Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/a6dda1-1b87-4ec3-938f-dd5ddd05db0b/1/Dj8xyerObwpezNuN8rAcc1FWhoY.mft
File: Dj8xyerObwpezNuN8rAcc1FWhoY.mft (raw, json)
Hash identifier: 3TBHo/XAXRJPDNC3DBoxKUu6f1F6EOMu1Wi4A6F+aXE=
Subject key identifier: 48:EA:23:64:3E:9B:86:28:81:6C:83:43:EB:AA:51:1A:D8:52:4F:3F
Authority key identifier: 0E:3F:31:C9:EA:CE:6F:0A:5E:CC:DB:8D:F2:B0:1C:73:51:56:86:86
Certificate issuer: /CN=0e3f31c9eace6f0a5eccdb8df2b01c7351568686
Certificate serial: 01976D3E78B7612378785CC7A34E3AE0B765
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dj8xyerObwpezNuN8rAcc1FWhoY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/a6dda1-1b87-4ec3-938f-dd5ddd05db0b/1/Dj8xyerObwpezNuN8rAcc1FWhoY.mft
Manifest number: 1549
Signing time: Sat 14 Jun 2025 07:01:39 +0000
Manifest this update: Sat 14 Jun 2025 07:01:39 +0000
Manifest next update: Sun 15 Jun 2025 07:01:39 +0000
Files and hashes: 1: Dj8xyerObwpezNuN8rAcc1FWhoY.crl (hash: Eb+nT6/zrQd3us5DUofJJipimfnImZwhwx6NJ5xhjaI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/a6dda1-1b87-4ec3-938f-dd5ddd05db0b/1/Dj8xyerObwpezNuN8rAcc1FWhoY.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/a6dda1-1b87-4ec3-938f-dd5ddd05db0b/1/Dj8xyerObwpezNuN8rAcc1FWhoY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dj8xyerObwpezNuN8rAcc1FWhoY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3e:78:b7:61:23:78:78:5c:c7:a3:4e:3a:e0:b7:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e3f31c9eace6f0a5eccdb8df2b01c7351568686
Validity
Not Before: Jun 14 07:01:39 2025 GMT
Not After : Jun 15 07:01:39 2025 GMT
Subject: CN=48ea23643e9b8628816c8343ebaa511ad8524f3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:94:d1:35:ae:35:b3:1f:08:c1:d0:20:93:9c:
cc:63:3e:a4:55:c1:24:7c:bc:b0:f1:f0:0e:1b:61:
f9:25:18:1a:4f:b5:94:93:99:45:5c:6a:11:a4:a0:
9d:51:66:77:4d:c3:a1:7d:23:63:b7:b5:0f:b5:e3:
8a:98:31:a0:2d:0b:82:ab:c9:9c:7c:46:2b:ed:db:
32:ec:e0:db:e7:a2:7b:43:09:5b:3a:54:af:f1:a6:
32:0a:09:a7:b1:05:9c:27:f5:35:71:b7:bd:cc:d0:
a9:49:bd:d4:89:46:04:a8:11:ff:07:1d:51:d3:80:
bf:33:64:7e:d7:81:92:dd:f3:3b:db:06:57:d5:31:
95:35:a5:03:4b:fb:2c:9b:86:7b:33:1e:fb:54:d8:
a5:30:bf:21:98:2b:6d:32:f9:81:f7:59:ac:30:8e:
be:d7:d7:64:46:e5:22:e0:57:8d:86:2d:76:70:ae:
73:64:ed:c6:d7:e1:c0:a8:f3:dc:1c:fc:bb:f7:80:
fc:e4:d1:6b:a9:fb:42:75:8a:1e:89:ae:24:e3:2a:
72:58:d4:8b:d4:40:b5:35:12:f5:4a:6b:7e:e4:9a:
01:12:be:dc:f2:b0:54:d5:6b:da:ab:74:94:80:27:
ca:90:a7:7a:9b:18:ee:8e:63:5e:70:4d:c2:2e:c2:
7d:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:EA:23:64:3E:9B:86:28:81:6C:83:43:EB:AA:51:1A:D8:52:4F:3F
X509v3 Authority Key Identifier:
keyid:0E:3F:31:C9:EA:CE:6F:0A:5E:CC:DB:8D:F2:B0:1C:73:51:56:86:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dj8xyerObwpezNuN8rAcc1FWhoY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/a6dda1-1b87-4ec3-938f-dd5ddd05db0b/1/Dj8xyerObwpezNuN8rAcc1FWhoY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/a6dda1-1b87-4ec3-938f-dd5ddd05db0b/1/Dj8xyerObwpezNuN8rAcc1FWhoY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:33:30:d5:f2:cc:27:ae:4e:e6:7f:54:fb:d2:c1:b8:27:27:
82:f3:67:ea:b3:bb:67:cd:47:c3:d5:cf:07:e0:02:68:d1:1c:
5a:11:23:01:1d:5c:39:f8:67:07:c7:2f:e0:01:3a:6a:3e:4f:
d2:37:3a:e5:f3:c9:b5:8c:b8:ca:d4:36:52:65:9f:d4:90:a0:
ba:04:52:19:48:17:85:ca:d3:86:13:49:8f:34:58:8e:56:14:
17:b6:e5:07:5d:91:fc:59:ba:c3:cf:25:70:60:e9:57:c2:a7:
43:d5:df:c9:9f:56:2f:de:ef:6b:98:e9:53:72:2d:6b:99:4b:
35:5b:f3:ff:1f:57:d2:ca:3b:18:f2:be:6c:10:51:d9:32:88:
1f:12:ed:70:74:98:16:07:ad:31:25:5a:0d:03:49:a4:91:1c:
c7:c8:a3:35:f9:b5:a6:f5:cb:1a:2b:5a:63:d7:77:f5:de:09:
3c:02:89:ff:90:08:35:59:2b:c0:f8:58:53:5e:42:25:e3:1a:
4f:65:79:98:d1:cf:03:5f:28:30:cf:57:71:84:9a:55:e5:01:
c4:a7:89:f8:8b:aa:6e:e1:e6:28:4d:98:41:9d:9a:75:1c:7c:
00:ad:3a:5a:1d:9e:54:85:45:d9:09:8f:dc:42:fd:b3:08:7f:
12:23:93:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:23:16 2025 by rpki-client