Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/d29d3f-1696-4ed4-96d2-e7eb817ede30/1/Da7a5Z2cmvUe9UivsMlkOM73IRw.mft
File: Da7a5Z2cmvUe9UivsMlkOM73IRw.mft (raw, json)
Hash identifier: wy3WDUQ2HxeGcw8//h2G8fq9o/YbbAOy08g2kMgioKU=
Subject key identifier: 01:05:79:98:C5:22:CE:ED:E1:01:77:35:BB:C8:52:59:99:4E:94:68
Authority key identifier: 0D:AE:DA:E5:9D:9C:9A:F5:1E:F5:48:AF:B0:C9:64:38:CE:F7:21:1C
Certificate issuer: /CN=0daedae59d9c9af51ef548afb0c96438cef7211c
Certificate serial: 0197B74507A804BDCEB3BB8D6386CD44C0EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Da7a5Z2cmvUe9UivsMlkOM73IRw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/d29d3f-1696-4ed4-96d2-e7eb817ede30/1/Da7a5Z2cmvUe9UivsMlkOM73IRw.mft
Manifest number: 15B2
Signing time: Sat 28 Jun 2025 16:00:43 +0000
Manifest this update: Sat 28 Jun 2025 16:00:43 +0000
Manifest next update: Sun 29 Jun 2025 16:00:43 +0000
Files and hashes: 1: Da7a5Z2cmvUe9UivsMlkOM73IRw.crl (hash: rxQo+4/xoaQ2IWLKvHwYtyAvmkoV43Qb1Jz3LF4W8k0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/d29d3f-1696-4ed4-96d2-e7eb817ede30/1/Da7a5Z2cmvUe9UivsMlkOM73IRw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/d29d3f-1696-4ed4-96d2-e7eb817ede30/1/Da7a5Z2cmvUe9UivsMlkOM73IRw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Da7a5Z2cmvUe9UivsMlkOM73IRw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:07:a8:04:bd:ce:b3:bb:8d:63:86:cd:44:c0:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0daedae59d9c9af51ef548afb0c96438cef7211c
Validity
Not Before: Jun 28 16:00:43 2025 GMT
Not After : Jun 29 16:00:43 2025 GMT
Subject: CN=01057998c522ceede1017735bbc85259994e9468
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:38:ef:31:fd:fa:95:4b:eb:8b:66:b2:de:0e:
35:96:cc:8a:86:78:44:59:db:6c:b2:dc:b3:03:c4:
50:67:ce:b5:07:ee:67:c2:ee:0b:3d:81:f4:66:6d:
8f:a7:91:99:b2:16:21:44:b1:b8:f9:a6:cc:50:8e:
f0:e1:b5:87:e1:03:de:ac:bd:d3:50:e2:1f:66:5b:
43:f7:e7:a3:f0:36:ff:90:9e:7b:a5:80:9a:ec:6b:
ae:db:15:53:84:f9:24:fe:5b:63:35:5e:0b:d9:db:
50:6d:fc:ce:87:21:fa:e0:ba:12:42:d6:8f:5e:d6:
f2:40:2b:c8:73:6d:c6:e5:e5:03:ed:f0:ba:54:06:
40:ea:ed:65:c1:1b:42:6a:d0:fe:a5:03:33:67:df:
ef:eb:0a:c3:87:8b:ed:0e:b3:5b:e6:ee:d3:c5:4a:
10:40:d8:7a:ad:e6:f9:31:9c:82:b0:73:69:1d:6d:
ce:e5:71:c1:ff:89:ea:aa:11:1d:14:cc:8f:05:ca:
ce:31:37:59:9d:90:90:e2:ed:e8:84:ca:18:46:c8:
10:1b:b4:3e:16:e8:0c:f1:d5:aa:a6:63:3c:71:f0:
0f:45:0b:17:81:f1:5d:37:31:d2:d0:43:24:c8:fb:
a4:73:d8:f6:45:32:bf:8e:ee:5a:ee:4f:34:0f:8d:
1e:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:05:79:98:C5:22:CE:ED:E1:01:77:35:BB:C8:52:59:99:4E:94:68
X509v3 Authority Key Identifier:
keyid:0D:AE:DA:E5:9D:9C:9A:F5:1E:F5:48:AF:B0:C9:64:38:CE:F7:21:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Da7a5Z2cmvUe9UivsMlkOM73IRw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d29d3f-1696-4ed4-96d2-e7eb817ede30/1/Da7a5Z2cmvUe9UivsMlkOM73IRw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d29d3f-1696-4ed4-96d2-e7eb817ede30/1/Da7a5Z2cmvUe9UivsMlkOM73IRw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:2e:da:ec:34:b1:d0:54:35:ad:29:50:74:58:7e:05:12:aa:
9b:1d:25:80:6a:8e:90:df:43:93:a1:1c:0d:3b:19:8e:61:d6:
18:10:e3:b1:60:ad:84:63:58:d1:99:c1:a0:96:77:86:f0:9b:
72:56:04:ce:d2:53:5d:ad:ea:87:bd:ed:9f:49:b9:ed:ef:9a:
b9:d1:d4:ca:87:b5:37:1b:bf:7b:f9:b8:1b:be:2b:8f:a9:7f:
f6:4d:c2:d7:1b:7c:dd:0c:ff:e8:1c:6f:aa:30:d3:d3:a4:29:
95:9d:c8:4f:33:aa:f8:a4:d8:46:e7:e7:38:0d:81:5a:e8:38:
68:67:db:a6:b2:01:92:dc:27:b1:01:fe:51:1b:87:92:97:17:
2d:5d:23:06:ff:a3:5e:92:89:56:05:66:e5:2f:b6:ac:27:f8:
37:d2:df:6c:9b:62:59:61:d9:43:8e:89:5b:43:75:b3:09:fb:
e0:50:2b:c0:ef:b6:23:d0:7b:d5:f8:de:9f:9a:c1:95:27:8d:
ee:e7:08:00:be:1e:f1:39:87:dc:bd:6c:be:4d:1e:ba:a6:0f:
44:3f:05:0c:3d:40:14:5f:7f:20:bd:a4:1b:ae:c4:e1:92:7b:
28:f8:f4:c6:4e:1d:aa:62:4b:8b:71:cc:f1:28:aa:45:a7:78:
9a:01:30:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:37:15 2025 by rpki-client