Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/440cb1-b6f5-48cf-8886-e144ab19c5d1/1/D7o0uxz-i22g8bKwUkBsPpFhvyM.mft
File: D7o0uxz-i22g8bKwUkBsPpFhvyM.mft (raw, json)
Hash identifier: r5+YwMznPdlCuqJatefYR2W0/dgCvTBYjDA6SCUMWAA=
Subject key identifier: 39:04:8D:5E:F6:1E:29:40:0B:90:E5:35:0A:DE:49:13:71:ED:20:22
Authority key identifier: 0F:BA:34:BB:1C:FE:8B:6D:A0:F1:B2:B0:52:40:6C:3E:91:61:BF:23
Certificate issuer: /CN=0fba34bb1cfe8b6da0f1b2b052406c3e9161bf23
Certificate serial: 0197866095DF33122FB208EDF6D3F0B785E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D7o0uxz-i22g8bKwUkBsPpFhvyM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/440cb1-b6f5-48cf-8886-e144ab19c5d1/1/D7o0uxz-i22g8bKwUkBsPpFhvyM.mft
Manifest number: 1598
Signing time: Thu 19 Jun 2025 04:09:26 +0000
Manifest this update: Thu 19 Jun 2025 04:09:26 +0000
Manifest next update: Fri 20 Jun 2025 04:09:26 +0000
Files and hashes: 1: D7o0uxz-i22g8bKwUkBsPpFhvyM.crl (hash: p97nN4+lZpu8+L2SJj+98pihjEwCKUxztEpGX3ZqE9M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/440cb1-b6f5-48cf-8886-e144ab19c5d1/1/D7o0uxz-i22g8bKwUkBsPpFhvyM.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/440cb1-b6f5-48cf-8886-e144ab19c5d1/1/D7o0uxz-i22g8bKwUkBsPpFhvyM.mft
rsync://rpki.ripe.net/repository/DEFAULT/D7o0uxz-i22g8bKwUkBsPpFhvyM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Jun 2025 23:47:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:86:60:95:df:33:12:2f:b2:08:ed:f6:d3:f0:b7:85:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fba34bb1cfe8b6da0f1b2b052406c3e9161bf23
Validity
Not Before: Jun 19 04:09:26 2025 GMT
Not After : Jun 20 04:09:26 2025 GMT
Subject: CN=39048d5ef61e29400b90e5350ade491371ed2022
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:95:65:83:50:b8:e5:62:22:a1:9d:1e:83:f4:
66:6b:6a:06:cb:05:63:b2:69:90:dd:d4:74:a2:15:
38:25:c2:50:93:ee:4a:bc:86:9b:1c:74:55:0b:fa:
d9:05:e8:99:7c:4d:c9:ec:eb:76:d0:1f:16:ea:e5:
6c:15:c4:50:79:10:4b:84:6a:70:f4:b0:f2:f5:56:
57:63:42:9b:0f:b2:c9:4a:36:e6:41:70:4f:40:22:
40:99:86:59:3e:c9:7e:f0:55:6e:82:77:5e:2f:89:
8c:4c:56:90:e7:95:08:8a:c0:f6:2e:7e:14:3b:b8:
bc:aa:f5:7d:5e:62:10:60:3b:83:01:04:8b:61:ad:
54:10:d5:b8:32:8d:f9:0d:5a:f3:80:b3:bc:a3:18:
df:6e:4a:32:f5:22:41:81:2c:40:19:32:19:05:6a:
48:b7:ba:b5:b2:d7:92:de:b8:ea:76:d1:34:ff:3c:
85:fb:34:b2:b4:a7:21:38:77:29:01:ae:60:bf:bd:
93:ce:55:57:8a:60:0c:0f:e3:ef:ec:ab:74:d5:9a:
a4:4e:5f:53:9d:ea:69:c2:bc:11:25:68:01:be:0c:
8c:44:94:98:ae:2a:ad:2f:ed:c9:63:0b:2f:de:64:
fd:0a:9d:9d:bc:d6:6d:68:98:dc:6e:68:61:c6:9f:
b9:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:04:8D:5E:F6:1E:29:40:0B:90:E5:35:0A:DE:49:13:71:ED:20:22
X509v3 Authority Key Identifier:
keyid:0F:BA:34:BB:1C:FE:8B:6D:A0:F1:B2:B0:52:40:6C:3E:91:61:BF:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D7o0uxz-i22g8bKwUkBsPpFhvyM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/440cb1-b6f5-48cf-8886-e144ab19c5d1/1/D7o0uxz-i22g8bKwUkBsPpFhvyM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/440cb1-b6f5-48cf-8886-e144ab19c5d1/1/D7o0uxz-i22g8bKwUkBsPpFhvyM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:67:67:6b:e2:f0:52:14:06:72:c3:b5:ef:88:4b:b5:c0:31:
59:5f:c0:2d:30:55:be:4a:ce:6f:00:4a:05:89:ff:5f:64:d5:
7b:9f:2a:07:89:b4:c8:81:74:aa:35:4b:c3:8e:aa:64:ae:27:
aa:49:93:b5:87:da:a5:da:6f:a9:c4:1c:ee:ab:65:f1:a4:25:
85:5f:2d:d4:b2:c9:39:f7:a8:6e:aa:9e:6e:30:13:a4:35:c2:
09:c6:1e:f5:bc:df:62:a6:fc:c0:66:9e:a2:6c:ed:d9:b0:41:
f0:12:a7:1f:c5:91:61:89:b3:9e:7e:f7:0b:09:ba:55:9d:50:
e6:67:f6:76:d8:c1:8a:84:6e:47:92:e2:72:7a:05:1c:a0:65:
8e:07:56:9d:2c:f2:e1:15:23:d4:99:24:da:0b:a2:55:74:18:
53:90:f3:45:46:22:3e:a8:6f:93:d9:4c:58:fa:73:97:bb:84:
34:f1:fb:a4:d7:b0:40:81:94:05:f0:5d:f8:77:09:46:c0:19:
8c:29:0e:06:5c:7f:ff:0e:f7:63:9a:b9:fa:b1:be:d8:e0:5e:
ce:a2:6c:e8:3a:9a:82:87:00:eb:3e:f4:ae:77:67:1d:e4:c8:
93:91:c0:0f:5c:2c:21:57:52:8b:37:13:cb:8f:af:e1:d5:28:
e5:f9:d4:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 08:38:55 2025 by rpki-client