Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/655e28-3391-40a7-88ca-1bffda382ebe/1/dHLrj4AV6xvCnqMWL4PmrO27Qn4.mft
File: dHLrj4AV6xvCnqMWL4PmrO27Qn4.mft (raw, json)
Hash identifier: PZihv8xSW3ekLivI9LTjNIrO4UyIN4CurwUxe17JdmY=
Subject key identifier: A6:FF:4D:64:E4:BB:05:FC:C3:65:A9:7E:58:47:E5:F4:CA:5D:4A:C5
Authority key identifier: 74:72:EB:8F:80:15:EB:1B:C2:9E:A3:16:2F:83:E6:AC:ED:BB:42:7E
Certificate issuer: /CN=7472eb8f8015eb1bc29ea3162f83e6acedbb427e
Certificate serial: 01976B85DEB0C576830EFF450C21F2EE912D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dHLrj4AV6xvCnqMWL4PmrO27Qn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/655e28-3391-40a7-88ca-1bffda382ebe/1/dHLrj4AV6xvCnqMWL4PmrO27Qn4.mft
Manifest number: 0E82
Signing time: Fri 13 Jun 2025 23:00:24 +0000
Manifest this update: Fri 13 Jun 2025 23:00:24 +0000
Manifest next update: Sat 14 Jun 2025 23:00:24 +0000
Files and hashes: 1: dHLrj4AV6xvCnqMWL4PmrO27Qn4.crl (hash: LoHpvKbzkzwN2r/6U6zJP4/reTxy8gzHSHXOI13E8IQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/655e28-3391-40a7-88ca-1bffda382ebe/1/dHLrj4AV6xvCnqMWL4PmrO27Qn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/655e28-3391-40a7-88ca-1bffda382ebe/1/dHLrj4AV6xvCnqMWL4PmrO27Qn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/dHLrj4AV6xvCnqMWL4PmrO27Qn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 23:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:85:de:b0:c5:76:83:0e:ff:45:0c:21:f2:ee:91:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7472eb8f8015eb1bc29ea3162f83e6acedbb427e
Validity
Not Before: Jun 13 23:00:24 2025 GMT
Not After : Jun 14 23:00:24 2025 GMT
Subject: CN=a6ff4d64e4bb05fcc365a97e5847e5f4ca5d4ac5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:44:4a:4d:14:5f:42:75:0e:a3:9e:3d:db:8e:
83:47:3d:00:f2:f3:33:b6:34:d9:42:80:28:b5:15:
e8:f5:0a:c7:97:1a:9b:9d:61:d1:71:67:57:96:a9:
de:a8:62:b7:47:7d:2a:fa:0a:1a:cf:0d:fe:47:dd:
17:ef:fb:bc:11:76:69:bd:7c:a3:f3:55:b7:f4:b5:
2c:50:4c:7f:e1:5c:ef:4c:43:43:8c:6b:67:f3:74:
35:f6:f9:cc:35:0f:61:a6:06:14:f0:c0:1d:9e:8a:
09:bb:68:0d:29:85:fe:46:84:dd:94:60:f6:96:bc:
6e:97:40:9b:6b:82:51:e2:50:10:07:9b:e8:a7:c8:
3e:c7:9c:31:c4:3d:b9:38:fb:82:a1:6d:01:59:8a:
94:f4:ae:e0:1d:8c:25:c2:01:5e:31:1f:7d:33:9a:
e3:37:62:a8:3f:09:33:59:ba:51:3f:80:26:9f:31:
40:6c:d6:a2:ca:92:41:d3:08:75:d7:7c:2c:07:1f:
ca:b9:c3:dd:4e:9d:0f:e3:0a:53:7d:a7:0e:76:c8:
72:8c:77:7b:5d:61:f4:35:f3:59:53:1a:4f:fa:1b:
f2:0c:cf:2b:51:e6:39:fc:bb:b5:18:80:cd:b3:4d:
86:8a:67:03:bf:01:44:0d:60:06:4c:bf:7c:1a:bc:
0d:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:FF:4D:64:E4:BB:05:FC:C3:65:A9:7E:58:47:E5:F4:CA:5D:4A:C5
X509v3 Authority Key Identifier:
keyid:74:72:EB:8F:80:15:EB:1B:C2:9E:A3:16:2F:83:E6:AC:ED:BB:42:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dHLrj4AV6xvCnqMWL4PmrO27Qn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/655e28-3391-40a7-88ca-1bffda382ebe/1/dHLrj4AV6xvCnqMWL4PmrO27Qn4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/655e28-3391-40a7-88ca-1bffda382ebe/1/dHLrj4AV6xvCnqMWL4PmrO27Qn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:ea:45:19:56:65:a5:12:8d:d6:17:36:9e:47:89:e6:d4:89:
ff:3f:92:e8:74:0a:19:22:13:00:bb:5f:ea:9f:c9:47:2a:bc:
57:d8:e5:07:50:51:f7:09:45:41:9a:31:fe:08:3c:fc:5b:1d:
ed:6c:89:7f:eb:62:79:90:3e:df:09:4d:50:93:3a:6a:6a:ed:
a1:73:da:99:ae:c5:a6:b6:8d:76:e8:19:61:35:10:21:ff:d4:
37:68:cc:fe:ec:b8:70:bf:dd:d7:e7:ff:b2:0f:c1:fc:97:b3:
95:0f:81:75:c7:3e:0c:d8:14:96:12:4b:82:cb:b5:96:47:8d:
8f:9e:95:97:cd:5f:da:aa:b1:e3:db:68:bf:c6:8d:82:b7:94:
10:41:a7:f1:1a:1f:44:7f:25:8d:87:fb:b5:ff:cd:b8:95:59:
ff:82:3e:4c:c7:93:b9:b5:56:1e:d2:91:8f:f2:4b:e9:37:0d:
c4:da:2e:fd:f7:c1:39:e2:c9:96:1f:ef:3d:c4:b3:9c:ea:96:
ab:3f:86:db:a0:e1:33:a7:00:40:20:e1:f1:d1:46:a1:90:3f:
d6:4e:ab:39:7b:5d:3d:d8:db:da:c3:b0:27:ad:25:2c:49:72:
ff:be:94:77:d8:c2:34:6f:92:65:9e:12:4c:1e:41:ab:bd:5c:
50:46:df:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:31:41 2025 by rpki-client