Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/0d2ca3-0234-4dbf-8190-12d28d7d4223/1/DykT4xUxAZpDKBkGVbRd2WvdLJ4.mft
File: DykT4xUxAZpDKBkGVbRd2WvdLJ4.mft (raw, json)
Hash identifier: AQz63Iv8NMgOdLrWnT2uY8TRoADlbemjtF5Ro830U3U=
Subject key identifier: F1:E4:CB:1C:BA:E5:B1:5A:51:DB:E4:3E:A1:69:E3:EA:F0:15:AF:C3
Authority key identifier: 0F:29:13:E3:15:31:01:9A:43:28:19:06:55:B4:5D:D9:6B:DD:2C:9E
Certificate issuer: /CN=0f2913e31531019a4328190655b45dd96bdd2c9e
Certificate serial: 01976E50589DD0E3DCCEA6E138A105A1D329
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DykT4xUxAZpDKBkGVbRd2WvdLJ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/0d2ca3-0234-4dbf-8190-12d28d7d4223/1/DykT4xUxAZpDKBkGVbRd2WvdLJ4.mft
Manifest number: 05A9
Signing time: Sat 14 Jun 2025 12:00:48 +0000
Manifest this update: Sat 14 Jun 2025 12:00:48 +0000
Manifest next update: Sun 15 Jun 2025 12:00:48 +0000
Files and hashes: 1: DykT4xUxAZpDKBkGVbRd2WvdLJ4.crl (hash: vABh/EiBZTRFcxG8znilAj2r4Lx3SyQI+G98a5lWGlU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/0d2ca3-0234-4dbf-8190-12d28d7d4223/1/DykT4xUxAZpDKBkGVbRd2WvdLJ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/0d2ca3-0234-4dbf-8190-12d28d7d4223/1/DykT4xUxAZpDKBkGVbRd2WvdLJ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/DykT4xUxAZpDKBkGVbRd2WvdLJ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:50:58:9d:d0:e3:dc:ce:a6:e1:38:a1:05:a1:d3:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f2913e31531019a4328190655b45dd96bdd2c9e
Validity
Not Before: Jun 14 12:00:48 2025 GMT
Not After : Jun 15 12:00:48 2025 GMT
Subject: CN=f1e4cb1cbae5b15a51dbe43ea169e3eaf015afc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:a4:c1:3f:90:88:1b:26:a5:8e:f9:b2:13:ca:
79:26:90:32:84:c0:60:11:63:24:d5:13:c7:81:24:
84:0d:a0:79:eb:b2:2c:d6:27:b3:f3:0c:ea:8f:bf:
50:79:af:75:6e:db:25:db:f6:4c:ca:ae:82:51:7f:
40:9c:eb:16:03:45:6e:29:3b:c7:d9:3d:90:3d:8c:
22:f3:20:0d:fd:d8:09:a0:67:f9:d7:84:46:15:65:
c4:87:40:ec:c6:8f:bc:9c:24:3e:08:4f:97:a9:94:
e5:ee:f3:b1:6f:21:99:03:20:e0:e6:7e:14:ba:db:
e6:ae:19:37:a5:9e:d8:6a:ea:c7:55:43:81:19:0d:
36:fd:9d:de:10:3a:99:05:1c:a1:1e:61:c0:ff:c2:
8f:79:3b:e0:10:54:39:ab:9a:66:41:c4:ce:95:e7:
48:a0:98:4a:eb:f6:63:2e:a7:ec:eb:d1:6f:60:ea:
0a:2e:83:8c:f9:c9:90:f5:ef:c1:3e:1a:a3:33:67:
92:4a:d4:98:45:40:59:fd:c7:a6:8d:c2:e9:ad:7a:
bb:b2:4a:e3:4c:b1:ea:c4:ed:d9:1e:19:a5:3c:44:
1b:80:61:bc:0f:4a:29:0e:91:99:1a:5f:ee:59:df:
6a:cb:59:cd:b9:c8:2e:1c:f5:7c:39:8f:76:2c:99:
2c:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:E4:CB:1C:BA:E5:B1:5A:51:DB:E4:3E:A1:69:E3:EA:F0:15:AF:C3
X509v3 Authority Key Identifier:
keyid:0F:29:13:E3:15:31:01:9A:43:28:19:06:55:B4:5D:D9:6B:DD:2C:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DykT4xUxAZpDKBkGVbRd2WvdLJ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/0d2ca3-0234-4dbf-8190-12d28d7d4223/1/DykT4xUxAZpDKBkGVbRd2WvdLJ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/0d2ca3-0234-4dbf-8190-12d28d7d4223/1/DykT4xUxAZpDKBkGVbRd2WvdLJ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:12:5b:7b:c8:4c:d8:bb:e3:06:35:d0:94:87:1f:d5:14:63:
af:4c:21:94:be:42:3e:3d:32:cc:d6:8d:d0:05:27:9c:99:1d:
3f:a5:03:45:2e:0e:22:b2:54:ba:8b:0b:98:45:c7:55:07:16:
ca:e7:46:d2:91:86:00:d0:11:ae:4e:82:39:78:9f:44:58:cb:
97:b3:b1:32:78:fd:6c:f2:dd:12:5d:1c:18:23:7d:e7:94:72:
29:d3:62:87:9e:b4:4e:7f:bd:00:dc:37:8b:b6:5f:db:5d:dc:
a6:13:93:13:de:77:39:7a:aa:80:84:f5:2b:2a:cc:e7:c2:3c:
ee:64:92:92:fe:bf:93:4a:fe:aa:7e:ea:25:0f:c8:1c:b0:27:
09:d1:31:50:14:10:aa:e5:8c:20:8a:97:c0:f0:20:ef:0f:46:
e2:bb:9d:08:55:fb:67:23:be:61:90:b8:50:65:4a:79:e1:32:
c3:15:e2:17:be:75:75:69:bf:2c:27:de:98:94:b6:92:db:15:
a5:2b:c8:d2:61:3a:a3:7f:24:c4:6f:09:48:41:5e:b9:3b:33:
9f:8f:a4:16:ed:b8:ec:bb:ba:4f:3d:56:a6:14:c3:26:ff:7c:
d0:ae:35:a4:af:41:f6:2c:41:cd:13:87:aa:0f:22:27:bc:cc:
be:f2:05:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 23:06:11 2025 by rpki-client