Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/6db2f6-e87b-4e1c-82c7-e78553a037bd/1/dYib2lT4hX2kKQxnebwAYR5z4hI.mft
File: dYib2lT4hX2kKQxnebwAYR5z4hI.mft (raw, json)
Hash identifier: GgSR9kOVeeYiFV89AFgxlPvIUtxgaRuf4516yNEKH54=
Subject key identifier: F4:91:3C:D7:47:21:00:28:7D:CC:90:9B:05:61:4C:7F:56:C3:C5:AA
Authority key identifier: 75:88:9B:DA:54:F8:85:7D:A4:29:0C:67:79:BC:00:61:1E:73:E2:12
Certificate issuer: /CN=75889bda54f8857da4290c6779bc00611e73e212
Certificate serial: 0197C3809FEE35BADB2ED834FBAB5AC60C51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dYib2lT4hX2kKQxnebwAYR5z4hI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/6db2f6-e87b-4e1c-82c7-e78553a037bd/1/dYib2lT4hX2kKQxnebwAYR5z4hI.mft
Manifest number: 15BD
Signing time: Tue 01 Jul 2025 01:01:15 +0000
Manifest this update: Tue 01 Jul 2025 01:01:15 +0000
Manifest next update: Wed 02 Jul 2025 01:01:15 +0000
Files and hashes: 1: dYib2lT4hX2kKQxnebwAYR5z4hI.crl (hash: /3JAQCSNaIzMVjco8nHlgop17heAkDe51x2wkQ7iuUo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/6db2f6-e87b-4e1c-82c7-e78553a037bd/1/dYib2lT4hX2kKQxnebwAYR5z4hI.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/6db2f6-e87b-4e1c-82c7-e78553a037bd/1/dYib2lT4hX2kKQxnebwAYR5z4hI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dYib2lT4hX2kKQxnebwAYR5z4hI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 23:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c3:80:9f:ee:35:ba:db:2e:d8:34:fb:ab:5a:c6:0c:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75889bda54f8857da4290c6779bc00611e73e212
Validity
Not Before: Jul 1 01:01:15 2025 GMT
Not After : Jul 2 01:01:15 2025 GMT
Subject: CN=f4913cd7472100287dcc909b05614c7f56c3c5aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:cc:7f:01:46:e2:d3:05:d7:f6:99:02:d7:81:
a4:0c:7f:3a:73:30:ef:04:ef:5c:9a:ea:5a:0b:86:
38:28:b2:b0:e4:9b:4f:57:2e:18:a9:98:a7:00:cd:
92:93:4e:fc:e1:2b:f9:33:56:50:7b:2e:7a:2b:5e:
b9:ce:11:9a:d0:73:33:11:f9:46:56:c0:15:16:f5:
89:1e:ec:5c:03:01:57:35:50:4b:69:a1:e7:6a:f4:
b6:ba:17:dd:ff:4f:8f:18:85:42:3d:88:d8:4a:f1:
13:13:bd:f0:d7:da:a0:24:7a:d4:ff:60:35:6b:1e:
49:fd:04:42:9f:b2:6e:3b:90:fc:d1:ae:da:28:fb:
97:31:3c:59:dc:ca:2f:2e:c1:18:f5:27:76:31:7e:
6d:97:6b:39:83:3b:16:e3:10:f0:59:ea:50:46:25:
55:ed:81:30:92:66:ef:10:a9:ae:29:18:c9:ea:b2:
ff:3b:39:f5:36:02:9d:78:cd:1a:bb:ed:d2:86:08:
db:25:f8:34:7f:32:b2:8c:ad:bd:07:58:7a:c8:4b:
fc:f0:fe:34:4f:ce:ce:f9:a2:fd:6a:29:34:ea:cd:
49:29:25:68:66:d1:b7:5b:f3:aa:52:13:84:46:07:
54:fa:ad:d1:b3:47:b3:94:90:7a:3d:e5:28:a9:15:
00:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:91:3C:D7:47:21:00:28:7D:CC:90:9B:05:61:4C:7F:56:C3:C5:AA
X509v3 Authority Key Identifier:
keyid:75:88:9B:DA:54:F8:85:7D:A4:29:0C:67:79:BC:00:61:1E:73:E2:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dYib2lT4hX2kKQxnebwAYR5z4hI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6db2f6-e87b-4e1c-82c7-e78553a037bd/1/dYib2lT4hX2kKQxnebwAYR5z4hI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6db2f6-e87b-4e1c-82c7-e78553a037bd/1/dYib2lT4hX2kKQxnebwAYR5z4hI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:f3:e4:42:62:8a:f2:a8:f3:59:51:e9:b4:d1:22:79:ba:53:
84:38:a7:bb:bb:bd:51:95:67:c4:2a:88:35:ab:63:01:67:0e:
89:e4:82:fc:e4:54:9e:64:29:e2:2f:79:fc:53:d6:55:d4:58:
61:16:fb:34:cb:91:1d:aa:0f:7b:0f:9d:f2:39:12:56:b9:05:
8b:86:a5:8a:4c:aa:cc:ab:7f:3a:ab:6d:67:60:55:2b:af:c9:
82:89:52:31:45:6d:6a:bc:1c:f3:32:0f:6e:60:bd:d4:48:b9:
ad:51:1b:af:3c:93:99:8f:1f:3e:8a:c0:1f:53:f0:93:bf:bd:
93:5c:44:cf:70:cc:37:be:72:b3:c6:6f:a0:4b:5d:51:ac:ea:
e7:1b:9b:0f:1b:e9:1b:23:cb:ad:8e:0e:09:90:8d:56:45:4d:
9c:e4:df:c7:42:42:75:ce:7e:32:b9:16:7e:08:e8:ea:fa:59:
08:01:35:69:de:e8:11:a2:50:7d:4e:e3:4d:6c:de:6b:2e:2f:
ac:03:db:49:80:9d:2d:dc:08:06:ce:b8:59:d9:24:d3:67:0a:
f5:9d:74:d6:dd:1e:dc:7a:e9:6f:3c:7e:28:53:4f:e7:54:0e:
35:70:9d:6f:6e:e8:a4:90:4d:fe:06:27:89:10:d0:54:32:c5:
93:84:26:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 03:05:48 2025 by rpki-client