Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/4a1238-cb64-4a46-af95-65be44d0dbd4/1/Dchx21CYv4OP_qmaAvZ5Nos-GrI.mft
File: Dchx21CYv4OP_qmaAvZ5Nos-GrI.mft (raw, json)
Hash identifier: 8R4FF0TSFyERUiKW4KAng2eKSsklRBbXIms2dlDugr8=
Subject key identifier: 2D:1B:FB:74:FD:85:AF:B5:B1:F5:31:DC:F0:B7:E8:20:85:47:2A:F6
Authority key identifier: 0D:C8:71:DB:50:98:BF:83:8F:FE:A9:9A:02:F6:79:36:8B:3E:1A:B2
Certificate issuer: /CN=0dc871db5098bf838ffea99a02f679368b3e1ab2
Certificate serial: 01977D5579EA4D206F56FE6BF01A7CDA37F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dchx21CYv4OP_qmaAvZ5Nos-GrI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/4a1238-cb64-4a46-af95-65be44d0dbd4/1/Dchx21CYv4OP_qmaAvZ5Nos-GrI.mft
Manifest number: 1594
Signing time: Tue 17 Jun 2025 10:00:43 +0000
Manifest this update: Tue 17 Jun 2025 10:00:43 +0000
Manifest next update: Wed 18 Jun 2025 10:00:43 +0000
Files and hashes: 1: Dchx21CYv4OP_qmaAvZ5Nos-GrI.crl (hash: iQLuphKgtWMdC48sgaPaq489X0MEZrgHs72JMq0itd8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/4a1238-cb64-4a46-af95-65be44d0dbd4/1/Dchx21CYv4OP_qmaAvZ5Nos-GrI.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/4a1238-cb64-4a46-af95-65be44d0dbd4/1/Dchx21CYv4OP_qmaAvZ5Nos-GrI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dchx21CYv4OP_qmaAvZ5Nos-GrI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 10:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7d:55:79:ea:4d:20:6f:56:fe:6b:f0:1a:7c:da:37:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dc871db5098bf838ffea99a02f679368b3e1ab2
Validity
Not Before: Jun 17 10:00:43 2025 GMT
Not After : Jun 18 10:00:43 2025 GMT
Subject: CN=2d1bfb74fd85afb5b1f531dcf0b7e82085472af6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:4a:5e:9c:14:52:bd:3b:ab:83:3b:47:e0:db:
43:7f:5b:1e:b1:fa:94:1c:ee:b7:cc:9e:a4:7d:fa:
47:36:f4:2b:d7:09:b0:dc:7d:91:8b:62:58:42:9c:
19:84:ce:68:ae:66:cb:df:23:3c:3c:e6:45:39:9c:
99:de:b5:f5:b0:90:be:54:7a:8a:5d:bc:d5:e0:c7:
3e:c8:34:98:44:de:19:77:d5:c7:00:bd:85:37:31:
39:2c:89:5c:f0:28:50:37:dc:cc:b7:d6:ba:be:e5:
fe:85:b5:6b:b5:6f:c8:20:f3:4a:00:c5:93:e7:ac:
9b:14:f8:7a:51:db:15:e9:a1:b7:a9:72:14:af:74:
dd:66:b1:7f:44:5c:00:f5:92:24:30:00:df:e7:07:
3e:ad:59:fd:3c:37:5a:b9:ff:80:26:4f:d7:b3:6c:
7d:3e:a6:8a:b5:c6:9e:cf:74:3d:83:df:7b:0d:ef:
40:1e:ff:1c:ff:42:16:2b:15:40:6c:cc:36:05:28:
a8:31:bf:3f:d9:55:27:6a:5c:e7:74:b6:98:85:ef:
e6:78:af:18:62:5c:ea:ba:2b:2d:f3:ff:42:c8:67:
7a:54:d6:59:df:54:34:cd:d0:ba:18:e9:72:d8:2c:
10:fd:67:44:59:0c:70:a3:46:cb:1d:53:f7:3d:15:
97:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:1B:FB:74:FD:85:AF:B5:B1:F5:31:DC:F0:B7:E8:20:85:47:2A:F6
X509v3 Authority Key Identifier:
keyid:0D:C8:71:DB:50:98:BF:83:8F:FE:A9:9A:02:F6:79:36:8B:3E:1A:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dchx21CYv4OP_qmaAvZ5Nos-GrI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/4a1238-cb64-4a46-af95-65be44d0dbd4/1/Dchx21CYv4OP_qmaAvZ5Nos-GrI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/4a1238-cb64-4a46-af95-65be44d0dbd4/1/Dchx21CYv4OP_qmaAvZ5Nos-GrI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:54:f2:cd:b2:c8:1c:0f:dc:01:a5:01:2c:55:b2:ea:f8:24:
94:49:47:cd:55:88:08:0e:e6:ea:f7:31:7c:19:1e:c3:8c:b8:
05:ee:91:80:4a:0f:3d:9f:10:a5:3c:bd:3a:95:f2:7b:f7:6d:
bc:39:dd:4f:4f:57:4d:09:87:7f:25:a1:0d:7c:a8:c9:13:20:
81:c8:29:fe:c2:86:25:6f:bd:d4:76:11:11:05:9e:e3:2a:56:
e2:a7:00:bb:a7:7c:8b:c3:68:46:29:6a:1b:58:38:b2:09:78:
c5:f5:4b:cf:8b:d3:13:2f:71:51:ed:d1:90:90:ba:49:1d:a6:
04:8a:a9:78:67:8a:24:23:5c:7c:7b:51:91:08:b4:ed:64:e9:
fc:09:00:59:0c:ae:a2:d2:09:78:34:ac:02:2b:2e:95:ae:8f:
2c:bf:ee:7e:6e:0b:2c:a7:d1:cf:13:ca:07:56:a8:25:26:b7:
5c:9b:5a:f7:f7:f2:2a:a3:88:87:b9:1d:59:68:39:67:98:6a:
89:dd:28:fc:09:f4:d6:da:66:52:ef:35:d1:f4:a7:c1:98:fa:
55:93:ff:8d:17:1c:55:49:a2:2d:4f:e2:de:4e:fa:80:98:ae:
48:91:ab:bd:4b:1e:a0:eb:2c:ec:2a:6c:c9:7e:7f:b5:62:a1:
af:e9:c1:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 16:14:55 2025 by rpki-client