Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/0edb38-c0f8-441b-acbf-61b0e369c8fd/1/d8FVIf7ZDRFOdjUxCzB_VT9X0mw.mft
File: d8FVIf7ZDRFOdjUxCzB_VT9X0mw.mft (raw, json)
Hash identifier: qlOkxTh3JEdNAvVDUegtisV7Vo7L7nsVYl2waFoaPf8=
Subject key identifier: 49:1C:22:4A:CB:B9:38:C6:35:0D:87:41:9D:C4:E6:01:F6:F6:B3:03
Authority key identifier: 77:C1:55:21:FE:D9:0D:11:4E:76:35:31:0B:30:7F:55:3F:57:D2:6C
Certificate issuer: /CN=77c15521fed90d114e7635310b307f553f57d26c
Certificate serial: 01976D3DE62E7ADA3A3668E86F8F3A286306
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d8FVIf7ZDRFOdjUxCzB_VT9X0mw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/0edb38-c0f8-441b-acbf-61b0e369c8fd/1/d8FVIf7ZDRFOdjUxCzB_VT9X0mw.mft
Manifest number: 0D78
Signing time: Sat 14 Jun 2025 07:01:02 +0000
Manifest this update: Sat 14 Jun 2025 07:01:02 +0000
Manifest next update: Sun 15 Jun 2025 07:01:02 +0000
Files and hashes: 1: d8FVIf7ZDRFOdjUxCzB_VT9X0mw.crl (hash: Qv6L7yDO5pt47sH1/NiaYMHNvSNCWDjJJKpHySyJneA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/0edb38-c0f8-441b-acbf-61b0e369c8fd/1/d8FVIf7ZDRFOdjUxCzB_VT9X0mw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/0edb38-c0f8-441b-acbf-61b0e369c8fd/1/d8FVIf7ZDRFOdjUxCzB_VT9X0mw.mft
rsync://rpki.ripe.net/repository/DEFAULT/d8FVIf7ZDRFOdjUxCzB_VT9X0mw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3d:e6:2e:7a:da:3a:36:68:e8:6f:8f:3a:28:63:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77c15521fed90d114e7635310b307f553f57d26c
Validity
Not Before: Jun 14 07:01:02 2025 GMT
Not After : Jun 15 07:01:02 2025 GMT
Subject: CN=491c224acbb938c6350d87419dc4e601f6f6b303
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:49:b7:73:68:c3:50:2d:5b:b3:53:56:2b:0f:
84:47:26:e2:07:71:ef:85:18:92:2c:ed:a0:16:1e:
94:ba:e4:79:9d:2a:36:0b:e3:1e:11:b0:1c:e8:d1:
44:e5:da:0c:3b:31:0d:bd:2e:2f:89:99:00:79:e8:
06:b5:0c:d9:4d:0d:a9:39:ae:57:d5:db:09:ef:52:
5b:ed:bc:60:59:75:91:3a:da:37:18:c3:af:6e:ad:
d1:99:4d:46:5f:c6:e6:cf:7b:c7:ac:2f:71:7d:a9:
70:d8:3e:0a:a7:f6:5a:7f:14:56:ff:e3:84:a1:e7:
fc:2c:c7:91:f5:dc:83:04:1b:47:41:11:e6:b1:68:
b2:43:5f:ea:4f:ce:5b:f8:8d:69:6d:85:b9:0e:ec:
f2:8d:27:fe:eb:71:46:ca:fe:5e:c4:f5:ea:1c:bd:
d0:bf:88:c2:ad:b7:3e:84:d9:22:f4:73:1e:7e:30:
25:ea:57:d1:01:b1:b5:bb:c9:16:b1:5c:75:25:c3:
90:e8:71:dc:39:d0:49:43:cf:35:b3:4b:c2:0e:3e:
90:e0:b2:10:ce:f8:53:b6:0a:68:70:9c:4b:fe:15:
5e:c5:4a:0a:d9:c5:be:7a:da:ec:a5:11:ed:c0:d7:
c7:95:e1:49:41:aa:19:12:b9:1b:c1:56:7d:3d:14:
d5:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:1C:22:4A:CB:B9:38:C6:35:0D:87:41:9D:C4:E6:01:F6:F6:B3:03
X509v3 Authority Key Identifier:
keyid:77:C1:55:21:FE:D9:0D:11:4E:76:35:31:0B:30:7F:55:3F:57:D2:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8FVIf7ZDRFOdjUxCzB_VT9X0mw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/0edb38-c0f8-441b-acbf-61b0e369c8fd/1/d8FVIf7ZDRFOdjUxCzB_VT9X0mw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/0edb38-c0f8-441b-acbf-61b0e369c8fd/1/d8FVIf7ZDRFOdjUxCzB_VT9X0mw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:c5:b8:03:61:9f:56:2c:a2:c6:90:a4:be:e4:d0:97:9a:f9:
11:df:c4:a8:91:b4:b1:4d:90:44:f2:00:55:be:a3:1d:2a:e4:
00:7a:d4:f8:70:7a:ff:99:97:c4:f6:59:9a:ee:6a:72:29:d1:
a0:5d:49:b6:73:3f:db:bd:7e:ca:ca:92:d2:06:85:a6:24:6b:
72:b1:8e:72:1f:33:81:7a:1f:18:73:d4:cc:01:6e:20:cf:27:
80:d3:f6:98:6a:c0:7e:d4:d7:6f:c8:22:20:31:06:a7:0b:7e:
cf:cd:5f:eb:96:7b:67:f4:76:f2:29:d9:05:a4:14:f9:b5:7d:
4d:d5:a2:f7:d5:5f:f6:93:14:4c:78:39:ff:33:d1:e0:92:fb:
47:cd:dd:5f:25:95:08:4c:ef:43:d5:e9:e0:af:b3:ca:ab:3f:
bf:27:0b:3b:c2:f8:9e:08:5b:be:c4:8a:93:0a:86:68:ea:ae:
b9:83:e3:4b:70:fe:5b:ce:9f:cf:78:c2:64:7b:b0:0f:0d:e0:
c2:08:37:21:ec:95:c9:a9:51:60:9c:61:a0:73:6b:0a:b4:de:
ed:e1:7b:e9:d7:a5:19:0b:ff:5d:a7:5f:da:df:68:9e:9a:3f:
bb:69:5a:7d:1f:83:3e:49:6a:f1:cf:f9:cb:e3:38:41:29:f3:
17:26:3e:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:14:47 2025 by rpki-client