Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/53b489-ab48-49fe-9d01-a0e37f25a515/1/DIdKX1JzTiYOe_pNRRFK3ZJ341M.mft
File: DIdKX1JzTiYOe_pNRRFK3ZJ341M.mft (raw, json)
Hash identifier: 8V+BsqOS2yw+7BE4Fug4Hknvh9yiu1ZXNPcHpPLVvoU=
Subject key identifier: 1B:1B:16:CB:08:04:5B:B6:FE:26:F3:A6:65:C7:AA:10:C8:98:39:43
Authority key identifier: 0C:87:4A:5F:52:73:4E:26:0E:7B:FA:4D:45:11:4A:DD:92:77:E3:53
Certificate issuer: /CN=0c874a5f52734e260e7bfa4d45114add9277e353
Certificate serial: 019769619147F17EAD25EE02AAD432D141F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DIdKX1JzTiYOe_pNRRFK3ZJ341M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/53b489-ab48-49fe-9d01-a0e37f25a515/1/DIdKX1JzTiYOe_pNRRFK3ZJ341M.mft
Manifest number: 0779
Signing time: Fri 13 Jun 2025 13:01:31 +0000
Manifest this update: Fri 13 Jun 2025 13:01:31 +0000
Manifest next update: Sat 14 Jun 2025 13:01:31 +0000
Files and hashes: 1: DIdKX1JzTiYOe_pNRRFK3ZJ341M.crl (hash: cOWCEM7hrEtefN3GLzlrMsBLT+/KXtENmOaFfa985uU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/53b489-ab48-49fe-9d01-a0e37f25a515/1/DIdKX1JzTiYOe_pNRRFK3ZJ341M.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/53b489-ab48-49fe-9d01-a0e37f25a515/1/DIdKX1JzTiYOe_pNRRFK3ZJ341M.mft
rsync://rpki.ripe.net/repository/DEFAULT/DIdKX1JzTiYOe_pNRRFK3ZJ341M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:61:91:47:f1:7e:ad:25:ee:02:aa:d4:32:d1:41:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c874a5f52734e260e7bfa4d45114add9277e353
Validity
Not Before: Jun 13 13:01:31 2025 GMT
Not After : Jun 14 13:01:31 2025 GMT
Subject: CN=1b1b16cb08045bb6fe26f3a665c7aa10c8983943
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:5f:ba:e5:27:53:33:94:ce:36:a4:34:c3:1f:
16:1f:9a:d5:f2:8a:c0:ce:07:86:d4:61:e8:24:2b:
c7:c3:e9:6e:70:9f:10:51:78:d8:8e:9a:90:df:88:
ac:a3:9c:83:04:a3:54:f5:d5:7c:1f:c8:d6:5f:b3:
6d:a0:3f:fd:0b:f8:4d:24:0f:ba:40:b4:d1:0f:3f:
d3:22:1b:33:3e:f2:2c:1e:9c:9e:fa:b8:50:0a:1d:
7a:b6:df:a1:ec:89:4f:f5:7d:eb:3b:8f:c0:2d:f0:
3d:32:48:8a:92:40:61:5a:42:99:9b:97:11:f4:8d:
39:97:94:ab:40:29:b6:46:06:d2:68:1a:53:e7:15:
44:ef:03:e5:1e:a3:4c:37:dd:63:3f:2a:dd:3c:45:
cf:dc:5c:92:6a:e7:df:fc:6d:5d:1a:c2:22:85:e3:
aa:d8:44:be:59:59:49:25:de:b5:45:6f:b2:a6:02:
ce:e6:c8:cf:24:91:7f:0b:f5:fa:39:7a:9a:04:07:
f1:77:e3:ca:e1:ee:94:25:d8:12:79:79:07:d8:09:
78:53:2a:ac:58:84:2f:c1:b4:dc:41:66:85:7d:9a:
d2:d3:90:25:c2:8e:6b:78:9c:a6:32:d8:76:7a:1f:
18:b3:c1:05:06:70:81:4f:9f:f5:1b:21:ed:e6:9d:
9b:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:1B:16:CB:08:04:5B:B6:FE:26:F3:A6:65:C7:AA:10:C8:98:39:43
X509v3 Authority Key Identifier:
keyid:0C:87:4A:5F:52:73:4E:26:0E:7B:FA:4D:45:11:4A:DD:92:77:E3:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DIdKX1JzTiYOe_pNRRFK3ZJ341M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/53b489-ab48-49fe-9d01-a0e37f25a515/1/DIdKX1JzTiYOe_pNRRFK3ZJ341M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/53b489-ab48-49fe-9d01-a0e37f25a515/1/DIdKX1JzTiYOe_pNRRFK3ZJ341M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:a0:d7:c1:18:2a:df:bb:c3:46:6f:38:2d:a2:33:32:9f:d0:
4d:55:77:80:43:7a:29:8d:5b:de:16:ed:00:8e:38:e7:e2:7e:
0a:d1:d6:c2:d4:57:c1:02:9f:ff:4c:34:c8:c1:a3:89:e5:3d:
9b:79:66:bc:7f:50:1e:65:d7:06:66:32:dc:2c:19:a8:fb:8e:
72:89:52:28:54:dd:3e:c4:c5:eb:c9:3d:c1:23:a4:6f:ca:e6:
5c:62:8f:01:3f:a7:4d:1b:6c:b8:a5:50:56:6e:c6:56:13:b5:
87:f6:9b:b7:8a:dd:24:1b:3b:20:da:79:8a:9a:94:d0:0a:39:
11:64:f0:cc:78:12:2d:a5:0f:d7:3b:67:80:94:41:d8:3d:97:
51:de:be:d7:08:d7:bd:cf:ee:a6:c7:4e:5c:28:c0:ba:06:d2:
38:15:f7:b9:c3:a3:89:4e:ff:97:0f:25:74:c2:65:cd:98:d9:
67:29:dc:60:79:02:61:b3:82:a6:16:ff:6b:44:04:fd:88:4f:
2c:79:14:de:03:cd:1c:ae:c0:d2:0c:b6:da:48:b3:de:be:46:
85:6c:4d:a3:93:94:21:0e:2d:6e:66:d5:d5:f1:22:09:43:56:
57:b5:52:6e:1b:77:5d:ea:44:0f:ee:9a:82:54:e7:9b:7e:a5:
32:2e:54:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:06:00 2025 by rpki-client