Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/2891f6-7861-4037-8008-52cf0195838b/1/dBkW6TW7TmhYsdIjYVrONp7SaB4.mft
File: dBkW6TW7TmhYsdIjYVrONp7SaB4.mft (raw, json)
Hash identifier: pRkg7Rv7oV8SaUDPjjs34SduOeaqpqvRKnT20ATrHJY=
Subject key identifier: 00:59:FE:DE:E8:31:A2:57:42:DB:98:A2:88:52:42:61:74:1E:16:35
Authority key identifier: 74:19:16:E9:35:BB:4E:68:58:B1:D2:23:61:5A:CE:36:9E:D2:68:1E
Certificate issuer: /CN=741916e935bb4e6858b1d223615ace369ed2681e
Certificate serial: 01977B9DCB145D4B5C0C5175AB9F9C66C5AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dBkW6TW7TmhYsdIjYVrONp7SaB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/2891f6-7861-4037-8008-52cf0195838b/1/dBkW6TW7TmhYsdIjYVrONp7SaB4.mft
Manifest number: 1594
Signing time: Tue 17 Jun 2025 02:00:28 +0000
Manifest this update: Tue 17 Jun 2025 02:00:28 +0000
Manifest next update: Wed 18 Jun 2025 02:00:28 +0000
Files and hashes: 1: dBkW6TW7TmhYsdIjYVrONp7SaB4.crl (hash: UNLWG/2QQn8gC2PBB4GA6KEHJQtXv+foVqrlVuAvCjQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/2891f6-7861-4037-8008-52cf0195838b/1/dBkW6TW7TmhYsdIjYVrONp7SaB4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/2891f6-7861-4037-8008-52cf0195838b/1/dBkW6TW7TmhYsdIjYVrONp7SaB4.mft
rsync://rpki.ripe.net/repository/DEFAULT/dBkW6TW7TmhYsdIjYVrONp7SaB4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 23:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7b:9d:cb:14:5d:4b:5c:0c:51:75:ab:9f:9c:66:c5:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=741916e935bb4e6858b1d223615ace369ed2681e
Validity
Not Before: Jun 17 02:00:28 2025 GMT
Not After : Jun 18 02:00:28 2025 GMT
Subject: CN=0059fedee831a25742db98a288524261741e1635
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:5f:c4:ef:34:8a:ca:4a:cc:f7:90:90:fc:04:
da:9e:57:5f:93:03:2e:4d:53:5e:8a:2a:6e:48:8b:
9a:21:42:d2:f0:32:bb:4a:85:02:cb:2c:f7:b2:27:
57:25:31:2d:5b:77:8f:ea:ef:a0:3c:7f:64:eb:f5:
a6:ae:b0:10:03:de:22:7b:a1:4c:73:c9:c7:b4:ef:
22:75:a2:35:88:f0:c5:1d:70:5e:a4:f0:40:a3:15:
15:49:f7:74:96:1d:77:8b:b4:fe:d5:3d:63:4f:8c:
4a:4c:d9:de:f9:88:ac:a1:64:0d:a2:c7:be:5c:b1:
50:a0:6b:88:3b:f8:03:01:17:ae:b9:09:d5:b1:e2:
56:2e:0f:9b:6d:f9:7c:52:93:c3:e7:af:ae:af:d4:
76:a1:01:e6:f9:a9:f9:ac:69:c2:28:c9:4e:08:a3:
2a:c8:f5:45:95:85:51:aa:7f:26:63:1a:89:66:b6:
83:ff:92:5f:c6:b9:b5:69:2c:21:d9:29:b2:28:c1:
a9:4a:17:ae:5d:8d:4a:75:63:ac:ad:af:be:43:ab:
8a:77:93:2b:cb:e4:a8:b5:6a:eb:6b:7f:36:d8:72:
39:97:b0:00:89:28:93:5c:f0:ba:ac:a1:2e:39:b4:
a3:79:7c:d0:7b:72:d1:97:03:c8:23:4f:c1:8a:c6:
21:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:59:FE:DE:E8:31:A2:57:42:DB:98:A2:88:52:42:61:74:1E:16:35
X509v3 Authority Key Identifier:
keyid:74:19:16:E9:35:BB:4E:68:58:B1:D2:23:61:5A:CE:36:9E:D2:68:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dBkW6TW7TmhYsdIjYVrONp7SaB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/2891f6-7861-4037-8008-52cf0195838b/1/dBkW6TW7TmhYsdIjYVrONp7SaB4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/2891f6-7861-4037-8008-52cf0195838b/1/dBkW6TW7TmhYsdIjYVrONp7SaB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:1f:e1:de:df:23:a9:06:99:b1:ab:50:e4:a5:20:58:e8:7c:
5c:85:5f:47:a4:e0:40:41:a3:6f:cb:9d:78:81:08:9f:d8:64:
76:a9:7b:47:8a:d7:12:5d:d6:20:9b:74:3e:90:36:9d:3c:8f:
c6:b9:0f:b1:17:dc:ec:69:ad:94:b8:e4:aa:21:fa:94:80:bf:
87:6d:85:3c:57:b0:08:75:a7:f9:71:84:dd:24:a5:14:22:31:
8e:1d:ad:42:3a:a6:77:9b:c0:f5:d3:c3:42:5e:e5:47:5b:a2:
88:e1:ba:9a:76:2b:44:a5:28:01:59:be:f9:e6:67:b9:47:2a:
78:d6:ce:32:f6:a8:26:67:a7:84:c3:31:29:d7:c9:09:ef:a8:
e4:a4:bb:9b:fc:fa:ba:89:76:8a:46:8c:c5:db:c8:77:81:be:
7e:d9:6d:f5:0d:6d:f1:d1:e4:62:b8:a4:98:d2:61:c1:c8:25:
18:dc:ff:ef:84:55:e8:35:8a:ba:b4:05:65:49:8c:19:11:80:
26:a2:73:9d:df:2e:3a:54:d9:e1:15:9f:dc:54:ce:f0:38:fe:
10:cc:56:08:0e:a1:e0:11:bd:84:12:00:5d:82:c1:a3:6c:8b:
4a:c1:f9:b1:89:13:78:5a:8f:79:5e:c6:56:6d:9b:2b:02:39:
34:74:15:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 07:46:11 2025 by rpki-client