Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/d29d3f-1696-4ed4-96d2-e7eb817ede30/1/Da7a5Z2cmvUe9UivsMlkOM73IRw.mft
File: Da7a5Z2cmvUe9UivsMlkOM73IRw.mft (raw, json)
Hash identifier: 6aBYr9xiEvoVKeUIjIc9vLhqYFxb6ShWn1aHbmtlJoY=
Subject key identifier: 9F:17:27:03:ED:A0:EC:58:D5:4A:B2:E8:B0:F8:75:65:99:A3:12:2D
Authority key identifier: 0D:AE:DA:E5:9D:9C:9A:F5:1E:F5:48:AF:B0:C9:64:38:CE:F7:21:1C
Certificate issuer: /CN=0daedae59d9c9af51ef548afb0c96438cef7211c
Certificate serial: 01976FD1128E0E2AEFAA3838045D8E3724C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Da7a5Z2cmvUe9UivsMlkOM73IRw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/d29d3f-1696-4ed4-96d2-e7eb817ede30/1/Da7a5Z2cmvUe9UivsMlkOM73IRw.mft
Manifest number: 158D
Signing time: Sat 14 Jun 2025 19:01:02 +0000
Manifest this update: Sat 14 Jun 2025 19:01:02 +0000
Manifest next update: Sun 15 Jun 2025 19:01:02 +0000
Files and hashes: 1: Da7a5Z2cmvUe9UivsMlkOM73IRw.crl (hash: HIQ9acXTif/OMn5SwKhwzeoiS5TEraCL3pDsBmNVpXA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/d29d3f-1696-4ed4-96d2-e7eb817ede30/1/Da7a5Z2cmvUe9UivsMlkOM73IRw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/d29d3f-1696-4ed4-96d2-e7eb817ede30/1/Da7a5Z2cmvUe9UivsMlkOM73IRw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Da7a5Z2cmvUe9UivsMlkOM73IRw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:d1:12:8e:0e:2a:ef:aa:38:38:04:5d:8e:37:24:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0daedae59d9c9af51ef548afb0c96438cef7211c
Validity
Not Before: Jun 14 19:01:02 2025 GMT
Not After : Jun 15 19:01:02 2025 GMT
Subject: CN=9f172703eda0ec58d54ab2e8b0f8756599a3122d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:60:5c:47:fe:d4:6d:62:94:82:10:df:3b:70:
50:b2:db:e8:d9:ad:00:e2:a8:89:e0:5d:28:1a:2e:
b5:38:cf:85:9d:59:90:c3:cd:fa:7c:8e:8b:3e:a4:
9e:d9:c5:7a:f9:b4:32:a0:44:27:97:b0:96:f3:cc:
37:75:74:c2:2f:10:48:5d:38:ad:de:92:83:c5:06:
1a:d7:51:52:35:4e:40:0c:12:28:28:43:77:03:5e:
d5:b3:16:62:c1:05:0d:72:f7:32:5a:46:74:54:57:
f3:6a:5b:dc:e4:f7:79:4c:8d:9b:b7:70:34:cd:35:
c8:ab:23:fc:42:b7:4d:70:7a:d2:9c:2d:fc:36:bb:
cb:c3:95:e7:41:57:f4:84:07:0f:ca:fd:9c:e4:13:
2b:4d:f9:d5:18:a7:8f:bc:98:3c:d7:be:84:e6:84:
f3:e1:5e:fd:71:41:40:a2:42:fe:0e:71:2a:68:5e:
fa:e4:80:a5:f3:ca:57:aa:a7:b7:1d:48:0d:f5:88:
c7:4a:5d:27:68:5a:0d:58:3b:10:ad:5b:d9:17:6d:
87:03:5e:da:4e:22:7f:a9:c8:05:31:52:c3:af:42:
0b:6f:c5:34:62:2e:fa:71:87:3d:3b:ae:ba:06:1f:
f9:1e:0a:cb:30:15:53:d7:64:c3:e0:55:42:c3:07:
a7:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:17:27:03:ED:A0:EC:58:D5:4A:B2:E8:B0:F8:75:65:99:A3:12:2D
X509v3 Authority Key Identifier:
keyid:0D:AE:DA:E5:9D:9C:9A:F5:1E:F5:48:AF:B0:C9:64:38:CE:F7:21:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Da7a5Z2cmvUe9UivsMlkOM73IRw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d29d3f-1696-4ed4-96d2-e7eb817ede30/1/Da7a5Z2cmvUe9UivsMlkOM73IRw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d29d3f-1696-4ed4-96d2-e7eb817ede30/1/Da7a5Z2cmvUe9UivsMlkOM73IRw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:af:58:60:be:2c:80:b8:50:38:f1:6e:e5:ad:ff:41:8e:cd:
7b:75:ce:27:73:8b:b8:b0:c6:f0:00:53:d3:68:55:cb:75:40:
54:d9:5f:81:c3:9a:e6:4b:9b:c4:77:67:03:1c:eb:6d:f2:9f:
64:b3:2f:1c:fd:98:62:62:59:d6:ab:59:f5:d3:21:14:ff:ab:
f4:d2:89:9a:36:6d:76:0d:95:ba:29:65:0d:22:17:fe:e1:a5:
30:4d:82:a8:72:13:05:32:f3:19:e4:d4:bd:a5:25:de:2a:7e:
10:25:59:8f:ea:2b:a5:a9:79:71:5d:34:41:d4:41:23:50:d4:
be:26:b0:7f:91:84:ce:e5:a3:3c:64:e7:63:42:83:69:2c:88:
0d:46:ff:75:5c:76:1b:79:46:d3:90:ab:62:ea:bd:b5:7a:f6:
03:e4:a2:27:13:6d:51:13:14:3c:4d:b6:6f:af:8a:dc:9c:31:
d6:26:ca:83:34:49:a0:c0:3d:a6:98:07:01:a6:f3:35:b9:84:
51:7a:6d:95:4e:1e:05:3b:ea:5a:cb:44:ce:3b:66:c4:37:e9:
b6:62:0c:51:dc:78:55:b7:a2:ba:18:59:11:c2:d6:1c:3b:d3:
e4:2e:94:7f:c3:6f:18:a1:7d:e3:39:b1:1b:b6:75:05:32:1f:
de:01:f2:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 00:02:05 2025 by rpki-client