Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/818ac5-93dd-40fd-bf6f-e04f8fcc2ca1/1/dXHIkpmbtFZLzkgMkhtv8XIF7MY.mft
File: dXHIkpmbtFZLzkgMkhtv8XIF7MY.mft (raw, json)
Hash identifier: LEuD3YVvqpG1HDkR/1t9a2k2nsCxlAXjM8iKsGFXFiM=
Subject key identifier: 60:EB:CD:24:45:1E:42:89:D1:73:75:48:23:9E:19:A0:53:E6:48:69
Authority key identifier: 75:71:C8:92:99:9B:B4:56:4B:CE:48:0C:92:1B:6F:F1:72:05:EC:C6
Certificate issuer: /CN=7571c892999bb4564bce480c921b6ff17205ecc6
Certificate serial: 019773E463D6D4C9BCEC4331D0995E3C3B84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dXHIkpmbtFZLzkgMkhtv8XIF7MY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/818ac5-93dd-40fd-bf6f-e04f8fcc2ca1/1/dXHIkpmbtFZLzkgMkhtv8XIF7MY.mft
Manifest number: 0571
Signing time: Sun 15 Jun 2025 14:00:36 +0000
Manifest this update: Sun 15 Jun 2025 14:00:36 +0000
Manifest next update: Mon 16 Jun 2025 14:00:36 +0000
Files and hashes: 1: dXHIkpmbtFZLzkgMkhtv8XIF7MY.crl (hash: Cd5l2nCRDZVbb4pshv+tz0lPxkQoeHoYbkvhk+U3POo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/818ac5-93dd-40fd-bf6f-e04f8fcc2ca1/1/dXHIkpmbtFZLzkgMkhtv8XIF7MY.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/818ac5-93dd-40fd-bf6f-e04f8fcc2ca1/1/dXHIkpmbtFZLzkgMkhtv8XIF7MY.mft
rsync://rpki.ripe.net/repository/DEFAULT/dXHIkpmbtFZLzkgMkhtv8XIF7MY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 13:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:73:e4:63:d6:d4:c9:bc:ec:43:31:d0:99:5e:3c:3b:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7571c892999bb4564bce480c921b6ff17205ecc6
Validity
Not Before: Jun 15 14:00:36 2025 GMT
Not After : Jun 16 14:00:36 2025 GMT
Subject: CN=60ebcd24451e4289d1737548239e19a053e64869
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b0:9b:51:65:e8:a7:21:4c:b0:da:8c:52:d5:
a8:b9:ef:95:0e:3d:aa:1a:f2:2f:4d:92:d0:74:03:
2b:fe:24:46:42:ec:2a:f0:3f:85:96:fa:dc:83:ea:
d3:22:60:d8:da:08:cf:d6:2a:8a:b2:ca:b1:0c:61:
93:26:f5:d1:04:3c:0e:04:04:29:b2:43:ba:2a:67:
3c:12:1c:c6:26:59:11:a9:06:81:2c:49:81:f1:6d:
e0:c4:8f:68:f0:48:7a:31:13:fe:b1:b5:56:12:52:
f0:a0:67:7e:2a:52:2d:52:73:57:05:e4:95:16:55:
10:a6:da:34:d2:2a:a2:bc:ef:34:75:20:62:b0:60:
12:6d:e0:7d:43:3f:f9:e4:74:4c:48:d0:54:5d:a8:
7e:7d:da:74:d9:66:70:0d:fc:67:c7:7f:ca:46:87:
6f:0d:53:0a:b4:c2:2a:99:75:44:a7:06:44:12:ac:
e7:01:3d:30:82:7c:8f:30:8c:ce:ba:79:63:38:55:
aa:8d:bb:3f:d9:4a:b1:52:50:94:9b:c5:4d:65:64:
92:f3:83:a7:b2:a5:d5:30:4f:6c:f0:8d:fe:ae:46:
75:5a:75:c3:4d:ce:c1:4c:71:7b:b0:d5:f1:87:cf:
78:32:cc:99:15:70:85:29:86:83:75:63:6d:92:23:
f0:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:EB:CD:24:45:1E:42:89:D1:73:75:48:23:9E:19:A0:53:E6:48:69
X509v3 Authority Key Identifier:
keyid:75:71:C8:92:99:9B:B4:56:4B:CE:48:0C:92:1B:6F:F1:72:05:EC:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dXHIkpmbtFZLzkgMkhtv8XIF7MY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/818ac5-93dd-40fd-bf6f-e04f8fcc2ca1/1/dXHIkpmbtFZLzkgMkhtv8XIF7MY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/818ac5-93dd-40fd-bf6f-e04f8fcc2ca1/1/dXHIkpmbtFZLzkgMkhtv8XIF7MY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:09:39:d3:9a:17:12:87:65:67:c2:3f:6c:a1:93:90:04:1e:
d9:2f:f8:dd:d5:2f:2d:0a:ef:6e:60:f8:44:83:e9:cc:53:b9:
a7:3f:fe:c0:f4:96:3e:cd:dd:b9:16:a5:c2:b2:b7:03:48:d7:
d4:d1:36:c0:b9:82:87:15:94:ca:d5:57:82:0d:c9:95:d3:73:
87:94:7b:19:38:98:a3:01:d2:57:f7:48:ff:83:32:97:1c:27:
2c:95:9f:4d:2c:d9:8f:aa:71:50:40:64:53:39:09:81:ce:78:
ee:74:9a:ac:af:37:16:23:f7:ee:3c:dc:9d:45:3f:8c:5c:e1:
ff:3f:ae:fe:2f:40:b6:37:63:10:79:68:c3:bc:f6:64:22:e8:
d9:e3:dc:f0:62:a3:34:08:39:96:bd:21:56:5f:61:7d:6e:66:
c7:77:c1:f9:cd:29:7a:26:40:aa:08:f2:0c:35:1e:4a:ff:8d:
bb:5d:96:7f:38:62:24:bf:80:0d:58:48:51:16:96:de:f0:66:
ff:13:28:df:e7:bd:07:41:5b:5b:8f:8a:26:11:57:36:fe:5c:
cb:d6:d8:67:94:f3:80:cb:3e:f8:82:d4:42:e5:f7:2d:8d:97:
12:4d:eb:9e:e3:2a:d0:4a:52:68:04:bf:56:0c:f2:13:41:8d:
18:07:5a:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 19:25:10 2025 by rpki-client