Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/0467dc-ccf3-4331-957c-158606318525/1/dYOxUbdLsu2w9c5rbpux4MPQrRs.mft
File: dYOxUbdLsu2w9c5rbpux4MPQrRs.mft (raw, json)
Hash identifier: 2IGvC2E8H/X9re1AEu92iZ4K8Cn/W4auK9Tgx6WQcbc=
Subject key identifier: 3A:EB:45:FB:F3:EE:8D:F1:1A:94:7D:13:AD:EE:4B:13:B7:D3:93:DC
Authority key identifier: 75:83:B1:51:B7:4B:B2:ED:B0:F5:CE:6B:6E:9B:B1:E0:C3:D0:AD:1B
Certificate issuer: /CN=7583b151b74bb2edb0f5ce6b6e9bb1e0c3d0ad1b
Certificate serial: 01976F9A1359AEF830987FE9ED39BB532FC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dYOxUbdLsu2w9c5rbpux4MPQrRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/0467dc-ccf3-4331-957c-158606318525/1/dYOxUbdLsu2w9c5rbpux4MPQrRs.mft
Manifest number: 158D
Signing time: Sat 14 Jun 2025 18:00:57 +0000
Manifest this update: Sat 14 Jun 2025 18:00:57 +0000
Manifest next update: Sun 15 Jun 2025 18:00:57 +0000
Files and hashes: 1: dYOxUbdLsu2w9c5rbpux4MPQrRs.crl (hash: t/8FcNEXqM3PLtaFELePPva+tQoCwxARLZjStf5+nnc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/0467dc-ccf3-4331-957c-158606318525/1/dYOxUbdLsu2w9c5rbpux4MPQrRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/0467dc-ccf3-4331-957c-158606318525/1/dYOxUbdLsu2w9c5rbpux4MPQrRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/dYOxUbdLsu2w9c5rbpux4MPQrRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 18:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:9a:13:59:ae:f8:30:98:7f:e9:ed:39:bb:53:2f:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7583b151b74bb2edb0f5ce6b6e9bb1e0c3d0ad1b
Validity
Not Before: Jun 14 18:00:57 2025 GMT
Not After : Jun 15 18:00:57 2025 GMT
Subject: CN=3aeb45fbf3ee8df11a947d13adee4b13b7d393dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c5:b4:d0:e3:08:9f:4a:c3:5b:8b:90:aa:ef:
16:1e:12:1c:7d:74:8d:89:7c:ad:f6:40:75:37:83:
a9:9a:1b:94:bc:33:95:1f:3a:90:7d:e1:57:a2:8f:
56:0f:ca:16:ac:0a:1d:2c:79:1d:7c:c6:59:71:de:
90:2e:27:05:4b:9f:29:4f:73:99:5c:81:a4:5e:8a:
3c:19:ae:0a:c5:2b:2c:51:b9:e3:6d:13:65:49:32:
7f:9e:f0:38:c2:20:ac:09:0b:83:73:dc:e6:e0:d1:
19:99:f8:26:43:97:50:36:60:6f:06:01:bc:e0:8e:
de:9d:99:dc:bd:6d:70:a7:66:81:fa:4b:63:cf:f8:
c9:bc:86:67:58:37:ea:8e:e9:b2:73:8f:67:e7:13:
2c:e2:7d:f1:10:7b:d7:d3:03:b1:6c:62:b6:3d:e2:
e7:51:7a:ec:fa:e4:b7:ed:03:c9:1b:b8:36:c0:d1:
52:d9:65:ef:d6:39:20:a4:c4:57:08:4f:46:18:4f:
42:cf:e4:c8:63:06:e2:f8:05:77:21:2d:ff:c5:63:
09:14:4c:b9:e7:34:9c:43:b5:12:c4:3c:8d:a6:88:
d4:2e:c6:62:c8:89:32:dd:fd:d6:9d:42:df:ac:c0:
82:dc:74:71:bb:6c:59:aa:49:46:72:21:83:97:f3:
2c:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:EB:45:FB:F3:EE:8D:F1:1A:94:7D:13:AD:EE:4B:13:B7:D3:93:DC
X509v3 Authority Key Identifier:
keyid:75:83:B1:51:B7:4B:B2:ED:B0:F5:CE:6B:6E:9B:B1:E0:C3:D0:AD:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dYOxUbdLsu2w9c5rbpux4MPQrRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/0467dc-ccf3-4331-957c-158606318525/1/dYOxUbdLsu2w9c5rbpux4MPQrRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/0467dc-ccf3-4331-957c-158606318525/1/dYOxUbdLsu2w9c5rbpux4MPQrRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:90:1d:fc:37:45:da:50:c5:4d:1a:76:4b:ae:62:17:70:9d:
37:4e:9e:f4:2c:82:00:6f:e6:7b:01:b0:5a:ec:e7:26:6e:16:
3b:7e:27:79:31:cd:ce:89:f9:de:6e:46:d3:7f:54:f7:35:6f:
88:4b:87:f3:23:c2:50:4d:9e:0d:8a:ac:e4:b6:4f:bd:12:a2:
06:1a:47:34:91:d3:67:54:b2:d2:b9:a3:92:b1:ef:75:36:3e:
84:5e:47:75:02:08:45:e9:87:79:06:c2:a0:53:8b:3d:6a:48:
98:0d:c4:9a:41:76:93:dd:ee:6e:5f:1c:e6:3d:5d:73:db:8d:
e2:ed:b5:88:e5:22:95:a4:d5:1e:9a:33:45:f2:1e:ad:fb:ea:
eb:ed:1b:89:b8:d9:fa:15:ea:4f:81:f2:16:78:f0:85:3c:a8:
61:ef:0c:2f:fc:74:b0:b8:86:ee:43:8e:ac:d8:45:82:91:f4:
71:01:96:cc:79:22:0c:a3:35:81:0d:9b:11:f8:ba:ad:52:b9:
6c:53:9a:be:48:46:ad:9f:fd:01:15:35:97:b8:7c:0b:4c:0d:
6c:bd:fd:93:26:db:c2:32:c7:c9:6b:3d:97:f8:87:d5:80:84:
ea:a9:c7:b4:36:9b:4b:27:e2:1b:07:41:92:b4:4c:f9:db:eb:
36:18:21:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 00:24:26 2025 by rpki-client