Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/bea9db-1b92-44cb-8fd3-bdbe5b7a7680/1/dbciFa46YYMFwSMUKzSd8mZyoU0.mft
File: dbciFa46YYMFwSMUKzSd8mZyoU0.mft (raw, json)
Hash identifier: ogFw9ojDKFf8pkLcEv9Jj2ttaAm3cFk6BGTyn6GpViQ=
Subject key identifier: 79:15:81:E3:F0:AB:24:89:04:56:B1:9D:A9:A2:F3:24:29:48:49:A8
Authority key identifier: 75:B7:22:15:AE:3A:61:83:05:C1:23:14:2B:34:9D:F2:66:72:A1:4D
Certificate issuer: /CN=75b72215ae3a618305c123142b349df26672a14d
Certificate serial: 01976929C91B67954576FD2F0DFB41530F4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dbciFa46YYMFwSMUKzSd8mZyoU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/bea9db-1b92-44cb-8fd3-bdbe5b7a7680/1/dbciFa46YYMFwSMUKzSd8mZyoU0.mft
Manifest number: 027E
Signing time: Fri 13 Jun 2025 12:00:35 +0000
Manifest this update: Fri 13 Jun 2025 12:00:35 +0000
Manifest next update: Sat 14 Jun 2025 12:00:35 +0000
Files and hashes: 1: dbciFa46YYMFwSMUKzSd8mZyoU0.crl (hash: eYxriL4chp+ycb5ZMwi9yapVzgj7aOryzbtNtu8jvtI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/bea9db-1b92-44cb-8fd3-bdbe5b7a7680/1/dbciFa46YYMFwSMUKzSd8mZyoU0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/bea9db-1b92-44cb-8fd3-bdbe5b7a7680/1/dbciFa46YYMFwSMUKzSd8mZyoU0.mft
rsync://rpki.ripe.net/repository/DEFAULT/dbciFa46YYMFwSMUKzSd8mZyoU0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 12:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:29:c9:1b:67:95:45:76:fd:2f:0d:fb:41:53:0f:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75b72215ae3a618305c123142b349df26672a14d
Validity
Not Before: Jun 13 12:00:35 2025 GMT
Not After : Jun 14 12:00:35 2025 GMT
Subject: CN=791581e3f0ab24890456b19da9a2f324294849a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:8d:78:b2:ec:81:90:3d:84:f8:55:86:bf:44:
56:ed:68:ce:3e:16:e9:2a:f9:5a:4d:c7:64:23:2a:
f0:c2:98:02:9d:f4:69:73:7a:4b:a8:a1:ce:b4:ac:
77:df:59:07:d5:af:d0:24:ab:db:cf:d4:72:c6:19:
2f:1f:fd:50:95:4c:36:ff:af:c2:ac:ba:8c:b9:59:
d0:13:21:d5:20:37:8c:30:ee:08:01:28:c5:4c:95:
f4:07:c3:9f:e7:aa:f0:b0:45:55:10:a3:16:de:54:
b6:14:ef:49:6d:de:ce:d2:2a:d7:68:17:df:fb:cf:
76:70:f3:d0:79:f5:cb:8f:fe:58:3d:1b:da:10:7a:
1e:de:0f:99:a5:c7:33:8f:03:12:85:1d:2e:0b:7e:
1b:3c:4e:1d:8c:c9:51:a4:cc:9b:49:2a:21:5e:64:
a5:8c:11:11:14:0a:e9:b5:84:d0:7c:a7:c2:62:01:
d4:35:b4:18:26:3b:fc:bf:d7:de:0c:91:70:66:01:
88:fd:2f:88:bd:4c:28:58:56:20:e3:f5:9a:a2:f7:
c7:64:44:0c:4f:b2:fd:8b:24:df:c9:80:c0:d7:fc:
13:20:1f:9e:98:61:d8:3a:b4:63:4c:1c:d1:5d:4b:
3b:b8:f4:cb:57:40:e0:8d:73:92:04:65:01:b0:a6:
06:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:15:81:E3:F0:AB:24:89:04:56:B1:9D:A9:A2:F3:24:29:48:49:A8
X509v3 Authority Key Identifier:
keyid:75:B7:22:15:AE:3A:61:83:05:C1:23:14:2B:34:9D:F2:66:72:A1:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dbciFa46YYMFwSMUKzSd8mZyoU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/bea9db-1b92-44cb-8fd3-bdbe5b7a7680/1/dbciFa46YYMFwSMUKzSd8mZyoU0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/bea9db-1b92-44cb-8fd3-bdbe5b7a7680/1/dbciFa46YYMFwSMUKzSd8mZyoU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:c9:0d:4f:d2:61:02:da:41:82:47:21:e8:3b:c2:a8:3d:84:
5a:84:c1:74:a7:34:5e:eb:8a:43:eb:e3:ee:ff:b8:33:9a:0c:
a6:7e:e2:74:7b:79:4e:8e:4a:e7:ff:f7:89:f3:5b:72:41:1b:
d3:0b:77:8a:56:67:ed:12:d2:e5:55:4e:38:1d:33:7d:50:4e:
37:83:1d:5e:bc:01:d0:9d:cc:85:b6:ee:cf:df:07:9f:a2:57:
eb:98:ed:6c:6d:93:fd:77:37:5d:07:4f:d9:d0:d9:24:4a:ef:
f6:46:b3:07:3b:bb:7b:bd:f2:32:14:26:6e:45:37:a9:69:e1:
7f:46:c5:16:a9:ec:e3:21:05:e8:28:9c:a5:a0:8f:51:69:1b:
7f:96:11:f3:3b:97:79:1c:bc:e0:d9:22:93:9d:6d:11:a4:72:
9e:9f:2e:1e:74:55:f7:bf:01:e8:eb:8e:cd:af:b8:03:da:ec:
5a:a2:55:95:ba:3b:79:69:a2:e4:21:c2:57:fa:51:01:59:58:
4d:84:82:07:02:aa:dc:cb:97:5c:9c:54:f5:5b:75:fb:57:c1:
b0:59:ab:0f:6d:d7:90:fa:0b:56:32:a9:64:21:63:00:f5:44:
96:21:ab:5d:49:04:66:75:36:40:ba:04:6b:af:dd:8c:7d:6b:
71:21:f3:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:03:28 2025 by rpki-client