Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/2f4796-4512-464d-b9de-880f8238fe0b/1/Dp842O8xOufFpwiU9m6HGjMYA_8.mft
File: Dp842O8xOufFpwiU9m6HGjMYA_8.mft (raw, json)
Hash identifier: JeqisnXFCYS+k3fQKkHG0/78yHerIuQC1RTznWZoNXQ=
Subject key identifier: 7B:A7:BA:6A:9B:FE:B5:1A:85:EB:8F:D6:23:26:ED:A4:34:57:6D:D3
Authority key identifier: 0E:9F:38:D8:EF:31:3A:E7:C5:A7:08:94:F6:6E:87:1A:33:18:03:FF
Certificate issuer: /CN=0e9f38d8ef313ae7c5a70894f66e871a331803ff
Certificate serial: 019790001518CA6632ED98B33215ED37B6B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dp842O8xOufFpwiU9m6HGjMYA_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/2f4796-4512-464d-b9de-880f8238fe0b/1/Dp842O8xOufFpwiU9m6HGjMYA_8.mft
Manifest number: 159E
Signing time: Sat 21 Jun 2025 01:00:13 +0000
Manifest this update: Sat 21 Jun 2025 01:00:13 +0000
Manifest next update: Sun 22 Jun 2025 01:00:13 +0000
Files and hashes: 1: Dp842O8xOufFpwiU9m6HGjMYA_8.crl (hash: iLh2lHHWviIj7t0aJCdCHK2J8/+1JfqwKiiE4VOpBeY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/2f4796-4512-464d-b9de-880f8238fe0b/1/Dp842O8xOufFpwiU9m6HGjMYA_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/2f4796-4512-464d-b9de-880f8238fe0b/1/Dp842O8xOufFpwiU9m6HGjMYA_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dp842O8xOufFpwiU9m6HGjMYA_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Jun 2025 22:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:90:00:15:18:ca:66:32:ed:98:b3:32:15:ed:37:b6:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e9f38d8ef313ae7c5a70894f66e871a331803ff
Validity
Not Before: Jun 21 01:00:13 2025 GMT
Not After : Jun 22 01:00:13 2025 GMT
Subject: CN=7ba7ba6a9bfeb51a85eb8fd62326eda434576dd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:20:f9:86:b3:84:55:90:98:8c:72:6f:5d:a7:
ec:1d:b0:3c:a0:e9:2e:be:57:ac:82:da:cc:75:ef:
44:58:69:e4:65:59:02:3b:5a:bb:17:4b:35:c5:9d:
14:d0:ab:3b:7a:7c:2c:43:24:f5:29:fe:cb:bf:eb:
a7:09:75:6b:41:f0:73:b0:ad:d9:89:68:98:84:68:
99:4e:52:84:f7:04:7f:b7:07:80:e6:89:91:40:39:
87:b3:54:c0:3b:a4:3b:17:2e:c4:68:35:a4:bf:0f:
be:f8:7b:20:3d:4c:6e:fa:5b:b6:b4:06:3d:46:79:
46:e4:d1:20:26:49:b8:6b:fa:0d:dd:4f:17:66:34:
e8:5b:67:d3:c8:15:45:b0:a6:93:60:9a:05:9c:16:
ec:44:dd:c7:55:97:1c:f4:f1:d4:43:ff:b6:69:d3:
63:b7:ea:70:b6:56:72:5c:4a:ea:e9:10:44:6e:47:
32:07:7c:38:e5:05:af:af:0b:d6:9e:b2:13:8c:18:
03:ca:88:43:cb:b0:e8:22:07:87:87:3c:24:47:53:
5d:1e:9a:2b:f0:a3:49:19:87:a3:0b:08:a3:92:fa:
48:23:a4:11:c1:bf:11:aa:95:3a:35:c4:28:ed:b4:
f9:eb:39:17:11:26:5b:6b:03:5f:41:30:df:65:1e:
cb:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:A7:BA:6A:9B:FE:B5:1A:85:EB:8F:D6:23:26:ED:A4:34:57:6D:D3
X509v3 Authority Key Identifier:
keyid:0E:9F:38:D8:EF:31:3A:E7:C5:A7:08:94:F6:6E:87:1A:33:18:03:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dp842O8xOufFpwiU9m6HGjMYA_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/2f4796-4512-464d-b9de-880f8238fe0b/1/Dp842O8xOufFpwiU9m6HGjMYA_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/2f4796-4512-464d-b9de-880f8238fe0b/1/Dp842O8xOufFpwiU9m6HGjMYA_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:01:2e:72:e3:23:6e:32:a0:7f:f7:07:bb:9b:33:ef:12:ba:
50:b8:a3:1b:b9:74:c9:eb:6d:12:49:54:1d:bf:fd:f3:45:5f:
54:95:ee:25:bf:f1:e4:f4:49:6f:c4:ac:56:b1:af:a4:78:b4:
51:c0:77:1a:03:6f:a3:64:a1:3e:34:91:ea:20:6f:3d:e2:fa:
d5:9f:5f:c6:3b:fa:38:d2:13:73:8a:8c:e3:9d:e7:64:03:db:
20:d4:f6:78:65:64:d0:f0:aa:97:4a:da:d4:ff:b5:29:f7:9c:
34:1a:ff:3a:e0:75:3f:0b:cd:60:13:97:36:7e:c5:ee:64:28:
03:83:f7:00:49:1d:e5:b3:83:db:b2:9f:76:ea:96:64:6a:aa:
d0:23:89:b8:bd:72:e9:dd:c3:92:26:8c:e1:60:9b:a5:39:6e:
0d:13:1d:99:39:6b:32:00:f2:ca:37:66:9b:e6:c6:06:c7:2f:
20:da:fb:8c:bf:ad:9f:c2:e3:21:a1:3d:cf:12:7c:40:af:c0:
9f:11:0b:88:1a:fe:ca:90:d9:3e:37:e3:25:41:b4:6c:e0:16:
26:e7:2d:3b:6c:c1:54:d0:0f:41:93:38:03:fc:59:12:53:bb:
05:29:dd:0e:33:3e:c3:b7:d9:14:df:8b:d7:73:90:76:6f:79:
75:06:ce:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 07:42:51 2025 by rpki-client