Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/742d35-8274-49af-bc12-da85c5732b85/1/DtjJoWGXLWi0RTPg4x9R5NzlunU.mft
File: DtjJoWGXLWi0RTPg4x9R5NzlunU.mft (raw, json)
Hash identifier: j/ilMTGzs4dCR2OgD/pGYOn8odCpQl/6an2/rjm44YI=
Subject key identifier: 77:BF:FB:DD:56:B9:37:D3:D8:F0:25:AA:A4:DD:EE:0D:3B:6D:65:73
Authority key identifier: 0E:D8:C9:A1:61:97:2D:68:B4:45:33:E0:E3:1F:51:E4:DC:E5:BA:75
Certificate issuer: /CN=0ed8c9a161972d68b44533e0e31f51e4dce5ba75
Certificate serial: 0197711B36F19E35141F763C9D03B9504691
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DtjJoWGXLWi0RTPg4x9R5NzlunU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/742d35-8274-49af-bc12-da85c5732b85/1/DtjJoWGXLWi0RTPg4x9R5NzlunU.mft
Manifest number: 158C
Signing time: Sun 15 Jun 2025 01:01:38 +0000
Manifest this update: Sun 15 Jun 2025 01:01:38 +0000
Manifest next update: Mon 16 Jun 2025 01:01:38 +0000
Files and hashes: 1: DtjJoWGXLWi0RTPg4x9R5NzlunU.crl (hash: HhEbjEnSqs1thSgdu9iFk80jf7UdvHM30WbjgamNf28=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/742d35-8274-49af-bc12-da85c5732b85/1/DtjJoWGXLWi0RTPg4x9R5NzlunU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/742d35-8274-49af-bc12-da85c5732b85/1/DtjJoWGXLWi0RTPg4x9R5NzlunU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DtjJoWGXLWi0RTPg4x9R5NzlunU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:1b:36:f1:9e:35:14:1f:76:3c:9d:03:b9:50:46:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ed8c9a161972d68b44533e0e31f51e4dce5ba75
Validity
Not Before: Jun 15 01:01:38 2025 GMT
Not After : Jun 16 01:01:38 2025 GMT
Subject: CN=77bffbdd56b937d3d8f025aaa4ddee0d3b6d6573
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:f9:8a:4b:98:81:d2:6f:2d:3c:bd:0f:aa:ce:
2a:43:c6:7e:40:87:ec:77:38:a3:14:18:74:b5:cc:
0c:07:3c:ee:5d:46:8e:cc:61:3a:9f:64:3c:eb:f3:
b1:dd:37:5c:b9:26:ad:e0:b8:bc:2f:39:d6:ce:e7:
ec:10:28:20:8d:73:ca:08:5b:a6:04:75:b0:aa:24:
b6:0c:42:de:09:f9:bc:1d:dd:2e:6f:52:31:65:6e:
72:ad:d3:9a:85:73:86:02:e9:df:ea:03:6a:ea:d0:
15:b8:ba:00:b0:62:4a:cf:a6:e5:96:1c:a4:82:5d:
70:de:aa:ce:d1:51:6e:1a:05:3a:ac:ed:d7:ca:30:
71:72:eb:d3:67:2b:a0:b7:a5:63:ac:0d:54:9d:28:
0f:3b:a8:71:fa:4d:02:16:b5:59:d3:25:08:ef:d5:
07:62:28:09:46:e9:d9:75:37:53:3c:79:9e:61:43:
3b:ad:1a:04:18:9e:e0:c2:de:5c:68:ac:58:49:73:
5b:55:3a:b5:2b:c7:e9:8d:ad:86:4f:0c:8c:b5:c1:
1f:23:69:82:da:79:82:db:3b:e7:bf:46:81:cc:ce:
33:21:64:ea:aa:35:bf:13:cb:3a:b5:82:26:fc:54:
30:92:48:d9:ea:56:ce:84:43:46:7c:89:44:63:c3:
82:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:BF:FB:DD:56:B9:37:D3:D8:F0:25:AA:A4:DD:EE:0D:3B:6D:65:73
X509v3 Authority Key Identifier:
keyid:0E:D8:C9:A1:61:97:2D:68:B4:45:33:E0:E3:1F:51:E4:DC:E5:BA:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DtjJoWGXLWi0RTPg4x9R5NzlunU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/742d35-8274-49af-bc12-da85c5732b85/1/DtjJoWGXLWi0RTPg4x9R5NzlunU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/742d35-8274-49af-bc12-da85c5732b85/1/DtjJoWGXLWi0RTPg4x9R5NzlunU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:62:03:03:ea:24:87:7c:21:ab:24:af:a8:b2:bd:18:3a:5b:
27:32:64:f5:02:c6:84:b5:7b:1a:e5:30:9c:37:41:41:ac:39:
ba:53:3d:2c:5c:0b:47:c3:83:cb:bc:6d:79:2e:24:72:ed:25:
c6:b7:4f:33:ca:7f:27:61:22:8f:ff:e1:66:c8:72:7d:87:5e:
2f:fa:40:33:14:9f:6f:02:37:c2:d9:f3:b3:8c:54:14:e8:de:
e3:c7:9f:f7:9b:ca:ae:21:5b:f7:2d:f2:b5:d3:eb:df:e3:4d:
f3:51:8f:3f:51:41:61:fa:47:23:ad:c4:78:e7:0c:1b:ae:a7:
d3:34:af:87:d9:02:5e:9d:85:f3:b6:12:d6:13:40:bd:b1:15:
64:21:9e:88:c8:bc:9b:4e:c2:3e:be:c6:09:3e:c6:45:6e:d4:
db:f2:f1:be:80:b5:c5:4b:c3:dc:70:4e:52:ac:00:1e:d3:af:
1f:ac:47:64:ed:73:9a:aa:bc:10:cc:49:de:10:76:4b:1d:ad:
98:a9:c1:90:7a:b3:09:34:18:f2:a6:a5:28:6a:95:0f:d9:ff:
cc:ce:c7:4e:59:c0:d1:a7:ca:9b:4a:1c:93:ad:25:9b:98:81:
f7:12:ae:75:81:97:d5:63:a1:3d:5f:b2:85:9d:35:4c:bc:fa:
74:5a:09:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 03:30:40 2025 by rpki-client