Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/31a78f-c31b-4381-8631-6829c0fc738e/1/1-P-dpDC_8mjIQ6LlhgmMjXAhygY.mft
File: 1-P-dpDC_8mjIQ6LlhgmMjXAhygY.mft (raw, json)
Hash identifier: gk2wFMko/6E4QOY9+kFXfqQwc8gevW+kkIPNu0/06DE=
Subject key identifier: 36:3B:46:47:B9:8B:51:23:A3:EE:54:8A:E9:40:5D:E1:3A:D4:8E:DC
Authority key identifier: F8:FF:9D:A4:30:BF:F2:68:C8:43:A2:E5:86:09:8C:8D:70:21:CA:06
Certificate issuer: /CN=f8ff9da430bff268c843a2e586098c8d7021ca06
Certificate serial: 0197B6A091A2E3A3BDF9398085D8D9A7F6ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-P-dpDC_8mjIQ6LlhgmMjXAhygY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/31a78f-c31b-4381-8631-6829c0fc738e/1/1-P-dpDC_8mjIQ6LlhgmMjXAhygY.mft
Manifest number: 0CA8
Signing time: Sat 28 Jun 2025 13:01:05 +0000
Manifest this update: Sat 28 Jun 2025 13:01:05 +0000
Manifest next update: Sun 29 Jun 2025 13:01:05 +0000
Files and hashes: 1: 1-P-dpDC_8mjIQ6LlhgmMjXAhygY.crl (hash: hGpzupWNhRTNbpViVvmFEAclfgBq8G+8MRpjPmFQS54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/31a78f-c31b-4381-8631-6829c0fc738e/1/1-P-dpDC_8mjIQ6LlhgmMjXAhygY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/31a78f-c31b-4381-8631-6829c0fc738e/1/1-P-dpDC_8mjIQ6LlhgmMjXAhygY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-P-dpDC_8mjIQ6LlhgmMjXAhygY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:91:a2:e3:a3:bd:f9:39:80:85:d8:d9:a7:f6:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8ff9da430bff268c843a2e586098c8d7021ca06
Validity
Not Before: Jun 28 13:01:05 2025 GMT
Not After : Jun 29 13:01:05 2025 GMT
Subject: CN=363b4647b98b5123a3ee548ae9405de13ad48edc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a5:cc:4c:d3:5f:ff:bb:fd:68:af:bf:6c:9d:
bc:3d:8c:19:4e:a8:75:90:5b:28:be:f0:c1:b0:68:
90:ff:47:49:15:91:78:7e:f3:cd:14:22:b6:70:dc:
b5:a0:4a:1a:88:00:f3:86:75:d2:e6:95:4f:3b:93:
3f:f4:55:e8:e5:87:15:b7:36:6e:f8:9f:7c:d0:bd:
3e:a4:06:38:b3:c2:a5:8e:20:7e:a3:03:7c:aa:7d:
45:d0:e7:60:6e:7f:d3:91:bb:5d:a5:3a:de:fd:e0:
a0:15:9a:96:19:f1:c4:ce:36:4e:25:7c:be:11:2c:
0c:c2:92:33:e2:ad:e9:06:48:66:e1:ef:80:87:d8:
c8:e3:44:ff:e2:19:5e:fe:d2:9a:7d:a0:7a:99:ac:
52:c4:fa:6e:23:a8:e7:cb:9e:c1:c7:a1:e4:99:9a:
de:1c:ef:81:46:af:ca:f0:e4:08:f0:06:4c:f6:23:
ce:e9:81:0d:ea:58:30:d7:9d:ad:df:2d:00:fb:20:
47:85:bc:bf:64:d5:71:24:7a:2e:6d:87:c0:3a:0f:
92:23:f0:04:e3:ba:47:c9:f1:b9:92:97:d4:83:18:
02:eb:ab:05:32:35:8d:e8:8b:65:2a:5a:84:64:f0:
f4:6f:c0:d1:bc:42:7a:a0:80:f3:05:35:cc:e2:87:
64:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:3B:46:47:B9:8B:51:23:A3:EE:54:8A:E9:40:5D:E1:3A:D4:8E:DC
X509v3 Authority Key Identifier:
keyid:F8:FF:9D:A4:30:BF:F2:68:C8:43:A2:E5:86:09:8C:8D:70:21:CA:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-P-dpDC_8mjIQ6LlhgmMjXAhygY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/31a78f-c31b-4381-8631-6829c0fc738e/1/1-P-dpDC_8mjIQ6LlhgmMjXAhygY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/31a78f-c31b-4381-8631-6829c0fc738e/1/1-P-dpDC_8mjIQ6LlhgmMjXAhygY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:23:21:cb:63:b1:04:32:f2:7e:6b:f6:62:4f:e8:2e:df:1d:
5a:ad:34:19:6b:3e:aa:3a:19:ae:7b:b9:6e:70:a4:61:dd:8e:
3c:ae:6a:21:b2:5f:b0:4f:b6:e7:e4:86:da:26:c9:a0:aa:f9:
b6:72:57:4c:87:f4:e6:14:76:e3:a9:78:3f:a9:ab:b7:4c:69:
98:eb:dc:11:b5:74:3a:77:50:ce:3a:a6:04:5a:2a:a6:a9:1c:
55:92:e0:ea:50:27:fe:6a:36:e8:88:c0:f4:4c:6a:69:cc:d6:
68:e7:8b:29:e2:1b:16:18:27:30:6e:c4:70:f1:98:ce:9e:9d:
7b:d0:64:83:cb:33:ac:9f:1b:02:95:96:14:03:ba:a6:16:ba:
21:b6:35:45:e0:ca:89:b7:c7:76:ba:13:05:dd:b4:a2:1b:0c:
0a:28:16:da:6e:17:c1:6c:e9:5a:19:dd:c4:95:07:09:74:47:
7c:19:0d:e7:d9:ea:de:f1:45:be:1c:3d:0d:07:b7:28:13:0c:
9f:aa:f0:6d:ef:1b:96:3f:44:66:37:7f:f4:a9:a8:83:b9:cb:
1c:b9:ca:86:64:a8:c9:2d:88:53:eb:ff:06:90:b0:70:aa:66:
d7:14:68:53:5f:18:aa:da:2c:18:01:27:e0:66:43:d1:b8:4c:
0d:78:68:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:17:42 2025 by rpki-client