Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/f87140-bc2c-4f3f-83fd-a3d455d34809/1/msDRGjfaNdvi9_a5YZ5VcmNOH2I.mft
File: msDRGjfaNdvi9_a5YZ5VcmNOH2I.mft (raw, json)
Hash identifier: ucLUFXIljhY2qOY55Qv538zcQ0PxoipaMad6kWJ3FBU=
Subject key identifier: 5E:1C:3D:18:67:9F:1D:EA:3A:76:8B:54:E6:2A:B3:D1:3A:E2:6C:CB
Authority key identifier: 9A:C0:D1:1A:37:DA:35:DB:E2:F7:F6:B9:61:9E:55:72:63:4E:1F:62
Certificate issuer: /CN=9ac0d11a37da35dbe2f7f6b9619e5572634e1f62
Certificate serial: 01976A0605F2466885F0C76648711884C3F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/msDRGjfaNdvi9_a5YZ5VcmNOH2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/f87140-bc2c-4f3f-83fd-a3d455d34809/1/msDRGjfaNdvi9_a5YZ5VcmNOH2I.mft
Manifest number: 1202
Signing time: Fri 13 Jun 2025 16:01:09 +0000
Manifest this update: Fri 13 Jun 2025 16:01:09 +0000
Manifest next update: Sat 14 Jun 2025 16:01:09 +0000
Files and hashes: 1: msDRGjfaNdvi9_a5YZ5VcmNOH2I.crl (hash: v2trM7pB3nIXhEvGMOaEtBVS8kHzWTlkDaPCCMVAy/A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/f87140-bc2c-4f3f-83fd-a3d455d34809/1/msDRGjfaNdvi9_a5YZ5VcmNOH2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/f87140-bc2c-4f3f-83fd-a3d455d34809/1/msDRGjfaNdvi9_a5YZ5VcmNOH2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/msDRGjfaNdvi9_a5YZ5VcmNOH2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6a:06:05:f2:46:68:85:f0:c7:66:48:71:18:84:c3:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ac0d11a37da35dbe2f7f6b9619e5572634e1f62
Validity
Not Before: Jun 13 16:01:09 2025 GMT
Not After : Jun 14 16:01:09 2025 GMT
Subject: CN=5e1c3d18679f1dea3a768b54e62ab3d13ae26ccb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d0:3e:ab:c2:df:ed:09:2a:92:4a:13:dc:4e:
2b:59:d4:33:2a:f7:46:c4:7a:f1:54:62:1c:3b:e2:
95:67:a8:2c:b2:2e:17:05:5b:8b:12:9d:a9:44:4d:
87:b5:cb:de:4c:64:eb:89:c4:5b:81:f8:56:31:b8:
f9:c9:7d:dd:a0:47:98:2c:8b:3d:3c:a7:79:72:16:
07:42:e2:94:cb:53:6d:a9:d4:ed:e9:32:63:da:55:
a2:64:26:85:4a:01:d8:08:91:98:af:8e:38:f4:91:
8c:be:3c:89:a2:e3:b2:93:57:94:d3:7b:47:b0:ce:
29:0a:5c:30:60:c5:de:de:40:09:d4:d4:e4:0d:5c:
c7:68:91:55:a1:f0:13:a5:c3:0d:c2:a2:b2:ab:7a:
7a:0e:d5:19:97:53:32:0a:f5:43:e3:e0:12:68:c0:
9c:ab:d0:48:6a:6e:e9:ad:b0:56:d4:42:84:89:a3:
0f:e1:65:74:38:71:f7:9d:8c:ab:93:8d:06:cc:fc:
ec:67:2a:b0:9b:f1:08:e7:cd:77:14:a1:fe:75:44:
22:6d:65:6c:04:bd:99:52:61:75:c0:db:05:5e:8a:
2d:d2:33:08:b5:e6:78:2d:8f:0e:90:f7:63:0b:fd:
e7:08:9a:15:0d:3e:a8:52:2a:91:2a:3e:ec:57:0f:
f9:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:1C:3D:18:67:9F:1D:EA:3A:76:8B:54:E6:2A:B3:D1:3A:E2:6C:CB
X509v3 Authority Key Identifier:
keyid:9A:C0:D1:1A:37:DA:35:DB:E2:F7:F6:B9:61:9E:55:72:63:4E:1F:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/msDRGjfaNdvi9_a5YZ5VcmNOH2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/f87140-bc2c-4f3f-83fd-a3d455d34809/1/msDRGjfaNdvi9_a5YZ5VcmNOH2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/f87140-bc2c-4f3f-83fd-a3d455d34809/1/msDRGjfaNdvi9_a5YZ5VcmNOH2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:10:51:b9:32:58:dc:89:7a:60:72:08:2d:17:df:15:2e:7b:
34:19:4a:7a:fb:b8:08:33:4b:20:e3:fa:f9:ab:34:3a:31:05:
0b:d6:27:d5:66:4b:df:b2:13:4b:d9:9a:c8:11:29:48:ec:31:
81:8c:2d:ef:15:f9:1a:44:a1:aa:49:a6:06:a0:d1:03:09:6a:
db:48:8e:12:73:af:b5:02:fc:4f:7f:7f:ab:82:cd:44:19:e2:
e6:4f:b7:d1:34:06:59:65:c0:da:05:4e:e2:96:37:84:24:b3:
89:89:c9:32:41:e7:3c:9e:0f:81:37:65:46:e5:48:c0:02:6b:
da:03:d2:da:ea:bf:87:65:af:31:e6:15:b5:08:35:17:50:12:
49:84:64:3c:e1:26:9c:4d:7a:7e:58:25:38:5d:7a:79:95:c0:
50:c5:31:d5:62:9d:17:3a:5a:e4:23:b6:9d:3a:d8:aa:b8:ec:
65:e6:15:91:75:19:05:67:ef:a4:82:bf:a9:40:b3:3d:c8:1f:
fa:31:25:7b:93:89:32:d3:e3:92:78:91:77:ac:2c:58:46:ec:
84:68:82:e0:71:46:eb:1b:f4:08:a3:54:89:a6:e0:21:33:95:
8f:5e:bd:49:22:67:33:5b:6d:5e:11:b6:1d:56:93:d2:be:2c:
59:f7:53:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:11:30 2025 by rpki-client