Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/697564-0025-4f92-8dfd-ce1c03400d4d/1/dCMNFC7sf2qZsNtAlvk6BCBIP-Y.mft
File: dCMNFC7sf2qZsNtAlvk6BCBIP-Y.mft (raw, json)
Hash identifier: wMeADie+xwpjCSWcVmP7G7Msv7gr+89/4zHT9E1Q+CM=
Subject key identifier: A3:EB:CE:BF:03:BE:18:09:33:26:0A:CC:24:8C:D3:97:DE:65:FD:6B
Authority key identifier: 74:23:0D:14:2E:EC:7F:6A:99:B0:DB:40:96:F9:3A:04:20:48:3F:E6
Certificate issuer: /CN=74230d142eec7f6a99b0db4096f93a0420483fe6
Certificate serial: 019769612E2F677DDB0B0EA394AE35D34436
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dCMNFC7sf2qZsNtAlvk6BCBIP-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/697564-0025-4f92-8dfd-ce1c03400d4d/1/dCMNFC7sf2qZsNtAlvk6BCBIP-Y.mft
Manifest number: 0782
Signing time: Fri 13 Jun 2025 13:01:05 +0000
Manifest this update: Fri 13 Jun 2025 13:01:05 +0000
Manifest next update: Sat 14 Jun 2025 13:01:05 +0000
Files and hashes: 1: dCMNFC7sf2qZsNtAlvk6BCBIP-Y.crl (hash: X4uRkLu+nsBunFHVtHvT6XBNojEUJgrrD1Z+C81K5yE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/697564-0025-4f92-8dfd-ce1c03400d4d/1/dCMNFC7sf2qZsNtAlvk6BCBIP-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/697564-0025-4f92-8dfd-ce1c03400d4d/1/dCMNFC7sf2qZsNtAlvk6BCBIP-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/dCMNFC7sf2qZsNtAlvk6BCBIP-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:61:2e:2f:67:7d:db:0b:0e:a3:94:ae:35:d3:44:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74230d142eec7f6a99b0db4096f93a0420483fe6
Validity
Not Before: Jun 13 13:01:05 2025 GMT
Not After : Jun 14 13:01:05 2025 GMT
Subject: CN=a3ebcebf03be180933260acc248cd397de65fd6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:67:b4:a0:0e:97:45:42:aa:fa:d7:ce:31:d5:
1f:84:1f:62:96:28:1e:d7:9f:44:c7:6f:52:a1:50:
c3:d6:9c:4b:49:b9:5b:9e:92:f1:8e:18:00:c7:7e:
a8:da:2a:9d:fe:8e:50:23:d9:c5:4f:93:e1:6c:82:
08:e2:a1:93:a8:92:6a:1a:56:0a:26:0b:49:2d:3a:
55:12:b6:7a:fe:1e:c2:1f:82:1a:10:9c:82:5e:c2:
05:2d:dd:b7:de:3d:6b:f2:02:4f:8b:ec:33:5f:14:
75:d4:d4:f8:e5:c1:c8:c0:72:ac:06:2b:9d:5f:5b:
2f:28:a2:32:2c:e5:15:6f:24:1f:37:fc:d9:ef:59:
21:82:ff:59:21:17:a6:7f:ba:c2:95:45:87:68:dd:
97:76:53:f0:17:e1:0a:89:12:f5:15:b2:a8:c7:84:
5c:cd:0a:fd:a7:bd:bc:04:2c:e5:3f:b1:71:16:11:
30:70:9c:1d:3c:e2:2c:aa:a3:90:b9:ef:74:14:89:
9b:59:35:67:99:0f:fb:2b:27:6f:7c:4b:84:fc:c8:
1a:96:f5:4f:98:4d:b3:9e:2c:30:bb:dd:6b:06:5b:
95:9e:92:50:67:1b:fe:21:05:39:16:c5:76:29:f3:
52:5c:2c:fe:3d:71:12:00:0b:73:b3:d0:7f:37:35:
0e:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:EB:CE:BF:03:BE:18:09:33:26:0A:CC:24:8C:D3:97:DE:65:FD:6B
X509v3 Authority Key Identifier:
keyid:74:23:0D:14:2E:EC:7F:6A:99:B0:DB:40:96:F9:3A:04:20:48:3F:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dCMNFC7sf2qZsNtAlvk6BCBIP-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/697564-0025-4f92-8dfd-ce1c03400d4d/1/dCMNFC7sf2qZsNtAlvk6BCBIP-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/697564-0025-4f92-8dfd-ce1c03400d4d/1/dCMNFC7sf2qZsNtAlvk6BCBIP-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:ae:3a:f7:46:ee:98:a4:b1:a0:92:aa:28:0c:9e:2f:23:8c:
3b:3a:92:77:f3:30:69:28:f3:d6:8f:d8:4c:d5:76:5a:c9:81:
a7:35:8d:6d:af:8b:b6:92:45:f3:fb:7b:cf:16:bd:c9:d0:24:
b9:b2:52:10:72:8b:09:3c:8d:1a:7b:75:a8:37:b8:6e:4e:f7:
a8:1d:01:4b:57:f9:05:b4:4c:d0:c4:cd:7b:03:53:4b:0d:58:
2e:b4:2f:b3:8f:6c:37:5b:61:79:30:6b:11:f5:17:f8:b0:90:
82:1c:ff:b6:0c:13:b8:1e:fb:8e:1a:65:24:6b:b1:09:ef:76:
75:16:fb:ac:f1:45:d9:0e:3f:1b:8e:12:d6:6a:8b:ea:21:35:
17:24:3e:b5:d1:77:27:0c:1f:fe:ae:be:b3:db:f2:25:d7:f2:
43:33:9d:cd:6e:fa:e7:bf:2a:fb:f9:03:99:21:11:3f:8b:3c:
83:3e:a2:37:e2:99:83:ae:12:98:3e:ad:80:3a:e6:0d:8d:f8:
31:30:5a:34:8e:e1:12:9a:bf:da:9a:30:67:2c:27:b8:45:a1:
b0:b6:11:47:b6:0d:91:8c:28:2c:20:6a:3d:5b:1f:4e:af:0d:
6e:29:bd:40:03:7f:b9:3e:23:02:51:dd:c4:63:99:75:33:5a:
9a:ef:0e:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:52:00 2025 by rpki-client