Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/610872-b5b5-442f-b630-e5d1af59dea6/1/dEMndQQU00na3gIjNJfPR2Vc0-Q.mft
File: dEMndQQU00na3gIjNJfPR2Vc0-Q.mft (raw, json)
Hash identifier: mn4/mraM/6xyyCoxzyaX7rUMfiX5xmr1m+hX4H+iHnQ=
Subject key identifier: F3:10:74:0C:33:B7:5A:79:81:26:75:93:8B:17:65:92:1E:BD:E4:35
Authority key identifier: 74:43:27:75:04:14:D3:49:DA:DE:02:23:34:97:CF:47:65:5C:D3:E4
Certificate issuer: /CN=744327750414d349dade02233497cf47655cd3e4
Certificate serial: 0197C380DEFB3F843315722E08287521D05E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dEMndQQU00na3gIjNJfPR2Vc0-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/610872-b5b5-442f-b630-e5d1af59dea6/1/dEMndQQU00na3gIjNJfPR2Vc0-Q.mft
Manifest number: 0F8D
Signing time: Tue 01 Jul 2025 01:01:32 +0000
Manifest this update: Tue 01 Jul 2025 01:01:32 +0000
Manifest next update: Wed 02 Jul 2025 01:01:32 +0000
Files and hashes: 1: dEMndQQU00na3gIjNJfPR2Vc0-Q.crl (hash: XySB8MjIiubFy/5FvQEtBGfno2ZYe11Cx0RbkYz+stI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/610872-b5b5-442f-b630-e5d1af59dea6/1/dEMndQQU00na3gIjNJfPR2Vc0-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/610872-b5b5-442f-b630-e5d1af59dea6/1/dEMndQQU00na3gIjNJfPR2Vc0-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/dEMndQQU00na3gIjNJfPR2Vc0-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 23:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c3:80:de:fb:3f:84:33:15:72:2e:08:28:75:21:d0:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=744327750414d349dade02233497cf47655cd3e4
Validity
Not Before: Jul 1 01:01:32 2025 GMT
Not After : Jul 2 01:01:32 2025 GMT
Subject: CN=f310740c33b75a79812675938b1765921ebde435
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e6:1b:d8:4e:a4:ce:88:b7:92:0a:82:76:12:
4d:e7:3c:57:a6:21:e7:da:e7:45:de:43:8e:35:01:
52:c1:7f:c1:99:37:ba:a5:de:25:d1:62:d6:6a:bd:
89:e5:80:c5:bb:a8:dc:75:22:5d:1c:29:78:b5:43:
3a:ea:32:17:ee:51:e9:69:af:2d:0f:4b:5a:7e:17:
91:89:eb:71:41:b8:af:03:ec:d9:50:8e:fb:cf:19:
7c:80:16:4d:31:99:89:84:f4:d5:f1:53:33:80:3f:
45:b4:40:30:26:69:cd:78:2c:1e:20:56:9a:ae:e3:
12:7f:cf:cc:1c:a0:6b:8b:3c:e2:0b:f7:a1:da:b9:
f9:ac:1a:fb:15:46:4a:12:6f:b4:9d:7c:bd:ea:cd:
10:b8:60:44:13:40:d1:14:43:41:ca:8e:9b:59:31:
aa:75:2d:8f:29:df:08:83:0b:5a:6f:8e:45:22:c1:
6c:d1:a4:89:df:2d:e7:2a:9f:06:6f:76:52:73:d8:
40:21:db:38:74:eb:4e:4d:aa:18:ec:6a:31:45:3b:
91:e8:af:63:ca:0c:fb:ff:bc:1d:b3:fb:09:20:5e:
52:39:32:6e:a5:75:18:05:54:ae:0b:a6:b3:fd:75:
3a:7b:a1:72:96:26:bb:6e:d5:26:32:fd:c3:c6:62:
b5:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:10:74:0C:33:B7:5A:79:81:26:75:93:8B:17:65:92:1E:BD:E4:35
X509v3 Authority Key Identifier:
keyid:74:43:27:75:04:14:D3:49:DA:DE:02:23:34:97:CF:47:65:5C:D3:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dEMndQQU00na3gIjNJfPR2Vc0-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/610872-b5b5-442f-b630-e5d1af59dea6/1/dEMndQQU00na3gIjNJfPR2Vc0-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/610872-b5b5-442f-b630-e5d1af59dea6/1/dEMndQQU00na3gIjNJfPR2Vc0-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:57:9c:d8:23:f5:22:9b:b4:4b:3e:3b:eb:23:d2:2a:37:f4:
ca:9b:16:ff:3d:dc:1d:76:a7:ec:f6:7b:bc:14:ce:f6:6b:38:
e1:ff:f7:33:b4:09:ca:09:c3:df:19:da:35:ac:4b:3c:10:81:
15:03:13:32:94:10:11:2f:cc:32:a2:24:79:cf:d6:bb:23:ad:
d7:bd:77:b9:58:78:c8:58:24:72:75:0c:3f:9f:8a:fa:10:8d:
ad:d5:ad:e1:b7:1d:68:0d:00:e0:6b:46:0f:a5:be:df:9f:a5:
70:64:31:d0:dc:3f:b7:4f:31:1d:22:f7:65:cd:0c:dd:0d:d3:
47:67:49:9a:df:21:c5:9a:c7:61:9c:73:ec:51:0b:18:92:be:
55:a7:23:ae:fa:a6:83:76:95:e7:0f:29:ee:4a:f6:a1:1a:4d:
e4:54:d9:c2:02:6e:8f:a0:a1:fe:78:0e:8c:d5:e1:bc:91:2c:
55:ca:fc:32:26:83:5d:58:7e:08:0a:db:dc:69:ac:8d:61:a1:
1f:bb:f4:d5:ed:67:13:06:92:ae:06:20:45:4c:65:df:a8:11:
ff:18:df:51:3c:38:15:0d:c5:3e:6e:3c:7e:a7:3f:99:94:7f:
fd:19:83:a3:6c:a6:b3:82:73:c8:b1:7d:7d:8a:cd:03:83:42:
b4:f2:7b:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 07:42:24 2025 by rpki-client