Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/d95308-5245-4ac6-a937-4a3699e43bf7/1/DCCLGdjLWGV2ZrvJ55K2NMfPMaU.mft
File: DCCLGdjLWGV2ZrvJ55K2NMfPMaU.mft (raw, json)
Hash identifier: icIzlP4cNpCoNDioJlubNzFHHCMA3CWl6hkDSZHW64w=
Subject key identifier: A8:93:FB:82:E1:CF:EC:E3:F3:B8:77:AE:CF:8A:73:64:51:E6:DC:7E
Authority key identifier: 0C:20:8B:19:D8:CB:58:65:76:66:BB:C9:E7:92:B6:34:C7:CF:31:A5
Certificate issuer: /CN=0c208b19d8cb58657666bbc9e792b634c7cf31a5
Certificate serial: 01976A05AFF0E93920BAD15065D9E0CFBBD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DCCLGdjLWGV2ZrvJ55K2NMfPMaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/d95308-5245-4ac6-a937-4a3699e43bf7/1/DCCLGdjLWGV2ZrvJ55K2NMfPMaU.mft
Manifest number: 158A
Signing time: Fri 13 Jun 2025 16:00:46 +0000
Manifest this update: Fri 13 Jun 2025 16:00:46 +0000
Manifest next update: Sat 14 Jun 2025 16:00:46 +0000
Files and hashes: 1: DCCLGdjLWGV2ZrvJ55K2NMfPMaU.crl (hash: R7AkTnU0WnEQbJ6Vk7eTZML9JwCZm+gFX+Bu4ndh2yE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/d95308-5245-4ac6-a937-4a3699e43bf7/1/DCCLGdjLWGV2ZrvJ55K2NMfPMaU.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/d95308-5245-4ac6-a937-4a3699e43bf7/1/DCCLGdjLWGV2ZrvJ55K2NMfPMaU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DCCLGdjLWGV2ZrvJ55K2NMfPMaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6a:05:af:f0:e9:39:20:ba:d1:50:65:d9:e0:cf:bb:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c208b19d8cb58657666bbc9e792b634c7cf31a5
Validity
Not Before: Jun 13 16:00:46 2025 GMT
Not After : Jun 14 16:00:46 2025 GMT
Subject: CN=a893fb82e1cfece3f3b877aecf8a736451e6dc7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:93:be:39:37:1b:f9:9e:61:97:9d:09:bd:bc:
7a:66:0b:0a:07:ec:d1:44:f3:43:ef:ad:74:ee:fc:
db:a2:d1:8e:cc:0c:44:7b:21:7d:5a:a0:f4:99:22:
7d:c2:e6:58:59:84:41:ed:e2:91:ea:de:0e:1a:ee:
db:82:11:a9:64:21:79:40:33:eb:1d:2e:c3:96:4f:
18:bd:e1:6c:db:39:6f:70:e8:c1:df:56:50:9b:24:
98:2a:22:70:0a:f7:d7:b1:1b:84:c4:bb:71:03:4a:
bc:42:65:80:90:4b:63:26:24:82:12:c3:34:03:81:
c9:ff:64:3d:61:e2:ce:5d:28:ce:01:fa:78:bf:04:
94:d6:01:d7:92:bf:89:15:90:84:a9:c1:d8:ee:10:
96:2e:8c:8b:9c:21:20:50:43:d8:06:2f:2f:51:37:
bf:2b:ad:89:60:61:58:e2:aa:f3:44:23:09:c6:e4:
27:96:31:a8:69:d7:e9:f1:73:30:20:6f:11:68:2f:
e5:84:e3:9c:17:d0:d9:b7:6c:92:1e:72:3e:f3:82:
93:c1:0c:f4:60:aa:7a:ef:ee:0d:c6:ac:58:a8:3b:
22:66:d9:4a:76:38:40:7f:19:5d:2e:33:cb:10:c0:
b8:98:c5:34:64:75:69:06:11:66:c2:93:ad:d4:a5:
f3:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:93:FB:82:E1:CF:EC:E3:F3:B8:77:AE:CF:8A:73:64:51:E6:DC:7E
X509v3 Authority Key Identifier:
keyid:0C:20:8B:19:D8:CB:58:65:76:66:BB:C9:E7:92:B6:34:C7:CF:31:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DCCLGdjLWGV2ZrvJ55K2NMfPMaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/d95308-5245-4ac6-a937-4a3699e43bf7/1/DCCLGdjLWGV2ZrvJ55K2NMfPMaU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/d95308-5245-4ac6-a937-4a3699e43bf7/1/DCCLGdjLWGV2ZrvJ55K2NMfPMaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:42:24:55:09:42:70:5f:cb:88:3f:3e:4c:f9:86:49:3a:3b:
fc:ab:a5:4c:20:49:76:58:7f:89:6a:75:3f:32:62:a8:82:0f:
8b:df:9d:1c:d1:22:d2:2b:31:01:d2:b1:3c:0b:24:f0:7e:f0:
f6:03:6f:52:cf:5f:da:48:fc:1c:fb:23:1c:c0:ab:26:aa:de:
e2:29:4e:ac:b0:42:16:cd:73:b0:ce:fa:8c:22:64:b3:a5:05:
f7:e8:c9:21:71:b0:e5:be:d9:c9:a9:d7:44:bb:d1:0b:15:14:
46:f1:7c:12:6b:d9:b9:44:4f:e0:f3:83:e5:3d:f3:fd:3b:51:
e1:83:ca:74:b5:3b:2f:7c:6d:4a:0a:f5:2f:5b:08:55:14:f4:
2f:82:7d:fa:cd:e4:1c:b5:64:c7:10:ec:2e:f1:eb:fb:43:43:
30:b1:26:2f:19:1d:35:35:ab:3f:bd:41:93:3f:3c:ae:c2:7c:
0a:9b:d2:da:f9:07:a6:86:67:db:9d:6f:d0:bf:49:a9:ec:48:
bf:91:47:db:da:7f:3a:4f:b5:7f:88:ec:44:18:f8:09:d9:55:
0a:fc:69:d5:5a:14:4a:11:cb:6c:03:32:a9:0f:37:79:19:f7:
fa:55:f6:a4:57:eb:f3:51:95:9a:01:1d:41:94:04:5a:69:b7:
0d:50:55:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:19:21 2025 by rpki-client