Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/8203d9-7e3f-40ab-a6e0-085bc77bcc1c/1/danDqBE5lKqnp7EhGTd3kbIB8Gw.mft
File: danDqBE5lKqnp7EhGTd3kbIB8Gw.mft (raw, json)
Hash identifier: V1Z/Tk0oGlByNrsuVVUtD4jN/Q4rLQxBgzsvK13Zm6Q=
Subject key identifier: 5A:3C:5E:BB:85:53:B1:9B:52:5F:76:E6:3F:CF:B3:BF:EC:8C:25:A0
Authority key identifier: 75:A9:C3:A8:11:39:94:AA:A7:A7:B1:21:19:37:77:91:B2:01:F0:6C
Certificate issuer: /CN=75a9c3a8113994aaa7a7b12119377791b201f06c
Certificate serial: 0197B8906C40D21B10133C98CB8F0FCC7E03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/danDqBE5lKqnp7EhGTd3kbIB8Gw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/8203d9-7e3f-40ab-a6e0-085bc77bcc1c/1/danDqBE5lKqnp7EhGTd3kbIB8Gw.mft
Manifest number: 0287
Signing time: Sat 28 Jun 2025 22:02:41 +0000
Manifest this update: Sat 28 Jun 2025 22:02:41 +0000
Manifest next update: Sun 29 Jun 2025 22:02:41 +0000
Files and hashes: 1: danDqBE5lKqnp7EhGTd3kbIB8Gw.crl (hash: QeDcX9Yq2cpm4keCfvpXwMvoXWhDrB9k6jMUfdrx2+M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/8203d9-7e3f-40ab-a6e0-085bc77bcc1c/1/danDqBE5lKqnp7EhGTd3kbIB8Gw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/8203d9-7e3f-40ab-a6e0-085bc77bcc1c/1/danDqBE5lKqnp7EhGTd3kbIB8Gw.mft
rsync://rpki.ripe.net/repository/DEFAULT/danDqBE5lKqnp7EhGTd3kbIB8Gw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 22:02:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:90:6c:40:d2:1b:10:13:3c:98:cb:8f:0f:cc:7e:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75a9c3a8113994aaa7a7b12119377791b201f06c
Validity
Not Before: Jun 28 22:02:41 2025 GMT
Not After : Jun 29 22:02:41 2025 GMT
Subject: CN=5a3c5ebb8553b19b525f76e63fcfb3bfec8c25a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:db:d8:5e:72:8c:38:ad:24:8a:5f:5c:02:8e:
b2:b5:76:d7:84:80:48:f3:f4:1b:c9:7c:1a:3b:74:
43:65:a1:bc:18:33:79:5d:7e:e7:53:0c:56:8d:1d:
28:56:1a:f8:a4:59:c4:2a:05:0a:d6:cf:dc:27:63:
a0:21:a8:52:db:bb:c6:17:0c:d6:b4:21:9a:81:e0:
39:91:e2:21:0a:ea:87:d7:7a:d7:6b:f5:ba:4a:14:
95:e5:f1:42:e7:1a:95:a5:27:e9:70:a3:28:2f:7e:
31:4b:53:13:e0:0a:1f:88:51:70:a8:0f:fd:5e:b9:
a4:5d:37:f6:91:c8:92:46:c1:a7:14:33:b1:74:d7:
ca:66:ad:ca:05:e2:ae:83:12:8b:34:69:8b:67:dd:
9b:98:14:04:9c:95:bc:f1:b6:3a:7c:06:a9:b2:13:
44:a8:d2:c0:a3:3b:aa:08:19:00:aa:fb:6a:b8:31:
75:32:62:62:e7:2e:ed:20:e7:f3:06:cd:b3:06:12:
d2:06:96:8f:42:87:ca:47:45:c7:00:06:6f:d6:a9:
bc:ad:46:ef:2c:e0:f6:60:ff:6d:5d:19:37:a2:42:
68:c8:10:b9:1d:88:78:7d:f9:42:44:a0:21:ac:5b:
3d:b0:9f:03:14:8a:b2:4f:44:66:fb:ce:8a:99:b6:
cc:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:3C:5E:BB:85:53:B1:9B:52:5F:76:E6:3F:CF:B3:BF:EC:8C:25:A0
X509v3 Authority Key Identifier:
keyid:75:A9:C3:A8:11:39:94:AA:A7:A7:B1:21:19:37:77:91:B2:01:F0:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/danDqBE5lKqnp7EhGTd3kbIB8Gw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/8203d9-7e3f-40ab-a6e0-085bc77bcc1c/1/danDqBE5lKqnp7EhGTd3kbIB8Gw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/8203d9-7e3f-40ab-a6e0-085bc77bcc1c/1/danDqBE5lKqnp7EhGTd3kbIB8Gw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:bd:21:8c:e0:fb:a1:19:23:f3:79:d2:7d:a3:08:77:f5:10:
8c:e2:88:ae:83:64:eb:d0:14:18:68:6e:c8:70:70:ee:63:2e:
dd:39:fb:e8:f3:78:2f:da:8f:f7:41:9c:fd:59:73:bc:86:98:
94:6a:b2:d6:6f:67:42:3d:0c:c2:53:99:6a:ad:99:a8:db:02:
4b:6b:c4:4d:35:b4:14:c7:7a:47:11:79:20:cb:86:c4:61:65:
a2:07:db:7a:4b:92:1f:6c:5b:bd:5a:a1:3b:cc:83:1d:e6:ec:
33:03:87:e1:61:db:c8:2d:1c:b2:59:94:6d:23:9c:b9:3d:36:
04:8c:8a:8d:42:c0:57:e9:55:59:dd:5b:dc:31:4c:07:13:5a:
5e:fc:11:e8:c3:9f:7a:e8:eb:5c:f3:0f:88:08:76:96:6a:06:
da:f7:01:9d:70:bb:9b:23:94:44:86:4e:2e:1b:b2:2b:30:2a:
06:1c:9b:e6:19:7e:b6:b8:49:fe:78:c7:3c:1e:05:b4:fa:e2:
89:a3:48:7f:7f:dd:bc:8e:b5:30:f5:33:b1:f7:98:e4:87:3f:
30:c4:99:f4:90:e6:90:f1:4a:a8:b8:3c:c1:31:e7:62:07:50:
f3:f6:cd:40:e6:d9:23:b0:ca:1c:05:5a:6f:41:41:02:7e:a1:
71:47:19:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 08:12:02 2025 by rpki-client