Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/53741e-9392-4d19-99d2-ced29650a280/1/DaPL8eDoVupMU7WrroZZTsmTOYI.mft
File: DaPL8eDoVupMU7WrroZZTsmTOYI.mft (raw, json)
Hash identifier: pm9y02KO1qvtTVVyOMkLEhVpSB6GdWpBs7offm8YzbY=
Subject key identifier: 14:DC:4E:FA:85:CF:3E:AE:20:BD:AB:08:92:15:03:2D:3F:4A:38:7B
Authority key identifier: 0D:A3:CB:F1:E0:E8:56:EA:4C:53:B5:AB:AE:86:59:4E:C9:93:39:82
Certificate issuer: /CN=0da3cbf1e0e856ea4c53b5abae86594ec9933982
Certificate serial: 01976EF52DB9CA8FFBC855A25B82B60B6576
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DaPL8eDoVupMU7WrroZZTsmTOYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/53741e-9392-4d19-99d2-ced29650a280/1/DaPL8eDoVupMU7WrroZZTsmTOYI.mft
Manifest number: 0CC1
Signing time: Sat 14 Jun 2025 15:00:50 +0000
Manifest this update: Sat 14 Jun 2025 15:00:50 +0000
Manifest next update: Sun 15 Jun 2025 15:00:50 +0000
Files and hashes: 1: DaPL8eDoVupMU7WrroZZTsmTOYI.crl (hash: +LtNMofSZsxo+mIGb+lD02ClKc89LaO6NzwS/Iua89o=)
2: MNtx-M1QVv5z_3qcN6vxhaOotfc.roa (hash: px53xNqq/MugnV+199J7ZDHhE5FdBcLFsMKgKSEziic=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/53741e-9392-4d19-99d2-ced29650a280/1/DaPL8eDoVupMU7WrroZZTsmTOYI.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/53741e-9392-4d19-99d2-ced29650a280/1/DaPL8eDoVupMU7WrroZZTsmTOYI.mft
rsync://rpki.ripe.net/repository/DEFAULT/DaPL8eDoVupMU7WrroZZTsmTOYI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:f5:2d:b9:ca:8f:fb:c8:55:a2:5b:82:b6:0b:65:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0da3cbf1e0e856ea4c53b5abae86594ec9933982
Validity
Not Before: Jun 14 15:00:50 2025 GMT
Not After : Jun 15 15:00:50 2025 GMT
Subject: CN=14dc4efa85cf3eae20bdab089215032d3f4a387b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:6c:c3:6a:19:1d:ef:af:fe:40:d2:16:9f:ff:
79:cf:1f:85:44:6e:5e:60:2a:db:b0:aa:8a:b6:a6:
53:74:ce:f5:e2:3c:70:ef:89:95:48:e2:4c:e8:53:
8c:88:7f:16:18:ba:b6:2a:9e:40:b4:03:05:a1:2b:
54:f9:3d:98:f7:42:95:75:ca:13:69:bd:02:e4:a4:
f4:22:1a:d8:f6:5a:a0:d4:6b:8d:b7:62:80:fc:26:
75:76:1d:7f:6f:38:87:a5:fc:c0:9e:1e:d7:85:e1:
47:15:f0:be:20:22:2f:86:cb:27:f1:0a:5d:82:43:
f1:d3:07:2b:1a:65:55:d4:72:dc:df:b0:d1:78:d5:
7b:e4:96:78:3d:5c:7a:f8:fa:45:ba:4d:f4:ab:bc:
31:17:97:01:4c:0e:b0:2e:73:38:95:71:d0:41:40:
62:bd:6a:d6:cc:89:de:43:17:ba:a1:7b:5a:14:da:
b9:f3:bd:e7:8c:75:e1:3b:15:cf:e5:db:6e:74:3b:
84:f6:74:72:7c:a3:c9:e6:3b:05:95:2e:7b:3b:bf:
83:8a:d1:12:87:70:72:c2:7f:db:45:66:a3:b8:40:
13:e9:6f:1e:be:70:74:35:a3:71:0e:d3:53:c7:47:
01:6a:7e:f5:de:bf:44:38:f7:7a:e2:ce:0f:9a:5d:
62:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:DC:4E:FA:85:CF:3E:AE:20:BD:AB:08:92:15:03:2D:3F:4A:38:7B
X509v3 Authority Key Identifier:
keyid:0D:A3:CB:F1:E0:E8:56:EA:4C:53:B5:AB:AE:86:59:4E:C9:93:39:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DaPL8eDoVupMU7WrroZZTsmTOYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/53741e-9392-4d19-99d2-ced29650a280/1/DaPL8eDoVupMU7WrroZZTsmTOYI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/53741e-9392-4d19-99d2-ced29650a280/1/DaPL8eDoVupMU7WrroZZTsmTOYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:dd:e0:c9:eb:c9:7a:ff:99:26:17:33:02:be:20:c1:10:7d:
60:55:89:ee:68:7d:12:b9:11:78:9c:55:da:86:eb:c2:e1:1d:
ae:b3:37:24:6a:99:8d:f0:b8:ee:8c:8a:18:38:04:2e:8a:60:
7b:4f:b6:df:85:bd:c4:94:42:39:91:2e:07:9a:99:93:90:cf:
30:d0:66:03:37:0f:2e:18:31:61:a4:f2:44:ff:a5:d4:f5:e7:
9d:36:d1:53:df:03:8c:09:1d:d4:87:72:11:b6:ad:b7:8d:87:
df:13:5f:6f:0e:59:eb:cc:49:0e:3d:68:28:58:4d:5c:80:04:
b2:97:45:34:7a:d3:b6:fc:df:08:5a:ba:78:d5:2f:8e:19:4e:
3c:d7:29:b3:6b:e7:88:8e:2e:ad:7d:84:ee:b4:fe:78:75:47:
97:21:1d:70:8a:e4:30:8f:00:d6:33:c7:9e:8c:eb:2c:02:1c:
1b:8d:d6:ee:42:2b:7f:e2:08:a0:22:96:90:d6:35:79:f8:b1:
d8:19:78:54:04:09:5f:10:cf:10:0b:89:78:45:bc:b6:43:94:
a3:21:96:82:66:50:22:0e:51:df:4b:68:76:47:b9:37:34:52:
84:3e:5e:0b:0b:89:2b:c2:43:a7:5c:71:43:05:8b:0e:55:a7:
ae:df:38:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 20:26:16 2025 by rpki-client