Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/fbbe41-15b7-4f6e-9e07-8bcce303b919/1/DZHf1FaDQonB_QOg_vG1Kl79HZE.mft
File: DZHf1FaDQonB_QOg_vG1Kl79HZE.mft (raw, json)
Hash identifier: FEaLDgPqGVmdF5yN96BfX3SATGM/qgzlv+TQzsZLyrw=
Subject key identifier: 30:FF:B0:8F:86:E1:2C:7F:76:15:A2:6D:16:5A:F5:F2:41:66:EB:CF
Authority key identifier: 0D:91:DF:D4:56:83:42:89:C1:FD:03:A0:FE:F1:B5:2A:5E:FD:1D:91
Certificate issuer: /CN=0d91dfd456834289c1fd03a0fef1b52a5efd1d91
Certificate serial: 0197CACC260727CFECAA6710ADF3F595C643
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DZHf1FaDQonB_QOg_vG1Kl79HZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/fbbe41-15b7-4f6e-9e07-8bcce303b919/1/DZHf1FaDQonB_QOg_vG1Kl79HZE.mft
Manifest number: 0E27
Signing time: Wed 02 Jul 2025 11:01:05 +0000
Manifest this update: Wed 02 Jul 2025 11:01:05 +0000
Manifest next update: Thu 03 Jul 2025 11:01:05 +0000
Files and hashes: 1: DZHf1FaDQonB_QOg_vG1Kl79HZE.crl (hash: k1LQQN1WeGKl3Nj70jAzRZugc2qcFzSnB19qmw9B++Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/fbbe41-15b7-4f6e-9e07-8bcce303b919/1/DZHf1FaDQonB_QOg_vG1Kl79HZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/fbbe41-15b7-4f6e-9e07-8bcce303b919/1/DZHf1FaDQonB_QOg_vG1Kl79HZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/DZHf1FaDQonB_QOg_vG1Kl79HZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 11:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ca:cc:26:07:27:cf:ec:aa:67:10:ad:f3:f5:95:c6:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d91dfd456834289c1fd03a0fef1b52a5efd1d91
Validity
Not Before: Jul 2 11:01:05 2025 GMT
Not After : Jul 3 11:01:05 2025 GMT
Subject: CN=30ffb08f86e12c7f7615a26d165af5f24166ebcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:e1:5a:16:a6:66:8f:59:41:55:7a:f5:7b:2c:
e2:a7:cd:b3:06:f4:e9:0a:f0:b6:c1:6a:39:9b:28:
ab:b9:21:ae:fe:f8:8f:f9:bf:0e:02:83:eb:b7:77:
74:bf:b2:22:2d:bb:26:f2:e7:86:73:87:8c:b0:1a:
a5:64:ae:fc:d6:95:d1:35:8e:7b:74:4d:af:f7:d9:
21:2e:e0:00:74:84:84:4b:36:11:96:b1:06:87:a7:
f8:84:8f:21:23:f4:1c:2a:66:c7:d1:f2:86:a2:36:
60:78:cf:3d:ad:37:7a:ee:68:2a:c1:a3:b7:57:14:
72:ae:76:63:99:08:da:ee:b9:50:63:ab:d2:03:f1:
2a:88:23:78:47:e0:46:ee:6b:bd:3f:ed:ae:f9:f1:
a8:99:f1:6a:50:dd:89:3f:b6:fa:1b:6e:de:be:17:
f2:cd:b7:ca:b9:1c:0f:7c:e1:25:f4:2b:77:31:77:
c1:e4:cd:2f:b6:c9:10:a9:cb:af:7c:5e:d1:af:13:
e9:63:7a:fa:69:77:02:3a:b3:a2:f6:3c:fc:15:1d:
5c:f4:74:28:05:23:83:1c:93:5d:fe:1b:07:5a:42:
9a:0d:84:46:96:c1:f1:63:07:2e:00:d5:a6:65:f5:
42:de:5b:48:cc:52:ab:c0:ac:f2:fb:dc:2c:76:ea:
62:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:FF:B0:8F:86:E1:2C:7F:76:15:A2:6D:16:5A:F5:F2:41:66:EB:CF
X509v3 Authority Key Identifier:
keyid:0D:91:DF:D4:56:83:42:89:C1:FD:03:A0:FE:F1:B5:2A:5E:FD:1D:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DZHf1FaDQonB_QOg_vG1Kl79HZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/fbbe41-15b7-4f6e-9e07-8bcce303b919/1/DZHf1FaDQonB_QOg_vG1Kl79HZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/fbbe41-15b7-4f6e-9e07-8bcce303b919/1/DZHf1FaDQonB_QOg_vG1Kl79HZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:60:c5:ca:d6:a4:40:19:38:84:7f:5a:2d:91:d6:c5:e0:4b:
c9:0c:cb:9d:c5:67:20:99:2c:62:19:a1:21:34:54:4c:76:ce:
ef:d6:c9:98:bb:14:7f:7a:5d:5c:4d:2a:23:ac:b6:f0:71:37:
62:fa:27:75:0b:b0:e8:fd:8c:3f:ce:78:6c:7d:4f:8f:06:46:
f7:24:11:b1:c4:ed:a3:e8:7b:c8:d3:a6:44:77:aa:41:7e:4a:
58:c8:eb:15:f7:95:b9:4b:77:fc:47:50:ef:b5:1c:5a:5a:8b:
8d:8c:da:e6:12:66:b9:45:d6:99:17:11:70:d4:59:57:6a:58:
08:20:1b:0d:09:84:31:07:03:47:21:4c:26:e6:d1:5e:6a:79:
0d:a6:67:02:35:a5:49:2e:cb:96:c0:fa:1a:c4:ed:9b:1c:f6:
13:1d:b8:50:ca:ee:e6:57:8e:59:98:90:92:7c:1e:56:3d:a1:
d1:a0:80:61:7c:b4:40:6e:4d:62:23:f7:ce:ec:b5:c1:cf:cc:
f7:80:af:4d:2a:8b:a3:9c:2a:46:22:77:71:64:2a:d2:6d:84:
96:2d:44:cd:33:db:0d:75:cd:04:69:92:60:fb:c4:0f:74:52:
26:e0:d6:bf:cc:01:e9:70:69:13:22:c0:6d:67:ec:37:29:c8:
55:d3:8a:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 19:11:50 2025 by rpki-client