Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8adf19-0869-46fb-92b3-f0d7b2774d3e/1/DPSuqBZureCsfGkRvcnmnHB1TBQ.mft
File: DPSuqBZureCsfGkRvcnmnHB1TBQ.mft (raw, json)
Hash identifier: fjq1Q2rahxWYavcg36eUFW0k8jP1Bfx9PNjdxOpbUC4=
Subject key identifier: 36:8D:33:9B:29:90:D8:D7:EF:B7:D0:18:7C:3A:F4:12:E7:23:4B:C5
Authority key identifier: 0C:F4:AE:A8:16:6E:AD:E0:AC:7C:69:11:BD:C9:E6:9C:70:75:4C:14
Certificate issuer: /CN=0cf4aea8166eade0ac7c6911bdc9e69c70754c14
Certificate serial: 01976CCFD45D1685BA0876212468D69699FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DPSuqBZureCsfGkRvcnmnHB1TBQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8adf19-0869-46fb-92b3-f0d7b2774d3e/1/DPSuqBZureCsfGkRvcnmnHB1TBQ.mft
Manifest number: 43
Signing time: Sat 14 Jun 2025 05:00:49 +0000
Manifest this update: Sat 14 Jun 2025 05:00:49 +0000
Manifest next update: Sun 15 Jun 2025 05:00:49 +0000
Files and hashes: 1: DPSuqBZureCsfGkRvcnmnHB1TBQ.crl (hash: K44T6Ie2uvKR6FSmX8NVZ99wGsHHeYzFuJPbpcHorVU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/8adf19-0869-46fb-92b3-f0d7b2774d3e/1/DPSuqBZureCsfGkRvcnmnHB1TBQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/8adf19-0869-46fb-92b3-f0d7b2774d3e/1/DPSuqBZureCsfGkRvcnmnHB1TBQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/DPSuqBZureCsfGkRvcnmnHB1TBQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:cf:d4:5d:16:85:ba:08:76:21:24:68:d6:96:99:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cf4aea8166eade0ac7c6911bdc9e69c70754c14
Validity
Not Before: Jun 14 05:00:49 2025 GMT
Not After : Jun 15 05:00:49 2025 GMT
Subject: CN=368d339b2990d8d7efb7d0187c3af412e7234bc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:64:86:8c:aa:cb:7e:8d:1e:8e:2c:75:bd:ab:
20:a7:4f:ad:b0:4a:13:97:d9:61:60:df:f7:01:b0:
8a:00:27:7b:4e:d0:2a:4b:09:0e:16:67:6a:23:e8:
2b:7a:f5:e7:2f:67:a7:a0:63:59:2b:55:0f:38:93:
c5:ff:eb:c6:0d:c9:4e:ba:9e:b5:a9:9a:c0:9b:98:
90:15:6e:a1:d6:49:8f:94:0a:3d:e9:60:d3:df:61:
a0:20:e1:2e:64:24:62:36:72:35:b8:06:cf:c7:d1:
72:df:25:77:90:3a:ec:c1:79:72:6e:10:53:a6:c6:
dd:22:20:65:eb:54:14:03:f6:40:e7:16:b0:a7:a2:
79:d0:ba:94:41:a5:e7:e8:9f:ee:82:7d:45:e4:43:
8f:0b:ec:bd:d9:6f:7b:2b:00:01:9c:de:47:1c:0d:
aa:eb:35:cf:8f:71:c8:2e:13:b0:68:d0:b0:d7:b7:
8a:e3:ae:d4:f3:5c:74:2d:ea:aa:0b:7e:40:ce:b5:
42:fd:d2:fa:a6:b8:b9:b7:59:b3:fd:dd:f1:b6:21:
69:3b:72:4a:d9:04:8c:61:ce:c7:e8:9b:6d:6f:b1:
d8:d3:bf:d4:d9:f0:a6:ca:9a:15:76:4e:2c:8e:e4:
68:39:56:13:85:61:a7:84:6b:0f:fd:e5:78:e7:ca:
f6:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:8D:33:9B:29:90:D8:D7:EF:B7:D0:18:7C:3A:F4:12:E7:23:4B:C5
X509v3 Authority Key Identifier:
keyid:0C:F4:AE:A8:16:6E:AD:E0:AC:7C:69:11:BD:C9:E6:9C:70:75:4C:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DPSuqBZureCsfGkRvcnmnHB1TBQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8adf19-0869-46fb-92b3-f0d7b2774d3e/1/DPSuqBZureCsfGkRvcnmnHB1TBQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8adf19-0869-46fb-92b3-f0d7b2774d3e/1/DPSuqBZureCsfGkRvcnmnHB1TBQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:87:f1:71:9e:17:77:31:f0:ad:d4:27:52:63:83:f2:88:50:
82:3a:aa:53:58:01:58:92:00:e6:7c:79:02:4f:0c:6f:78:5a:
f3:5a:22:f3:8a:b7:cc:7d:61:4a:f7:52:ea:b9:63:7b:b8:96:
fe:10:fa:e3:50:f9:30:ad:82:a9:6f:f9:31:f0:af:4f:a8:b7:
51:a5:36:09:7c:4d:b7:ab:b6:8d:76:28:59:36:57:0c:bc:e3:
dd:e1:05:88:15:02:b9:bf:6f:6a:d2:af:63:ce:30:9d:cf:42:
5e:01:c0:1c:a2:4b:fe:d6:6a:13:d6:39:ee:2d:a9:e0:2c:01:
2c:6c:53:84:09:db:99:52:1b:58:94:39:f8:8f:23:22:cb:a6:
e3:84:c2:e4:62:1b:e0:4f:65:6d:2f:39:0b:93:86:c3:85:68:
74:33:65:fe:ea:f3:c2:40:42:57:9a:81:31:d1:44:dc:41:fa:
ef:dd:91:3f:90:48:5d:12:0c:df:cf:c5:24:09:40:c7:7c:f5:
0d:c4:ed:0b:b1:32:cf:22:e0:ef:79:19:fa:5c:62:a5:2e:5c:
e5:96:a3:ec:46:ca:68:87:85:96:1e:19:70:1f:4e:e1:7e:23:
82:01:38:ba:e9:7a:cb:e7:b5:9f:d5:eb:6c:18:be:1f:7d:61:
8a:58:72:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:23:22 2025 by rpki-client