Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/1e6d59-27cf-419f-ad1d-6210641e52d6/1/dxToFxWNwwfu1NTG7fUaieVwPs8.mft
File: dxToFxWNwwfu1NTG7fUaieVwPs8.mft (raw, json)
Hash identifier: Z3wSptjLDJ02FphpJWTylny4bj4DJx/AsM0NGsN5cMo=
Subject key identifier: 37:AA:0F:DB:9F:6D:CA:14:0A:AD:1F:4C:E6:69:E3:7C:93:54:3B:9E
Authority key identifier: 77:14:E8:17:15:8D:C3:07:EE:D4:D4:C6:ED:F5:1A:89:E5:70:3E:CF
Certificate issuer: /CN=7714e817158dc307eed4d4c6edf51a89e5703ecf
Certificate serial: 0197B8FD0FCA1C52B4B8C94D763BA977046F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dxToFxWNwwfu1NTG7fUaieVwPs8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/1e6d59-27cf-419f-ad1d-6210641e52d6/1/dxToFxWNwwfu1NTG7fUaieVwPs8.mft
Manifest number: 0D8D
Signing time: Sun 29 Jun 2025 00:01:21 +0000
Manifest this update: Sun 29 Jun 2025 00:01:21 +0000
Manifest next update: Mon 30 Jun 2025 00:01:21 +0000
Files and hashes: 1: dxToFxWNwwfu1NTG7fUaieVwPs8.crl (hash: iWDaGy4IYhzcOCl2YXF3K3iTpYf1340DuNQvm3gxP5U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/1e6d59-27cf-419f-ad1d-6210641e52d6/1/dxToFxWNwwfu1NTG7fUaieVwPs8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/1e6d59-27cf-419f-ad1d-6210641e52d6/1/dxToFxWNwwfu1NTG7fUaieVwPs8.mft
rsync://rpki.ripe.net/repository/DEFAULT/dxToFxWNwwfu1NTG7fUaieVwPs8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:fd:0f:ca:1c:52:b4:b8:c9:4d:76:3b:a9:77:04:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7714e817158dc307eed4d4c6edf51a89e5703ecf
Validity
Not Before: Jun 29 00:01:21 2025 GMT
Not After : Jun 30 00:01:21 2025 GMT
Subject: CN=37aa0fdb9f6dca140aad1f4ce669e37c93543b9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:e0:ba:23:74:d3:f4:cb:58:f9:86:42:58:dc:
18:7b:76:06:69:9e:a6:14:18:d4:54:32:21:19:83:
1f:f9:d9:0f:7c:fd:30:c5:17:72:79:d7:cb:a5:d3:
7e:6d:70:59:b4:51:db:e2:6e:f2:dd:29:e3:cd:c0:
81:5a:e5:4a:04:09:07:01:72:b1:68:5d:c6:c4:7b:
7f:8a:75:3e:36:09:66:02:82:e6:b6:cd:5d:8d:99:
07:91:3b:4a:f4:23:9e:6f:39:4f:74:46:76:91:d8:
93:48:66:c8:87:98:26:9a:5b:9f:db:01:83:b8:c8:
e8:37:94:88:06:1e:99:76:4f:79:e1:84:04:fb:fb:
3a:9f:15:ab:17:08:1f:26:6f:b9:da:29:f3:83:f6:
a9:82:0f:5e:72:97:78:d7:13:89:c8:ed:ca:82:9d:
2d:a5:63:b3:ca:91:e9:df:39:63:aa:ad:7e:10:5f:
f1:23:97:3a:1f:af:c2:4a:6b:85:56:0f:ee:b3:ff:
6b:0b:f9:6d:e8:4e:6e:f1:55:44:e3:ed:b4:62:99:
13:8f:e5:46:d5:2a:fd:f0:95:e7:3d:48:d9:5c:82:
f2:52:3f:ff:0c:50:d4:4a:4f:5b:4b:ea:b1:2b:84:
1f:8b:64:10:c2:44:cd:ab:f7:7b:db:33:e0:f3:ee:
6f:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:AA:0F:DB:9F:6D:CA:14:0A:AD:1F:4C:E6:69:E3:7C:93:54:3B:9E
X509v3 Authority Key Identifier:
keyid:77:14:E8:17:15:8D:C3:07:EE:D4:D4:C6:ED:F5:1A:89:E5:70:3E:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dxToFxWNwwfu1NTG7fUaieVwPs8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/1e6d59-27cf-419f-ad1d-6210641e52d6/1/dxToFxWNwwfu1NTG7fUaieVwPs8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/1e6d59-27cf-419f-ad1d-6210641e52d6/1/dxToFxWNwwfu1NTG7fUaieVwPs8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:77:4e:6d:70:fc:64:00:c3:0b:b4:40:01:02:13:76:1c:55:
17:a1:c7:46:ed:31:07:da:23:fd:23:08:89:e3:90:fa:ea:9d:
9a:31:0d:ef:b0:34:d4:51:9b:40:5f:3d:a1:15:e0:c0:f2:63:
2d:e9:7e:07:cc:37:f6:54:cd:10:3b:dd:b6:87:61:d0:18:b9:
90:3e:e4:4f:15:5c:9b:1f:82:d3:fb:56:26:f8:f7:fb:e1:6a:
6b:21:60:cf:d6:c4:d9:4e:b5:f1:e3:2f:32:5c:ac:e0:7f:b7:
09:a1:56:d7:14:6e:0a:95:9c:4d:3f:6a:71:78:f8:70:c3:3a:
23:97:83:dc:58:1a:ed:43:a9:b9:04:f9:cf:10:b9:ed:8e:5a:
01:36:8b:43:a9:77:ad:b1:08:72:fb:be:f9:83:1a:a9:ea:97:
05:2f:70:d0:24:be:01:7e:f6:d0:f8:b6:09:2d:36:7d:61:a9:
4f:db:05:8c:c0:91:6a:2b:34:ea:7d:89:73:e4:3b:ad:b9:67:
7e:38:50:84:12:8f:01:27:19:25:21:14:ff:a4:ad:b5:17:24:
34:1e:bb:aa:11:22:69:0d:0f:d2:9b:75:ad:11:25:5d:d5:a7:
db:c9:59:86:29:3d:2d:67:e3:49:7b:c3:dc:51:21:4a:e4:70:
10:19:2c:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:38:35 2025 by rpki-client