Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/b44856-214a-4596-927b-3da415ac0dc0/1/dGMPFkhbT5M4X5So7HEArUjF_FA.mft
File: dGMPFkhbT5M4X5So7HEArUjF_FA.mft (raw, json)
Hash identifier: V+YBf6sGcC8JG38rwo/lbqJJCI6NS3yGP7TLEf/lOak=
Subject key identifier: 1F:3D:92:1B:63:E5:39:4A:57:EF:2D:F2:BB:42:E2:F5:6F:80:4A:60
Authority key identifier: 74:63:0F:16:48:5B:4F:93:38:5F:94:A8:EC:71:00:AD:48:C5:FC:50
Certificate issuer: /CN=74630f16485b4f93385f94a8ec7100ad48c5fc50
Certificate serial: 01976F2C9D80F55B9344460C78BCE76A7EC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dGMPFkhbT5M4X5So7HEArUjF_FA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/b44856-214a-4596-927b-3da415ac0dc0/1/dGMPFkhbT5M4X5So7HEArUjF_FA.mft
Manifest number: 0CC8
Signing time: Sat 14 Jun 2025 16:01:24 +0000
Manifest this update: Sat 14 Jun 2025 16:01:24 +0000
Manifest next update: Sun 15 Jun 2025 16:01:24 +0000
Files and hashes: 1: dGMPFkhbT5M4X5So7HEArUjF_FA.crl (hash: i8e/KNLitfMrrJB/Rjp4zTe7MAHci7f+/unDn7fNZ9w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/b44856-214a-4596-927b-3da415ac0dc0/1/dGMPFkhbT5M4X5So7HEArUjF_FA.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/b44856-214a-4596-927b-3da415ac0dc0/1/dGMPFkhbT5M4X5So7HEArUjF_FA.mft
rsync://rpki.ripe.net/repository/DEFAULT/dGMPFkhbT5M4X5So7HEArUjF_FA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:2c:9d:80:f5:5b:93:44:46:0c:78:bc:e7:6a:7e:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74630f16485b4f93385f94a8ec7100ad48c5fc50
Validity
Not Before: Jun 14 16:01:24 2025 GMT
Not After : Jun 15 16:01:24 2025 GMT
Subject: CN=1f3d921b63e5394a57ef2df2bb42e2f56f804a60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:1c:53:b9:9a:fe:50:31:bb:0d:2c:7c:27:b2:
35:16:d6:f4:66:bc:94:01:c5:8d:45:e9:30:db:55:
6e:00:85:f9:a1:6b:ea:60:f3:4c:4a:91:8a:43:6a:
30:fd:4d:15:d8:53:9e:0d:5c:47:38:91:76:8c:7e:
46:c4:1c:2d:fa:98:0f:ee:b3:b0:ed:8a:d6:82:83:
ac:5b:fe:d5:03:ec:87:f5:74:06:52:5c:48:da:a9:
fa:ba:99:9a:03:a2:51:11:03:12:11:20:0a:df:f5:
fb:ae:95:bd:ad:df:3e:e0:b5:5a:65:93:0d:2e:e7:
25:10:a9:11:e5:51:4c:a8:74:55:07:58:03:81:c0:
aa:51:ea:e8:e9:88:e1:5a:fc:58:48:c8:38:21:25:
67:fe:e9:4a:ed:c1:7e:13:5a:0a:67:96:66:74:43:
4d:4d:3a:18:ba:5a:5f:08:66:78:05:1a:cf:22:dd:
b0:5f:b6:f4:f2:bf:75:1e:f4:d6:26:57:5c:63:13:
47:49:8a:e7:82:91:c4:a8:c6:77:02:02:fc:0d:6c:
9d:1a:d0:59:1e:6b:e5:2f:a0:0e:dc:44:ca:55:89:
6f:bb:e2:c1:9e:79:34:7e:33:48:01:4e:e6:9f:ff:
d7:fc:ea:c4:49:2d:43:8c:2f:a8:07:f1:79:78:25:
74:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:3D:92:1B:63:E5:39:4A:57:EF:2D:F2:BB:42:E2:F5:6F:80:4A:60
X509v3 Authority Key Identifier:
keyid:74:63:0F:16:48:5B:4F:93:38:5F:94:A8:EC:71:00:AD:48:C5:FC:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGMPFkhbT5M4X5So7HEArUjF_FA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/b44856-214a-4596-927b-3da415ac0dc0/1/dGMPFkhbT5M4X5So7HEArUjF_FA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/b44856-214a-4596-927b-3da415ac0dc0/1/dGMPFkhbT5M4X5So7HEArUjF_FA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ee:c2:06:bf:24:a6:0e:00:90:80:14:96:de:26:60:53:c6:b8:
b8:dd:b0:d0:7d:1d:78:7b:7c:be:c3:08:2c:05:3b:90:38:3d:
c8:0c:fc:30:49:1d:00:28:02:f5:8b:74:82:0e:80:49:6d:cb:
29:67:0e:72:8a:10:83:15:da:c9:a9:76:de:af:e0:18:b8:ce:
19:d0:25:0b:07:22:2c:57:ef:c6:80:a7:17:ed:e9:ab:f7:dc:
6e:63:69:d2:44:9a:67:b1:72:13:6e:f7:88:7f:b2:2d:b1:5f:
e2:71:26:ee:64:b4:b8:a6:18:df:51:f1:d0:32:06:79:9a:aa:
d5:b9:2f:83:dc:aa:f5:99:a7:bf:2c:f2:a2:cd:38:12:e8:e1:
a8:13:6f:cc:a1:c2:d5:bf:13:50:d7:90:32:e1:bd:7d:a2:ef:
ee:f3:7c:7c:ed:91:31:a5:c2:b7:bd:d2:fb:7d:0a:ed:73:05:
1c:38:7a:8a:1e:f0:28:9d:bc:27:bb:04:0d:12:c0:10:db:5e:
df:ea:01:27:4f:c0:97:d8:ab:f3:17:bf:85:ca:54:66:a5:86:
d1:c7:23:d5:1f:78:67:75:ea:13:5c:2d:27:a8:ca:51:44:2e:
ba:cf:18:cd:5b:f8:f6:d5:93:1a:72:fe:c0:d8:55:c5:27:41:
42:21:3c:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 20:15:56 2025 by rpki-client