Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/2e03af-83a4-4c9f-911a-d5844b3c5177/1/dC5XHQAG_n9mCwMIzMYaFpnjSRc.mft
File: dC5XHQAG_n9mCwMIzMYaFpnjSRc.mft (raw, json)
Hash identifier: Pa96S73Im2DKDYhONUE7Gpzcs+oXmKHWe+VjuHleSW0=
Subject key identifier: 19:90:2A:36:6C:01:80:7D:8D:1B:24:1F:A3:73:AE:6C:FB:C3:79:47
Authority key identifier: 74:2E:57:1D:00:06:FE:7F:66:0B:03:08:CC:C6:1A:16:99:E3:49:17
Certificate issuer: /CN=742e571d0006fe7f660b0308ccc61a1699e34917
Certificate serial: 0197B88F022D71D532B169D55C9B4B9A4349
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dC5XHQAG_n9mCwMIzMYaFpnjSRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/2e03af-83a4-4c9f-911a-d5844b3c5177/1/dC5XHQAG_n9mCwMIzMYaFpnjSRc.mft
Manifest number: 15B3
Signing time: Sat 28 Jun 2025 22:01:09 +0000
Manifest this update: Sat 28 Jun 2025 22:01:09 +0000
Manifest next update: Sun 29 Jun 2025 22:01:09 +0000
Files and hashes: 1: dC5XHQAG_n9mCwMIzMYaFpnjSRc.crl (hash: 7e+jqjHwA1N4tK1uerOJSafdGylHKKNg5zbbY7raZYE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/2e03af-83a4-4c9f-911a-d5844b3c5177/1/dC5XHQAG_n9mCwMIzMYaFpnjSRc.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/2e03af-83a4-4c9f-911a-d5844b3c5177/1/dC5XHQAG_n9mCwMIzMYaFpnjSRc.mft
rsync://rpki.ripe.net/repository/DEFAULT/dC5XHQAG_n9mCwMIzMYaFpnjSRc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:02:2d:71:d5:32:b1:69:d5:5c:9b:4b:9a:43:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=742e571d0006fe7f660b0308ccc61a1699e34917
Validity
Not Before: Jun 28 22:01:09 2025 GMT
Not After : Jun 29 22:01:09 2025 GMT
Subject: CN=19902a366c01807d8d1b241fa373ae6cfbc37947
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:02:69:0b:b8:09:8c:90:cb:9d:b8:56:15:14:
3d:72:46:42:9c:ef:a6:c0:ec:1f:2c:5b:2b:cc:5d:
b4:6c:da:81:be:11:03:5b:93:08:ce:4d:06:77:07:
95:1b:e4:41:46:49:ed:c5:17:89:b2:b4:84:03:11:
58:cf:94:44:ad:18:ae:6d:f7:15:72:d3:19:63:44:
83:94:e6:58:1a:c2:08:3c:3e:86:01:f1:ef:f2:2b:
26:35:63:30:bf:85:8a:4a:03:14:5e:03:15:35:d8:
aa:3b:bc:e2:67:4e:2e:ee:3e:cd:d8:8a:1a:c9:15:
1f:c7:18:2e:6a:5c:30:36:a1:ec:d6:b9:78:a4:0b:
9a:3e:b5:a1:73:1e:89:bf:88:f6:16:b1:d7:b9:e9:
fe:9e:95:db:4c:63:8b:c2:6f:68:62:81:ef:c8:a2:
a6:80:be:2a:77:35:ae:2b:76:83:44:94:85:8f:88:
a8:b3:62:99:1f:e7:02:9f:62:84:a5:bb:d8:7a:fc:
9d:ff:b2:1e:c6:a9:5d:bb:81:6a:62:02:56:00:cc:
bc:f8:db:be:20:02:d4:a5:dd:2a:ae:bf:71:64:9c:
28:d4:82:22:84:61:39:7a:ec:0f:c6:f6:8a:64:5a:
c4:ff:29:32:40:57:ed:7a:94:3f:7f:5f:02:49:50:
d7:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:90:2A:36:6C:01:80:7D:8D:1B:24:1F:A3:73:AE:6C:FB:C3:79:47
X509v3 Authority Key Identifier:
keyid:74:2E:57:1D:00:06:FE:7F:66:0B:03:08:CC:C6:1A:16:99:E3:49:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dC5XHQAG_n9mCwMIzMYaFpnjSRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/2e03af-83a4-4c9f-911a-d5844b3c5177/1/dC5XHQAG_n9mCwMIzMYaFpnjSRc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/2e03af-83a4-4c9f-911a-d5844b3c5177/1/dC5XHQAG_n9mCwMIzMYaFpnjSRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d1:fc:cf:80:55:eb:c0:da:97:c1:e6:c1:08:70:a7:f7:6a:ce:
6c:f4:a7:fe:a4:7e:e1:51:c0:f7:b3:c9:ee:2d:af:a3:ec:36:
5a:cb:4a:8c:eb:61:3b:13:14:80:d9:df:64:ae:c3:57:40:14:
fd:76:50:f8:00:b7:cf:71:2c:e7:6e:c6:8e:48:58:50:94:a7:
61:89:c2:4d:8e:4f:74:68:82:ec:57:77:35:43:6e:b4:1e:0d:
07:14:dd:f8:80:ea:16:c5:2c:2f:fb:a4:3f:0a:76:09:1d:52:
a5:df:8b:58:3e:87:22:51:ec:d7:37:93:2c:70:0e:72:0b:5f:
24:28:88:ff:44:cd:79:97:25:19:5d:47:33:40:94:54:59:2e:
5d:56:97:b7:86:e1:33:79:bf:9a:f2:b5:08:a4:99:c9:47:c8:
2d:58:04:39:46:75:72:e3:1d:f2:93:8a:7c:76:cf:63:f8:17:
d0:b8:96:54:6a:5d:f5:91:b5:53:f7:0e:dc:e6:94:40:07:58:
7b:23:c3:f9:30:54:f3:d2:31:37:e2:3a:c1:29:19:0e:e0:fc:
bc:64:be:44:06:a8:9e:b5:3a:37:05:34:12:99:18:6b:80:eb:
3e:db:dc:7b:03:79:00:84:b1:3e:90:53:11:60:79:91:96:33:
f4:92:bd:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:07:07 2025 by rpki-client