Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/b501de-3b1d-4d80-b6e9-f88d7ec3a526/1/dtQhWmJUV7wFMhkciAP3xkt_kGU.mft
File: dtQhWmJUV7wFMhkciAP3xkt_kGU.mft (raw, json)
Hash identifier: 6vOOknabevDG8AZsyV7/bMGoZlQwNU0bAwzSWLfM4Rg=
Subject key identifier: AA:2D:C3:74:E3:22:7B:7E:45:44:24:69:4C:DC:51:51:7E:4B:4C:6D
Authority key identifier: 76:D4:21:5A:62:54:57:BC:05:32:19:1C:88:03:F7:C6:4B:7F:90:65
Certificate issuer: /CN=76d4215a625457bc0532191c8803f7c64b7f9065
Certificate serial: 0197838EA026141498EF2049CE7D5F3D44B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dtQhWmJUV7wFMhkciAP3xkt_kGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/b501de-3b1d-4d80-b6e9-f88d7ec3a526/1/dtQhWmJUV7wFMhkciAP3xkt_kGU.mft
Manifest number: 0371
Signing time: Wed 18 Jun 2025 15:00:51 +0000
Manifest this update: Wed 18 Jun 2025 15:00:51 +0000
Manifest next update: Thu 19 Jun 2025 15:00:51 +0000
Files and hashes: 1: dtQhWmJUV7wFMhkciAP3xkt_kGU.crl (hash: X/mF1BmjaJyqeX0wqBU+Omlz/tC4stWEj6e78avinWk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/b501de-3b1d-4d80-b6e9-f88d7ec3a526/1/dtQhWmJUV7wFMhkciAP3xkt_kGU.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/b501de-3b1d-4d80-b6e9-f88d7ec3a526/1/dtQhWmJUV7wFMhkciAP3xkt_kGU.mft
rsync://rpki.ripe.net/repository/DEFAULT/dtQhWmJUV7wFMhkciAP3xkt_kGU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Jun 2025 15:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:83:8e:a0:26:14:14:98:ef:20:49:ce:7d:5f:3d:44:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76d4215a625457bc0532191c8803f7c64b7f9065
Validity
Not Before: Jun 18 15:00:51 2025 GMT
Not After : Jun 19 15:00:51 2025 GMT
Subject: CN=aa2dc374e3227b7e454424694cdc51517e4b4c6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:28:8f:2f:aa:ff:64:b5:96:40:91:e3:14:ee:
a2:55:4f:f2:66:b2:b5:cf:f9:b5:2d:45:3e:a9:24:
3d:18:33:21:da:71:91:02:c5:01:00:ea:71:3c:39:
66:cb:d3:26:c9:af:1a:d4:b1:3e:dd:97:16:0e:6f:
e9:27:9e:95:70:18:5b:8c:fc:c7:b6:e0:30:43:10:
7f:20:7b:80:73:6f:ed:c1:e5:0e:da:0d:a3:61:cc:
36:d7:79:b8:51:64:23:ed:a5:9d:e5:22:bd:26:a6:
13:a2:6d:d0:e7:da:5d:f6:e8:63:79:4d:38:fa:b9:
25:3b:4f:3d:44:22:32:77:d9:43:3d:d1:4d:db:06:
2e:4e:a9:7f:3e:f5:15:7b:33:92:51:ce:4f:b0:c4:
11:fc:16:83:c3:c7:d2:a5:e3:37:df:2f:0b:05:18:
f6:10:70:05:aa:74:6d:da:6b:23:dc:03:bd:ad:08:
b7:0d:85:8d:c7:ea:26:d7:31:bb:25:26:7a:6b:96:
41:f7:6c:56:5e:f8:76:93:1c:78:49:e4:e2:64:56:
23:22:97:3c:c7:aa:4a:fa:65:99:bb:eb:15:eb:20:
1b:e6:74:6e:e4:fc:bc:f8:61:c9:31:b2:16:54:68:
6b:24:20:71:c5:26:8e:5d:61:5e:6e:28:d9:24:5e:
15:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:2D:C3:74:E3:22:7B:7E:45:44:24:69:4C:DC:51:51:7E:4B:4C:6D
X509v3 Authority Key Identifier:
keyid:76:D4:21:5A:62:54:57:BC:05:32:19:1C:88:03:F7:C6:4B:7F:90:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dtQhWmJUV7wFMhkciAP3xkt_kGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b501de-3b1d-4d80-b6e9-f88d7ec3a526/1/dtQhWmJUV7wFMhkciAP3xkt_kGU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b501de-3b1d-4d80-b6e9-f88d7ec3a526/1/dtQhWmJUV7wFMhkciAP3xkt_kGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:2d:b0:da:08:77:ce:3a:73:1d:87:e6:f6:dd:d3:09:9c:77:
09:59:be:a6:c5:2a:36:c8:02:41:6e:78:f6:60:15:4b:44:9f:
6a:6f:45:23:a5:ff:ef:b1:8b:fc:43:8f:50:02:4d:48:c4:e3:
0c:25:4e:0e:a6:02:4f:43:22:8b:79:74:c5:c9:94:48:40:d2:
67:6d:92:1a:f3:88:67:b1:9c:f5:a8:1b:10:e8:7b:95:23:af:
d5:ad:45:94:b5:ea:0c:9e:24:ea:e8:e8:97:3c:00:70:51:87:
d4:29:33:f7:bd:64:06:3d:98:24:1b:82:c1:3f:f6:b9:c7:de:
54:47:f5:e5:1e:78:83:ac:86:68:65:21:03:16:a3:db:6c:25:
b1:0a:b4:9e:d0:a3:d5:95:66:86:10:db:ad:f1:69:0c:6c:a1:
9c:b6:9c:a2:b7:62:54:cf:db:18:ae:02:f4:ee:fe:32:bd:2c:
55:4d:40:8c:7b:57:34:e8:f5:e1:3a:c6:2b:95:73:fc:0e:87:
eb:49:7c:53:b4:d5:5a:2e:a2:a8:23:a8:1a:2e:79:1d:ed:5b:
a3:98:f7:9b:f8:09:25:90:1d:38:e2:e4:fa:19:22:49:97:ec:
8a:c7:7d:5c:05:79:f1:0c:ee:56:0d:60:a3:83:61:c8:4a:db:
4e:97:7c:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 21:09:43 2025 by rpki-client