Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/f8474b-5aeb-4058-9f4e-0042425bab1a/1/D3l2BSC3wVwuQmAwgnK4SfiO1nc.mft
File: D3l2BSC3wVwuQmAwgnK4SfiO1nc.mft (raw, json)
Hash identifier: WCm1SlfQJ2nbyVe1SZBGJxpF4vtwYUOp2aNDT7RsUtI=
Subject key identifier: DC:E6:A6:03:CD:16:D9:39:9A:32:DD:92:21:A3:73:9B:A7:58:B1:EC
Authority key identifier: 0F:79:76:05:20:B7:C1:5C:2E:42:60:30:82:72:B8:49:F8:8E:D6:77
Certificate issuer: /CN=0f79760520b7c15c2e4260308272b849f88ed677
Certificate serial: 0197B70E7684B0D68D2130BB755A22991F30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D3l2BSC3wVwuQmAwgnK4SfiO1nc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/f8474b-5aeb-4058-9f4e-0042425bab1a/1/D3l2BSC3wVwuQmAwgnK4SfiO1nc.mft
Manifest number: 15B4
Signing time: Sat 28 Jun 2025 15:01:07 +0000
Manifest this update: Sat 28 Jun 2025 15:01:07 +0000
Manifest next update: Sun 29 Jun 2025 15:01:07 +0000
Files and hashes: 1: D3l2BSC3wVwuQmAwgnK4SfiO1nc.crl (hash: hlbQ8XOLs0sPHEcXE4LSj6fbXdzyd+Z492vXEMM2YUg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/f8474b-5aeb-4058-9f4e-0042425bab1a/1/D3l2BSC3wVwuQmAwgnK4SfiO1nc.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/f8474b-5aeb-4058-9f4e-0042425bab1a/1/D3l2BSC3wVwuQmAwgnK4SfiO1nc.mft
rsync://rpki.ripe.net/repository/DEFAULT/D3l2BSC3wVwuQmAwgnK4SfiO1nc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:76:84:b0:d6:8d:21:30:bb:75:5a:22:99:1f:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f79760520b7c15c2e4260308272b849f88ed677
Validity
Not Before: Jun 28 15:01:07 2025 GMT
Not After : Jun 29 15:01:07 2025 GMT
Subject: CN=dce6a603cd16d9399a32dd9221a3739ba758b1ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:50:9a:a7:06:d6:1f:07:24:84:bb:ed:7c:64:
ba:4d:7b:96:87:03:fa:0a:11:18:5c:9a:be:52:f0:
73:af:24:03:b7:8d:ff:5b:db:df:90:e4:dd:6b:d7:
45:40:56:35:fd:88:47:a0:b1:8c:21:19:b5:79:ff:
34:70:83:01:06:5c:0a:f8:f3:be:85:22:f8:0a:87:
1a:69:8a:dc:04:09:bd:45:b5:5e:81:5f:df:d1:5d:
0e:71:55:c2:6a:3f:8a:94:ae:ae:74:0a:d5:37:a0:
e6:02:da:fe:42:e1:6a:a5:b4:a3:81:95:d4:f9:10:
eb:c5:c3:39:bd:49:68:68:89:f2:48:7c:01:fe:f7:
66:f7:cc:76:e1:7c:b4:16:ab:09:01:26:40:c1:d8:
ca:50:bb:44:97:54:fe:fc:cb:4f:07:f9:83:56:f2:
37:ea:f9:5f:6c:58:48:ac:34:2e:35:51:79:e3:61:
b4:5c:bb:bf:2e:16:c0:96:2b:48:c0:4d:e4:72:23:
2b:c5:12:93:fe:71:e4:b5:73:56:86:6d:d3:13:20:
12:20:44:f9:c8:50:3f:cb:3e:c7:54:7b:e8:75:a4:
d0:7f:72:06:20:e1:a3:36:75:41:fc:22:3f:db:53:
32:93:6b:06:e8:8d:e4:e4:66:c5:df:28:e7:1b:f5:
4a:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:E6:A6:03:CD:16:D9:39:9A:32:DD:92:21:A3:73:9B:A7:58:B1:EC
X509v3 Authority Key Identifier:
keyid:0F:79:76:05:20:B7:C1:5C:2E:42:60:30:82:72:B8:49:F8:8E:D6:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D3l2BSC3wVwuQmAwgnK4SfiO1nc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f8474b-5aeb-4058-9f4e-0042425bab1a/1/D3l2BSC3wVwuQmAwgnK4SfiO1nc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f8474b-5aeb-4058-9f4e-0042425bab1a/1/D3l2BSC3wVwuQmAwgnK4SfiO1nc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:a1:9c:bb:27:91:3c:83:e6:2e:21:f9:f9:aa:29:7d:2e:25:
1b:10:80:28:b1:20:79:c8:6b:7e:97:fe:68:7a:30:94:74:25:
e8:a5:1e:15:da:17:df:58:76:33:1f:aa:94:fc:06:69:57:f9:
b6:07:ec:a7:84:8f:4f:2e:13:58:f1:32:95:89:19:8e:b0:63:
92:b6:6b:15:4b:e1:9a:ec:37:c8:3c:98:2d:3c:7e:8f:1b:12:
15:bd:eb:ac:cf:59:95:c2:4b:67:55:df:62:70:ac:c5:ac:ec:
ed:c1:5a:0c:ec:94:48:92:9c:9b:2a:34:0c:21:cc:4f:09:24:
2e:5b:80:d8:c3:57:57:63:6c:7d:95:90:de:97:c4:c6:21:cf:
ca:26:06:f2:34:1d:5a:8f:c2:e4:3d:81:01:fd:d1:74:79:31:
13:53:a3:75:e9:4a:81:38:a9:76:41:c1:4c:81:07:53:69:f1:
2e:41:13:d2:5d:c8:a4:26:ca:91:ef:da:70:85:e5:b0:e6:8d:
fc:de:76:2e:c5:b1:63:47:8f:25:27:04:55:d1:cc:29:0b:c8:
df:c8:a2:ce:ed:82:9f:4e:8e:43:72:38:c5:57:2f:84:9f:0a:
a1:9e:30:b4:30:8c:fe:e5:5a:c1:72:63:5c:65:c5:fd:34:77:
4a:1b:51:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:12:39 2025 by rpki-client