Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/2754de-a5d5-487f-9fdd-c33b3644dd3f/1/dcqnmRKIh2aA16yQqFafP8IDh_o.mft
File: dcqnmRKIh2aA16yQqFafP8IDh_o.mft (raw, json)
Hash identifier: 2EEbRAovbxpodif8D7d2JlDLuEc82LYipikP8PK3dik=
Subject key identifier: 05:D2:EB:99:54:CF:7F:E6:1E:6B:20:DC:5C:38:91:68:A5:E1:C6:A7
Authority key identifier: 75:CA:A7:99:12:88:87:66:80:D7:AC:90:A8:56:9F:3F:C2:03:87:FA
Certificate issuer: /CN=75caa7991288876680d7ac90a8569f3fc20387fa
Certificate serial: 019769CF074C8D576738F7B5CE1F5E644AF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dcqnmRKIh2aA16yQqFafP8IDh_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/2754de-a5d5-487f-9fdd-c33b3644dd3f/1/dcqnmRKIh2aA16yQqFafP8IDh_o.mft
Manifest number: 158A
Signing time: Fri 13 Jun 2025 15:01:04 +0000
Manifest this update: Fri 13 Jun 2025 15:01:04 +0000
Manifest next update: Sat 14 Jun 2025 15:01:04 +0000
Files and hashes: 1: dcqnmRKIh2aA16yQqFafP8IDh_o.crl (hash: wcHiSev9S8VDjwMNxBk18rDju9MxPgQFMxN4zLFBKV8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/2754de-a5d5-487f-9fdd-c33b3644dd3f/1/dcqnmRKIh2aA16yQqFafP8IDh_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/2754de-a5d5-487f-9fdd-c33b3644dd3f/1/dcqnmRKIh2aA16yQqFafP8IDh_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/dcqnmRKIh2aA16yQqFafP8IDh_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:cf:07:4c:8d:57:67:38:f7:b5:ce:1f:5e:64:4a:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75caa7991288876680d7ac90a8569f3fc20387fa
Validity
Not Before: Jun 13 15:01:04 2025 GMT
Not After : Jun 14 15:01:04 2025 GMT
Subject: CN=05d2eb9954cf7fe61e6b20dc5c389168a5e1c6a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:51:72:14:f3:55:6c:ab:ad:9d:32:de:19:61:
4e:00:2c:30:b0:16:35:08:26:55:f7:11:bf:72:20:
50:d0:ed:83:37:dd:d5:16:12:47:e6:d3:de:67:b4:
5a:95:68:75:ff:da:b2:bc:8a:b1:3f:03:22:9b:29:
7c:21:aa:21:58:8a:29:aa:45:0b:8f:76:11:4f:9e:
31:47:f4:a8:69:b5:c9:c6:57:a2:86:c2:ce:3b:63:
0e:a4:69:ef:4f:f3:38:8e:96:fe:5c:24:69:0a:c6:
5c:2e:d1:85:91:54:1f:eb:45:ff:91:1a:46:c7:c9:
5d:15:11:42:9d:8f:85:6e:01:f7:13:b9:0c:32:bc:
a5:b4:f6:04:d4:b4:01:85:3b:c1:1a:43:d4:62:aa:
57:ca:f1:3c:9b:2e:12:1d:2b:4e:ed:41:82:8f:16:
79:f3:7f:e3:83:29:96:46:2b:d8:47:87:72:d9:af:
f1:8c:f7:a5:50:da:5f:9d:8c:5d:c6:d2:af:9c:c0:
89:4a:50:27:c4:49:6c:30:f1:d0:03:13:20:08:c9:
60:30:36:38:5d:4c:93:5b:e4:73:f1:bb:d8:99:f7:
ed:ed:8f:55:8e:d7:ac:b2:fb:ee:a4:8b:b2:05:8e:
5d:14:e0:4c:66:3c:0e:90:ea:5d:14:11:a6:da:b0:
dd:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:D2:EB:99:54:CF:7F:E6:1E:6B:20:DC:5C:38:91:68:A5:E1:C6:A7
X509v3 Authority Key Identifier:
keyid:75:CA:A7:99:12:88:87:66:80:D7:AC:90:A8:56:9F:3F:C2:03:87:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dcqnmRKIh2aA16yQqFafP8IDh_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/2754de-a5d5-487f-9fdd-c33b3644dd3f/1/dcqnmRKIh2aA16yQqFafP8IDh_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/2754de-a5d5-487f-9fdd-c33b3644dd3f/1/dcqnmRKIh2aA16yQqFafP8IDh_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:93:a8:dc:17:4a:7c:15:35:35:8b:6c:23:ac:2a:26:2c:47:
13:59:a8:e5:6e:0d:ae:2b:6b:69:5d:cb:e7:d7:b9:b8:69:34:
fc:75:47:7d:1f:57:df:f6:6d:01:f4:64:bc:d7:f5:64:0a:43:
77:82:05:32:51:37:be:ab:33:ee:4d:9a:e6:7e:fe:3d:5e:df:
cb:f1:88:0b:62:d4:97:34:73:1d:c9:99:df:f1:a3:01:d3:18:
3b:3f:68:ce:47:44:14:f9:3b:c3:a8:32:42:bf:06:31:ad:65:
72:ce:67:67:9d:d0:36:7a:5d:4b:ee:a0:08:6a:45:ad:3a:65:
f8:e1:ff:2a:33:14:b8:a1:9f:ad:72:11:92:0a:8a:19:9f:30:
4d:e3:b4:28:8c:9f:18:8a:6e:60:1b:5a:86:13:40:18:72:53:
a9:b1:a9:61:2c:24:ed:31:36:48:f0:3e:fb:ce:38:ee:41:d3:
5e:c3:7f:30:74:69:95:a2:29:b8:50:cc:8f:8a:33:a1:7f:da:
93:f2:1c:bf:d3:12:52:3a:2e:bc:f0:21:74:e1:e0:6f:41:96:
a1:f7:12:d4:62:75:76:eb:f4:e9:48:61:95:a2:f5:15:7c:09:
e2:0f:8e:54:67:32:5a:e5:1a:c9:b1:61:3a:2d:09:f2:aa:3f:
c8:0f:a1:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:05:05 2025 by rpki-client