Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/2c8dbc-40ae-49c6-8dd3-c25debcb1197/1/DudNGMQEmi2bgSwqWFXP63Wvpmc.mft
File: DudNGMQEmi2bgSwqWFXP63Wvpmc.mft (raw, json)
Hash identifier: jfvq+XOUK9AfcumWENPJDywo0+FuaFDh1nXoNY+QIec=
Subject key identifier: 9B:77:1B:3C:FB:1E:DB:21:1C:7C:77:31:23:D2:8E:91:83:37:04:CE
Authority key identifier: 0E:E7:4D:18:C4:04:9A:2D:9B:81:2C:2A:58:55:CF:EB:75:AF:A6:67
Certificate issuer: /CN=0ee74d18c4049a2d9b812c2a5855cfeb75afa667
Certificate serial: 01976BBD55D6BD84B9EB046B398645134001
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DudNGMQEmi2bgSwqWFXP63Wvpmc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/2c8dbc-40ae-49c6-8dd3-c25debcb1197/1/DudNGMQEmi2bgSwqWFXP63Wvpmc.mft
Manifest number: 158A
Signing time: Sat 14 Jun 2025 00:00:59 +0000
Manifest this update: Sat 14 Jun 2025 00:00:59 +0000
Manifest next update: Sun 15 Jun 2025 00:00:59 +0000
Files and hashes: 1: DudNGMQEmi2bgSwqWFXP63Wvpmc.crl (hash: 57nPvzHI2VfKvEDeZTImkE9Kk7iUj2g1xv/ldrAclIQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/2c8dbc-40ae-49c6-8dd3-c25debcb1197/1/DudNGMQEmi2bgSwqWFXP63Wvpmc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/2c8dbc-40ae-49c6-8dd3-c25debcb1197/1/DudNGMQEmi2bgSwqWFXP63Wvpmc.mft
rsync://rpki.ripe.net/repository/DEFAULT/DudNGMQEmi2bgSwqWFXP63Wvpmc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 00:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:bd:55:d6:bd:84:b9:eb:04:6b:39:86:45:13:40:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ee74d18c4049a2d9b812c2a5855cfeb75afa667
Validity
Not Before: Jun 14 00:00:59 2025 GMT
Not After : Jun 15 00:00:59 2025 GMT
Subject: CN=9b771b3cfb1edb211c7c773123d28e91833704ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:1d:5d:9b:8e:cb:de:d3:b3:8b:53:69:5c:9b:
2e:c2:eb:f2:28:00:db:5d:18:25:67:00:cd:32:3a:
c9:c4:e6:57:78:82:29:8f:8d:43:b1:9e:35:6d:1f:
1d:39:da:eb:7e:48:c3:a5:b2:83:7c:9a:ad:92:c3:
41:7e:78:47:d1:d0:cd:be:d9:da:ad:be:04:bf:06:
66:82:d4:76:63:ab:ab:2d:93:51:aa:74:b0:8c:57:
79:fb:18:59:f1:64:18:9e:c4:87:c8:ca:e9:ca:ba:
89:3c:f0:53:75:3e:98:78:e9:5a:99:87:a0:06:0f:
71:ac:34:57:bd:d2:45:81:9f:2d:9e:28:2a:5d:5f:
4b:02:b4:1c:b5:59:a6:f0:7f:69:d3:55:b4:c7:c6:
c4:a2:f8:8b:bc:44:48:e8:42:0f:03:bb:12:82:17:
14:c9:a1:3b:f6:a6:57:26:95:e2:74:8b:d8:ce:f9:
65:1b:88:fd:9f:d3:7d:13:85:0b:39:77:08:60:e5:
35:5a:a2:29:11:33:cb:71:ad:6c:33:a7:6f:19:95:
d2:32:67:b5:70:dd:5e:e6:7b:62:db:c7:88:e3:48:
3b:64:18:8d:48:bc:01:d6:a8:01:2a:eb:99:01:10:
ce:56:60:3d:cb:3b:a5:6e:88:ec:60:9b:c6:33:4b:
0c:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:77:1B:3C:FB:1E:DB:21:1C:7C:77:31:23:D2:8E:91:83:37:04:CE
X509v3 Authority Key Identifier:
keyid:0E:E7:4D:18:C4:04:9A:2D:9B:81:2C:2A:58:55:CF:EB:75:AF:A6:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DudNGMQEmi2bgSwqWFXP63Wvpmc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/2c8dbc-40ae-49c6-8dd3-c25debcb1197/1/DudNGMQEmi2bgSwqWFXP63Wvpmc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/2c8dbc-40ae-49c6-8dd3-c25debcb1197/1/DudNGMQEmi2bgSwqWFXP63Wvpmc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:74:92:7a:98:b0:e1:8c:43:be:46:60:d9:3a:22:90:61:13:
ec:b6:01:6b:65:cd:44:2c:36:e2:9c:f4:dc:27:e5:da:6c:d5:
ae:38:0d:55:43:87:85:6d:f7:85:88:bc:ab:3d:b6:c9:2a:d8:
29:d6:42:c4:47:b1:1b:ad:7a:64:d7:78:2c:3c:76:9b:20:de:
f0:52:63:fe:fe:fc:d8:94:a9:39:3c:7d:bb:71:b6:1c:a3:2a:
51:00:0e:42:83:f8:74:6b:b9:9f:2e:e4:08:fd:b8:19:58:89:
27:17:e8:8c:88:46:41:21:85:fd:1d:d4:b1:6a:16:56:25:f7:
7d:e1:c7:09:7d:3f:c7:97:14:33:df:82:88:ca:b2:da:13:26:
10:cd:7a:a5:d4:0a:6e:97:b1:26:3c:2a:9d:aa:6c:dd:cd:63:
84:48:46:e6:b5:8a:da:1c:e9:41:ab:cb:87:02:d7:1a:5a:50:
50:ee:fb:3d:a1:93:af:aa:53:56:6f:fd:59:b8:19:4e:29:ee:
0a:23:24:9b:d5:04:95:4c:42:26:2f:be:5f:c6:07:cc:40:49:
eb:10:6d:1d:a7:c8:8e:27:1d:2e:fc:82:99:a9:b9:66:54:6a:
45:25:b6:a8:d2:2e:de:6b:97:67:02:95:6a:ce:0e:11:1e:a8:
93:3e:ff:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:15:52 2025 by rpki-client