Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/0467dc-ccf3-4331-957c-158606318525/1/dYOxUbdLsu2w9c5rbpux4MPQrRs.mft
File: dYOxUbdLsu2w9c5rbpux4MPQrRs.mft (raw, json)
Hash identifier: LD5sCRHuUOc99z+jkHpYbBeexbHH967k/GuJtxBvlhY=
Subject key identifier: A0:AB:8D:CB:AC:81:73:D7:E8:2C:8B:91:41:56:F3:74:3D:7D:69:82
Authority key identifier: 75:83:B1:51:B7:4B:B2:ED:B0:F5:CE:6B:6E:9B:B1:E0:C3:D0:AD:1B
Certificate issuer: /CN=7583b151b74bb2edb0f5ce6b6e9bb1e0c3d0ad1b
Certificate serial: 0197BAEB7D1487842847353548EB80A912EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dYOxUbdLsu2w9c5rbpux4MPQrRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/0467dc-ccf3-4331-957c-158606318525/1/dYOxUbdLsu2w9c5rbpux4MPQrRs.mft
Manifest number: 15B4
Signing time: Sun 29 Jun 2025 09:01:24 +0000
Manifest this update: Sun 29 Jun 2025 09:01:24 +0000
Manifest next update: Mon 30 Jun 2025 09:01:24 +0000
Files and hashes: 1: dYOxUbdLsu2w9c5rbpux4MPQrRs.crl (hash: jzbE/5mmZdzRalBot1mkiVMCgoGRb6RegWzhqElA5Eg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/0467dc-ccf3-4331-957c-158606318525/1/dYOxUbdLsu2w9c5rbpux4MPQrRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/0467dc-ccf3-4331-957c-158606318525/1/dYOxUbdLsu2w9c5rbpux4MPQrRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/dYOxUbdLsu2w9c5rbpux4MPQrRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 07:42:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:eb:7d:14:87:84:28:47:35:35:48:eb:80:a9:12:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7583b151b74bb2edb0f5ce6b6e9bb1e0c3d0ad1b
Validity
Not Before: Jun 29 09:01:24 2025 GMT
Not After : Jun 30 09:01:24 2025 GMT
Subject: CN=a0ab8dcbac8173d7e82c8b914156f3743d7d6982
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:33:55:e0:fe:04:9d:d5:d3:ae:b2:61:f9:ee:
01:55:39:dc:86:4e:e0:7a:55:7b:b5:8f:ea:c3:69:
d4:53:23:6d:ec:65:0b:7e:65:5a:61:ec:4c:56:dc:
ad:70:ef:84:3c:30:c9:9c:0b:ad:34:a8:5f:f1:5f:
79:c4:67:29:4f:37:6a:e4:2a:17:b6:66:57:af:8f:
c7:0e:4a:c9:bf:d0:08:f0:19:a6:96:ea:54:b6:f4:
32:78:42:63:e2:b8:cd:a4:99:5c:15:33:17:72:cf:
02:5a:b6:5c:1a:38:40:5f:1a:eb:8f:0e:1a:7c:b6:
b0:f8:ae:74:fe:bf:b1:71:59:7d:d6:96:47:22:e9:
94:45:bb:e9:d3:5b:c2:72:a6:54:2f:8e:8a:d1:70:
45:e7:97:97:1c:9d:4e:e9:7f:eb:3e:ff:3d:10:4b:
53:42:fb:43:5e:26:d8:0b:6b:a1:eb:b6:bb:6a:ca:
b5:24:d9:6b:d0:9b:cb:5c:25:0a:75:f8:5c:3d:5a:
9b:1d:a4:21:61:c3:d1:3d:99:78:e1:2e:af:c1:e0:
bf:df:a6:5d:02:d1:39:dc:8e:85:ce:3c:0e:f2:4f:
5d:ea:df:30:f6:9a:d8:d1:a0:f0:ac:cd:0e:40:c8:
b9:a2:05:7b:2f:8d:e6:af:75:ce:d9:27:36:b9:91:
2d:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:AB:8D:CB:AC:81:73:D7:E8:2C:8B:91:41:56:F3:74:3D:7D:69:82
X509v3 Authority Key Identifier:
keyid:75:83:B1:51:B7:4B:B2:ED:B0:F5:CE:6B:6E:9B:B1:E0:C3:D0:AD:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dYOxUbdLsu2w9c5rbpux4MPQrRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/0467dc-ccf3-4331-957c-158606318525/1/dYOxUbdLsu2w9c5rbpux4MPQrRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/0467dc-ccf3-4331-957c-158606318525/1/dYOxUbdLsu2w9c5rbpux4MPQrRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:8e:2e:d2:44:85:26:eb:38:fa:6e:35:99:88:b7:86:59:0a:
ea:eb:00:58:f4:e0:09:e2:9b:d5:d3:a1:cd:a4:7b:d0:81:c2:
42:6b:0e:0f:54:bd:15:08:f5:4a:2c:39:01:09:3b:47:f3:c2:
57:53:be:a2:91:ca:09:19:96:59:2b:47:4a:d6:32:09:9b:42:
51:d2:e0:c1:1c:b6:fd:b8:20:d7:b1:06:13:dc:66:6d:0f:40:
82:6e:e3:f4:cc:ea:91:6b:36:34:2f:5c:f0:d3:d9:fb:b0:87:
f4:97:b9:fa:0e:47:0f:30:26:c1:78:09:7f:ba:48:7d:20:cc:
29:64:53:fb:4e:bd:cb:83:63:b9:df:be:a0:75:5b:f3:8a:52:
1b:1c:5c:e0:40:e8:ec:68:95:8a:1c:dd:d7:25:36:09:3c:58:
e0:25:f1:57:d0:0a:4e:05:d4:df:73:29:94:d3:26:84:f8:4e:
77:fb:21:41:9a:b8:3f:5b:de:5a:24:c3:d5:53:c1:1c:33:c0:
82:6c:6d:4d:95:a0:a7:3e:ad:7d:2c:83:6f:f7:51:3d:e9:c5:
28:c4:ac:a0:a7:78:13:db:f3:5e:fc:97:e3:a5:06:6a:9b:5d:
4f:96:09:f3:94:aa:16:93:e3:d5:93:58:3a:4f:a3:b6:70:11:
d2:00:6a:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 16:50:55 2025 by rpki-client