Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/53be2f-e997-470d-93bf-41b5863ca8db/1/DhI9xSvlTkcrv-N18u1B5JqHg-c.mft
File: DhI9xSvlTkcrv-N18u1B5JqHg-c.mft (raw, json)
Hash identifier: towJ+ivWujq+hJB5Rfeshk5FT+i86gO3TvDTpPjq1TI=
Subject key identifier: C0:A5:BE:35:D9:9E:39:6B:8D:56:E2:D8:72:C2:DE:2C:D4:77:B4:EC
Authority key identifier: 0E:12:3D:C5:2B:E5:4E:47:2B:BF:E3:75:F2:ED:41:E4:9A:87:83:E7
Certificate issuer: /CN=0e123dc52be54e472bbfe375f2ed41e49a8783e7
Certificate serial: 01976C6237DCD7B8F333F9F8B1382F66D471
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DhI9xSvlTkcrv-N18u1B5JqHg-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/53be2f-e997-470d-93bf-41b5863ca8db/1/DhI9xSvlTkcrv-N18u1B5JqHg-c.mft
Manifest number: 05BD
Signing time: Sat 14 Jun 2025 03:01:05 +0000
Manifest this update: Sat 14 Jun 2025 03:01:05 +0000
Manifest next update: Sun 15 Jun 2025 03:01:05 +0000
Files and hashes: 1: DhI9xSvlTkcrv-N18u1B5JqHg-c.crl (hash: LKf4Bx9nFdFociwEKcJQin3Rdh1MUmRj7+Po8bBCBrY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/53be2f-e997-470d-93bf-41b5863ca8db/1/DhI9xSvlTkcrv-N18u1B5JqHg-c.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/53be2f-e997-470d-93bf-41b5863ca8db/1/DhI9xSvlTkcrv-N18u1B5JqHg-c.mft
rsync://rpki.ripe.net/repository/DEFAULT/DhI9xSvlTkcrv-N18u1B5JqHg-c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:62:37:dc:d7:b8:f3:33:f9:f8:b1:38:2f:66:d4:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e123dc52be54e472bbfe375f2ed41e49a8783e7
Validity
Not Before: Jun 14 03:01:05 2025 GMT
Not After : Jun 15 03:01:05 2025 GMT
Subject: CN=c0a5be35d99e396b8d56e2d872c2de2cd477b4ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c7:55:ae:6b:58:c2:de:3f:a5:8a:66:6d:76:
ba:cb:68:a7:13:f4:b6:1a:c8:a8:40:0c:51:ee:0a:
0b:18:b1:d5:1f:7d:e6:0f:26:a9:42:47:fc:40:fb:
27:ec:80:95:ba:fb:49:22:25:ed:57:f6:59:52:17:
01:76:d7:9f:96:a4:90:3a:fe:9c:ff:c7:8c:0a:b1:
04:07:ad:4e:3e:6d:ae:4f:8d:92:e8:16:f2:42:5d:
72:19:83:06:db:3f:6d:fa:0f:c2:24:9d:ae:73:ab:
46:83:cd:0b:18:1f:10:a1:d4:9c:36:bf:a1:2b:4b:
1c:d9:15:eb:cf:b6:0d:12:a9:97:cc:e7:ef:32:cb:
8c:82:d7:aa:9a:b6:c1:da:50:d8:f4:ff:b6:9f:09:
95:0f:69:b7:b3:d8:96:8e:8c:87:c4:ab:db:c4:16:
2c:7f:d7:2f:17:c1:f7:c7:fa:65:bb:2b:10:05:62:
f5:11:46:af:7a:94:df:ca:bb:ca:92:4b:16:61:97:
7b:a7:98:4c:d9:99:74:ca:f9:e6:20:38:29:2a:42:
b4:86:cf:5a:71:9e:21:d4:35:f0:5b:c0:d9:54:dc:
ef:fe:1a:61:1b:9b:47:af:85:09:48:92:12:e2:73:
07:b6:6a:a8:c8:9f:1f:8b:2d:19:24:f4:8d:db:8e:
b1:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:A5:BE:35:D9:9E:39:6B:8D:56:E2:D8:72:C2:DE:2C:D4:77:B4:EC
X509v3 Authority Key Identifier:
keyid:0E:12:3D:C5:2B:E5:4E:47:2B:BF:E3:75:F2:ED:41:E4:9A:87:83:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DhI9xSvlTkcrv-N18u1B5JqHg-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/53be2f-e997-470d-93bf-41b5863ca8db/1/DhI9xSvlTkcrv-N18u1B5JqHg-c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/53be2f-e997-470d-93bf-41b5863ca8db/1/DhI9xSvlTkcrv-N18u1B5JqHg-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:6f:63:bd:b2:00:d7:1b:fc:b7:9d:70:8a:d9:00:bd:cb:52:
b9:0b:63:ef:12:d3:d7:ab:dd:d5:cb:89:74:a5:f6:5b:fa:5a:
da:69:75:af:5a:c5:79:2c:c6:95:87:52:68:25:aa:99:65:54:
68:db:de:9e:c7:ec:78:cb:aa:73:6e:0d:6f:2d:be:6c:a9:c5:
ca:5d:db:f0:b9:79:89:01:77:6f:34:12:cd:3d:43:bb:5c:1e:
33:69:98:83:08:bf:14:72:ef:e7:1d:ea:75:8f:b6:71:a2:72:
7b:d2:cd:e6:65:e5:0b:d6:b9:f7:6f:2a:1f:2f:73:8b:cf:42:
62:bd:80:f1:48:21:30:55:50:a9:22:64:f1:39:6c:b7:d9:da:
ff:17:9c:16:44:49:ca:8f:b8:a9:88:b3:e6:f5:ca:1a:75:49:
34:e0:d3:1e:17:9a:9b:77:4f:1b:78:1f:8e:71:74:b1:75:1d:
a2:1d:04:9c:b6:95:9a:39:82:d6:af:4d:12:cd:5f:c3:c2:cb:
d2:f0:a9:1e:bd:bd:08:cf:bd:a7:e5:79:02:60:3e:7b:10:b1:
1f:7e:a7:9c:5a:51:0f:67:65:88:42:fe:4f:69:93:8b:9b:9f:
bc:4f:c2:d2:6f:b8:c2:20:9c:ef:58:ab:47:fc:f7:1b:22:be:
07:3e:95:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:48:55 2025 by rpki-client