vaHb-nfHTacoBe7lQY0_DMU50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/ffac24-7ac5-45a6-a946-e0812df1221f/1/D2vaHb-nfHTacoBe7lQY0_DMU50.mft
Manifest number: 12D8
Signing time: Sat 28 Jun 2025 10:01:21 +0000
Manifest this update: Sat 28 Jun 2025 10:01:21 +0000
Manifest next update: Sun 29 Jun 2025 10:01:21 +0000
Files and hashes: 1: D2vaHb-nfHTacoBe7lQY0_DMU50.crl (hash: ZDE/PeVRlpTjAwZ1FXZjiG+oj4dZagcfl0LG92wU8UY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/ffac24-7ac5-45a6-a946-e0812df1221f/1/D2vaHb-nfHTacoBe7lQY0_DMU50.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/ffac24-7ac5-45a6-a946-e0812df1221f/1/D2vaHb-nfHTacoBe7lQY0_DMU50.mft
rsync://rpki.ripe.net/repository/DEFAULT/D2vaHb-nfHTacoBe7lQY0_DMU50.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:fc:03:56:a7:ef:b8:c1:94:65:1e:96:45:78:50:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f6bda1dbfa77c74da72805eee5418d3f0cc539d
Validity
Not Before: Jun 28 10:01:21 2025 GMT
Not After : Jun 29 10:01:21 2025 GMT
Subject: CN=19dc9468cd02caca2c86c0183c454b95fd9e65a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:31:86:14:30:c7:7e:fc:76:6a:7b:ea:33:fe:
84:03:cf:42:b9:3f:dd:86:5c:c0:a9:6e:cc:42:f7:
76:83:c8:8d:01:ce:d5:77:e6:e0:4e:f9:1a:7e:c7:
6b:73:47:4a:f3:72:0b:95:23:5c:cf:49:22:bd:f8:
79:95:ac:80:a3:59:81:b0:53:6d:f2:e2:a2:1e:73:
f2:65:70:ce:c8:73:49:a3:eb:0b:90:09:aa:85:f9:
e8:d9:40:10:bb:68:f5:0b:95:a7:2b:77:64:88:24:
fc:30:43:6d:dd:04:14:14:39:72:b8:f9:10:62:cd:
24:2f:55:dc:58:a0:b2:4e:a7:d6:b2:57:d9:d7:12:
f6:8a:b8:6e:6d:b8:a3:be:00:ee:28:e4:ae:e4:e0:
23:73:f7:f5:b1:ec:39:04:9f:66:d9:c8:10:33:b0:
0d:dc:45:05:a8:45:af:e3:ef:f5:27:df:75:fe:bd:
0c:03:7a:a7:a2:d3:db:26:c7:b6:a8:3e:5d:2b:29:
16:68:af:c8:e0:59:2b:37:2b:f8:17:55:dd:f3:2f:
be:18:42:70:09:1c:5b:d6:26:fe:47:b0:90:8c:46:
7b:c4:3a:08:de:e6:96:1e:db:de:e0:dc:07:aa:d1:
9b:8a:90:0b:1e:d2:d2:ba:27:15:cb:f4:77:2a:80:
2c:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:DC:94:68:CD:02:CA:CA:2C:86:C0:18:3C:45:4B:95:FD:9E:65:A6
X509v3 Authority Key Identifier:
keyid:0F:6B:DA:1D:BF:A7:7C:74:DA:72:80:5E:EE:54:18:D3:F0:CC:53:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D2vaHb-nfHTacoBe7lQY0_DMU50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/ffac24-7ac5-45a6-a946-e0812df1221f/1/D2vaHb-nfHTacoBe7lQY0_DMU50.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/ffac24-7ac5-45a6-a946-e0812df1221f/1/D2vaHb-nfHTacoBe7lQY0_DMU50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:b9:29:af:43:3b:48:a7:e3:1b:7a:7a:57:a2:20:27:4e:d5:
c0:e0:9e:6b:b0:78:49:b4:e2:ab:39:fb:66:ac:67:3c:49:1c:
ea:93:6f:d7:80:4c:29:3e:f0:de:22:37:8c:63:c1:31:b1:b9:
e1:50:01:e7:d1:d9:3a:2c:80:48:26:61:30:38:bb:2e:02:fa:
af:97:07:bd:5f:13:84:86:8b:a5:0d:30:42:b5:9c:48:8d:8b:
cf:d6:42:e8:b5:6d:89:e1:92:c3:2a:a2:43:7e:62:01:02:7a:
f4:e2:7e:8a:bc:bd:7e:1f:57:62:89:16:da:37:3b:ca:6e:6b:
cb:ba:fe:a0:45:2d:29:96:ee:99:19:1c:49:3c:98:a5:78:9c:
33:06:72:3f:8e:79:88:8a:a3:ae:91:15:a0:48:9b:55:51:90:
d1:28:10:48:48:0e:68:33:01:7b:85:22:57:a4:e4:75:0d:54:
59:0f:83:8e:29:31:c8:8d:ed:6f:19:7b:ff:a3:60:6a:74:0e:
94:97:fe:24:4b:a6:06:0d:c0:e9:4a:0a:c9:66:4f:ba:37:e9:
09:25:45:cb:6d:d4:3c:0d:e3:f6:b9:f1:a9:c0:75:57:52:c5:
6f:32:1a:fe:c7:6a:cd:ed:d3:ec:5a:4f:e0:be:99:b6:39:06:
3a:4e:f8:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:50:36 2025 by rpki-client