Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/2754de-a5d5-487f-9fdd-c33b3644dd3f/1/dcqnmRKIh2aA16yQqFafP8IDh_o.mft
File: dcqnmRKIh2aA16yQqFafP8IDh_o.mft (raw, json)
Hash identifier: 8ZA/93FKZIXU22tPHTS/u2ELSBl0SR/pH3HDpgAR62U=
Subject key identifier: 42:84:D3:6C:5D:5F:34:0C:90:FA:F9:24:52:3B:7E:16:FA:CA:9C:63
Authority key identifier: 75:CA:A7:99:12:88:87:66:80:D7:AC:90:A8:56:9F:3F:C2:03:87:FA
Certificate issuer: /CN=75caa7991288876680d7ac90a8569f3fc20387fa
Certificate serial: 0197B70E780F4CBC8C408257ADB7D8A07ABE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dcqnmRKIh2aA16yQqFafP8IDh_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/2754de-a5d5-487f-9fdd-c33b3644dd3f/1/dcqnmRKIh2aA16yQqFafP8IDh_o.mft
Manifest number: 15B2
Signing time: Sat 28 Jun 2025 15:01:08 +0000
Manifest this update: Sat 28 Jun 2025 15:01:08 +0000
Manifest next update: Sun 29 Jun 2025 15:01:08 +0000
Files and hashes: 1: dcqnmRKIh2aA16yQqFafP8IDh_o.crl (hash: rZiHduhs2HwiDrMb3S2nHPojOVMbwcos5s5kGOZRsWY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/2754de-a5d5-487f-9fdd-c33b3644dd3f/1/dcqnmRKIh2aA16yQqFafP8IDh_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/2754de-a5d5-487f-9fdd-c33b3644dd3f/1/dcqnmRKIh2aA16yQqFafP8IDh_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/dcqnmRKIh2aA16yQqFafP8IDh_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:78:0f:4c:bc:8c:40:82:57:ad:b7:d8:a0:7a:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75caa7991288876680d7ac90a8569f3fc20387fa
Validity
Not Before: Jun 28 15:01:08 2025 GMT
Not After : Jun 29 15:01:08 2025 GMT
Subject: CN=4284d36c5d5f340c90faf924523b7e16faca9c63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:18:bd:ee:11:8b:07:27:6c:d4:89:b6:eb:0e:
64:06:5f:e2:7c:dd:74:0a:1e:e6:ae:b7:5a:57:32:
20:fd:42:37:0a:29:1f:7d:1b:93:7b:61:9e:e7:79:
61:d0:db:7f:2d:5c:90:7f:85:b9:ad:51:23:02:45:
75:1a:b3:32:c1:11:6b:ed:2c:d5:70:8a:dd:73:4d:
b7:9c:62:08:28:da:29:e8:30:7e:1c:55:18:5b:84:
65:f1:28:56:07:1b:bb:d7:86:04:94:f4:e7:7a:75:
2d:d1:d3:79:6b:30:04:97:12:4d:b5:a3:e2:98:22:
d5:38:64:5d:2b:42:bd:fd:2e:ce:25:81:e6:9f:24:
40:0f:7c:6a:ad:d5:9c:e2:1f:b7:5d:93:eb:92:82:
02:66:0f:4b:12:54:3b:0b:06:9a:b3:cd:9e:a0:5f:
b0:a8:8b:52:bd:18:f7:37:8a:4f:16:d4:8b:a9:9f:
33:9c:c0:de:00:09:c1:8d:a8:86:ee:40:c5:b5:4a:
6e:b5:48:c5:b9:c4:ce:58:0a:3c:12:00:eb:09:5d:
b1:40:6f:d9:4a:64:f6:11:60:9f:05:3f:1a:7f:90:
66:af:23:0c:b9:85:15:0e:0c:ff:6e:a5:32:8d:1f:
64:fb:55:75:c1:41:28:52:6c:5b:18:23:5b:2c:ac:
18:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:84:D3:6C:5D:5F:34:0C:90:FA:F9:24:52:3B:7E:16:FA:CA:9C:63
X509v3 Authority Key Identifier:
keyid:75:CA:A7:99:12:88:87:66:80:D7:AC:90:A8:56:9F:3F:C2:03:87:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dcqnmRKIh2aA16yQqFafP8IDh_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/2754de-a5d5-487f-9fdd-c33b3644dd3f/1/dcqnmRKIh2aA16yQqFafP8IDh_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/2754de-a5d5-487f-9fdd-c33b3644dd3f/1/dcqnmRKIh2aA16yQqFafP8IDh_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:a7:b7:99:15:f6:10:b7:1c:bf:50:19:a2:07:55:cf:a6:d2:
57:17:e7:1c:80:10:f4:e9:fe:75:15:1f:8f:71:d5:7a:ab:d4:
8e:7f:2a:4e:95:d7:ce:02:43:e0:82:ff:b8:ad:e6:44:1f:ec:
9d:c7:a9:56:d5:ef:9b:70:cf:ac:54:f2:47:f2:0f:de:1a:b0:
92:ba:59:1b:e7:fc:93:f6:6d:ff:60:a9:cb:6c:42:82:f2:1c:
4e:e5:69:8b:15:0e:ce:6f:26:08:47:01:bb:dd:ce:05:0f:db:
f9:0c:37:fe:73:9e:48:ed:f0:8f:70:c2:66:89:aa:58:a2:bf:
ec:57:92:fe:20:f8:a3:a9:91:9f:cd:0f:b5:f8:90:78:6c:d9:
d2:95:db:7f:c0:fa:46:c7:d6:70:17:32:57:86:9b:ae:dd:81:
fb:e9:96:43:3b:c8:96:e7:c0:04:6d:9e:15:21:72:1c:f2:51:
50:4d:6c:d1:52:fd:be:a7:db:65:96:79:bf:42:80:8d:aa:a2:
d9:bd:81:7a:b2:01:fe:3c:cb:41:2d:22:42:05:e2:af:f3:26:
df:d8:be:bc:b9:b4:fc:11:36:b6:ae:e9:81:30:c3:9a:35:8c:
74:d9:47:7c:c7:6e:55:ef:8a:aa:b6:30:85:60:98:4a:82:40:
5b:df:f1:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:48:45 2025 by rpki-client