Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/9dcd0e-f319-4403-b164-b7c872dd9675/1/dLl1iY0Q8aUFITPh4lA2xhFNiHY.mft
File: dLl1iY0Q8aUFITPh4lA2xhFNiHY.mft (raw, json)
Hash identifier: UmL6YFrYqhxbyI9JSKvJMSKG1utfa9XFpE/2q6YEacA=
Subject key identifier: 4F:3E:58:B4:94:9E:0A:3D:74:59:60:4A:B5:23:56:64:96:C9:D4:45
Authority key identifier: 74:B9:75:89:8D:10:F1:A5:05:21:33:E1:E2:50:36:C6:11:4D:88:76
Certificate issuer: /CN=74b975898d10f1a5052133e1e25036c6114d8876
Certificate serial: 019791EE8C20EDBE249315E83522F42C4135
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dLl1iY0Q8aUFITPh4lA2xhFNiHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/9dcd0e-f319-4403-b164-b7c872dd9675/1/dLl1iY0Q8aUFITPh4lA2xhFNiHY.mft
Manifest number: 123C
Signing time: Sat 21 Jun 2025 10:00:19 +0000
Manifest this update: Sat 21 Jun 2025 10:00:19 +0000
Manifest next update: Sun 22 Jun 2025 10:00:19 +0000
Files and hashes: 1: dLl1iY0Q8aUFITPh4lA2xhFNiHY.crl (hash: 6UrHZ3JXbjpgGP1Oh3P+bOhbWAONQxX98KOv5D5mptQ=)
2: z_2rtoFCvPkDkADqibZPjoJmwkw.roa (hash: q/SzHtsnHuDBpVkpEWhHESnMoXOnwPbEJuDNiDhbwHs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/9dcd0e-f319-4403-b164-b7c872dd9675/1/dLl1iY0Q8aUFITPh4lA2xhFNiHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/9dcd0e-f319-4403-b164-b7c872dd9675/1/dLl1iY0Q8aUFITPh4lA2xhFNiHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/dLl1iY0Q8aUFITPh4lA2xhFNiHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 22 Jun 2025 07:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:91:ee:8c:20:ed:be:24:93:15:e8:35:22:f4:2c:41:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74b975898d10f1a5052133e1e25036c6114d8876
Validity
Not Before: Jun 21 10:00:19 2025 GMT
Not After : Jun 22 10:00:19 2025 GMT
Subject: CN=4f3e58b4949e0a3d7459604ab523566496c9d445
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:57:e3:7b:19:bc:49:cb:a0:80:ce:14:1c:38:
60:ff:fa:f7:3f:14:60:36:1b:b0:9b:e9:50:48:c3:
93:31:94:be:ff:db:5b:5d:0b:21:5b:e9:5a:9f:6c:
52:45:9d:5d:1f:f4:b3:a8:53:bb:2d:db:43:86:4f:
aa:b9:a0:92:db:16:ba:71:0e:56:7b:fd:fe:55:18:
17:1e:43:e2:f6:d0:13:6b:34:c6:9c:64:77:50:64:
91:07:ca:7e:ee:65:55:99:9e:ec:72:fc:d4:08:80:
c2:fa:24:25:25:48:0b:eb:cf:15:a5:82:5f:df:36:
4d:45:12:38:ed:50:8c:a8:c1:9a:57:21:c3:d9:87:
8c:19:f8:7e:8f:c9:19:68:58:4d:52:03:91:0c:63:
5f:f2:fb:9b:fe:4b:73:19:e6:9c:fd:95:26:4e:1d:
ef:19:6e:99:69:46:d7:20:6b:0d:2b:1b:8b:03:88:
e7:31:5a:37:6b:af:a8:77:75:6f:a9:11:69:1d:39:
4f:02:ec:86:d0:22:fe:4c:f9:44:86:88:21:7e:0d:
c6:ac:a8:ed:c9:a0:f2:e7:b9:e8:f6:e4:b5:ad:af:
9b:f1:4e:63:48:8c:e0:53:f8:3c:ae:95:2e:60:d8:
f5:2a:f6:8d:12:83:a8:c6:aa:48:11:64:ec:00:09:
be:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:3E:58:B4:94:9E:0A:3D:74:59:60:4A:B5:23:56:64:96:C9:D4:45
X509v3 Authority Key Identifier:
keyid:74:B9:75:89:8D:10:F1:A5:05:21:33:E1:E2:50:36:C6:11:4D:88:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dLl1iY0Q8aUFITPh4lA2xhFNiHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9dcd0e-f319-4403-b164-b7c872dd9675/1/dLl1iY0Q8aUFITPh4lA2xhFNiHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9dcd0e-f319-4403-b164-b7c872dd9675/1/dLl1iY0Q8aUFITPh4lA2xhFNiHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:5e:ce:a4:70:65:87:ab:7d:15:00:24:35:dc:31:53:7d:bd:
88:87:c8:27:b1:b9:b7:84:71:e5:99:81:be:ba:d6:49:ad:ba:
39:6a:c2:57:03:2a:cd:2c:9e:2c:af:f9:1c:98:f2:f8:2f:54:
5b:f8:d2:36:9f:25:5e:40:fe:b6:ed:9b:d7:39:55:74:55:42:
60:04:90:26:96:0b:c2:16:9d:32:e6:32:fa:85:17:f5:e5:73:
8a:d5:32:ab:13:e9:ba:69:1f:bd:a8:58:ad:f9:1e:1c:8f:b4:
eb:f3:1c:ec:89:30:24:3f:f9:aa:2c:07:85:c4:20:e9:08:33:
38:38:67:08:9e:29:e8:41:22:8d:15:42:ce:de:c6:e0:2c:7c:
9b:21:17:9e:85:c8:38:0d:a3:49:48:74:b3:d7:a6:ff:ae:b9:
62:62:e1:36:54:e1:d3:70:9d:5b:4d:12:83:38:be:c0:3c:7f:
0e:cb:68:7c:8b:b3:50:33:f6:44:1d:65:4d:2c:cc:a5:09:44:
10:31:e4:03:89:2c:da:d7:c5:e8:b3:4c:b3:01:fe:40:73:31:
77:c7:cc:b1:ef:78:c3:db:2e:35:c1:6f:81:ad:e0:b7:ae:ac:
73:9f:91:12:ab:91:fb:7c:a8:f3:04:b0:15:4e:fd:e0:50:4a:
f2:fc:1e:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 14:10:32 2025 by rpki-client