Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/101dba-64eb-4267-b075-c02f775fbf3f/1/dXJV3ckKTQ-C-yZ0RpPtfJhtios.mft
File: dXJV3ckKTQ-C-yZ0RpPtfJhtios.mft (raw, json)
Hash identifier: Vbw/lZsteEWibaLx/7Mdyo2byMBSJzu4jZlUAQ4TUM4=
Subject key identifier: D8:7D:26:CA:D4:02:83:6E:C1:03:42:D3:44:FF:35:88:86:D0:FC:AD
Authority key identifier: 75:72:55:DD:C9:0A:4D:0F:82:FB:26:74:46:93:ED:7C:98:6D:8A:8B
Certificate issuer: /CN=757255ddc90a4d0f82fb26744693ed7c986d8a8b
Certificate serial: 01976C98751464E0F5D61EE43B561C395560
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dXJV3ckKTQ-C-yZ0RpPtfJhtios.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/101dba-64eb-4267-b075-c02f775fbf3f/1/dXJV3ckKTQ-C-yZ0RpPtfJhtios.mft
Manifest number: 158A
Signing time: Sat 14 Jun 2025 04:00:20 +0000
Manifest this update: Sat 14 Jun 2025 04:00:20 +0000
Manifest next update: Sun 15 Jun 2025 04:00:20 +0000
Files and hashes: 1: dXJV3ckKTQ-C-yZ0RpPtfJhtios.crl (hash: TKdCuwyPjGjBED1rz5q34pdwuV+WRHcNEZ7Rs7ALNlw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/101dba-64eb-4267-b075-c02f775fbf3f/1/dXJV3ckKTQ-C-yZ0RpPtfJhtios.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/101dba-64eb-4267-b075-c02f775fbf3f/1/dXJV3ckKTQ-C-yZ0RpPtfJhtios.mft
rsync://rpki.ripe.net/repository/DEFAULT/dXJV3ckKTQ-C-yZ0RpPtfJhtios.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:98:75:14:64:e0:f5:d6:1e:e4:3b:56:1c:39:55:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=757255ddc90a4d0f82fb26744693ed7c986d8a8b
Validity
Not Before: Jun 14 04:00:20 2025 GMT
Not After : Jun 15 04:00:20 2025 GMT
Subject: CN=d87d26cad402836ec10342d344ff358886d0fcad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:4a:2b:1b:05:b1:11:c5:f6:7a:fd:31:7d:a2:
85:c4:c0:ac:be:6c:9a:6a:c0:a1:b3:12:70:87:0c:
98:ba:e3:d0:c7:bb:88:97:93:5e:3b:b5:e4:36:af:
57:b0:f4:89:8c:b5:f3:73:e2:4d:f5:ba:20:5c:f9:
02:32:f8:a4:6d:ec:e9:63:29:49:db:bb:53:8b:33:
b6:1a:7e:e9:93:52:a0:b2:61:d9:e9:4a:02:d5:25:
46:b3:8d:d7:46:4c:c8:52:41:bd:c5:70:36:5b:ab:
46:81:07:82:5c:5c:3f:56:b0:99:f9:5b:99:3d:68:
4b:5c:85:42:dd:bc:55:57:4c:34:07:53:49:fc:14:
b3:9c:44:03:d6:09:a2:76:19:25:4b:31:cf:da:06:
c1:bf:5a:ac:5c:82:cf:71:b9:88:70:4f:42:76:50:
78:6e:37:60:7e:35:1b:8b:4d:f6:db:bb:31:d5:77:
dd:0d:f5:fa:db:fe:79:3a:94:db:14:46:61:28:dc:
f7:cd:ba:76:0a:81:09:fa:72:c3:1d:3a:63:ae:30:
8d:76:b8:fc:f2:81:57:4e:38:eb:c2:d2:a2:b7:f7:
03:0e:d0:e3:e4:f0:32:c6:a1:65:ec:aa:21:93:27:
9c:b7:f7:cd:16:de:e8:e3:a7:b5:8a:59:ab:0c:25:
74:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:7D:26:CA:D4:02:83:6E:C1:03:42:D3:44:FF:35:88:86:D0:FC:AD
X509v3 Authority Key Identifier:
keyid:75:72:55:DD:C9:0A:4D:0F:82:FB:26:74:46:93:ED:7C:98:6D:8A:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dXJV3ckKTQ-C-yZ0RpPtfJhtios.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/101dba-64eb-4267-b075-c02f775fbf3f/1/dXJV3ckKTQ-C-yZ0RpPtfJhtios.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/101dba-64eb-4267-b075-c02f775fbf3f/1/dXJV3ckKTQ-C-yZ0RpPtfJhtios.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:10:7d:f0:15:1b:e5:f3:93:e3:d6:5d:97:16:42:7d:de:42:
fe:17:b8:6c:41:fc:a8:ef:fa:b1:91:35:7f:54:70:cf:94:a1:
dc:5d:fa:96:69:86:65:80:37:cf:72:4b:6d:c3:59:98:c8:5b:
7a:37:15:a4:ff:43:12:7f:81:2a:52:c9:da:8c:84:c2:5c:d6:
21:b0:b4:ce:ab:bd:5d:d3:b3:be:bf:f1:fa:be:92:29:7c:24:
48:25:02:ed:46:f0:44:20:06:88:db:b1:d4:0e:ee:79:c4:35:
d4:d4:76:26:d7:a2:a1:2b:81:e4:e6:5b:29:8f:11:9e:c3:d9:
f8:55:34:de:b2:60:e5:6f:f3:99:d6:a5:d9:95:2f:43:18:f0:
eb:e0:6f:a7:0b:4c:6f:16:7a:ae:2b:db:6e:36:3a:17:bc:e8:
7e:fa:ed:55:64:ab:6f:52:1a:89:ae:1c:3f:7d:69:b0:b2:15:
61:64:c5:43:7a:5a:1a:2c:e5:71:36:b4:90:86:42:a6:ff:b1:
48:42:46:8c:a1:be:1e:fd:03:70:71:f6:04:af:3b:ac:37:84:
77:29:9d:d9:77:86:ab:8b:3f:20:19:0e:29:a7:4c:69:c1:bb:
fc:f0:1c:b9:04:7e:a6:35:8a:bb:1b:92:a8:6a:f1:b3:5e:73:
25:38:89:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:42:02 2025 by rpki-client