Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/6160c9-d2e5-439c-a25a-5d8700f65a38/1/D-qK4ZBhrMVImsJxkIKs6lovxdM.mft
File: D-qK4ZBhrMVImsJxkIKs6lovxdM.mft (raw, json)
Hash identifier: QObxUzMTvzSI/XWZsIm7DK0OpfSurhAxh0MbmmHklv0=
Subject key identifier: EE:CB:B2:22:00:2D:2C:59:EC:FE:A2:F3:4D:F7:F0:87:12:FF:A3:EB
Authority key identifier: 0F:EA:8A:E1:90:61:AC:C5:48:9A:C2:71:90:82:AC:EA:5A:2F:C5:D3
Certificate issuer: /CN=0fea8ae19061acc5489ac2719082acea5a2fc5d3
Certificate serial: 0197B6A110180D13B6E5F47C31398E284E6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D-qK4ZBhrMVImsJxkIKs6lovxdM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/6160c9-d2e5-439c-a25a-5d8700f65a38/1/D-qK4ZBhrMVImsJxkIKs6lovxdM.mft
Manifest number: 087E
Signing time: Sat 28 Jun 2025 13:01:37 +0000
Manifest this update: Sat 28 Jun 2025 13:01:37 +0000
Manifest next update: Sun 29 Jun 2025 13:01:37 +0000
Files and hashes: 1: D-qK4ZBhrMVImsJxkIKs6lovxdM.crl (hash: yVm1E5SkUwibl6jHVdG2qmuTBSTzmYaxu4P3PSVOLdw=)
2: M10vf4QxH5-zWTvsa4ILhkuyN0k.roa (hash: ddpmJOxtLixoYeVKM1qcWIIFhN7ghewh8wxesIUHdzI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/6160c9-d2e5-439c-a25a-5d8700f65a38/1/D-qK4ZBhrMVImsJxkIKs6lovxdM.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/6160c9-d2e5-439c-a25a-5d8700f65a38/1/D-qK4ZBhrMVImsJxkIKs6lovxdM.mft
rsync://rpki.ripe.net/repository/DEFAULT/D-qK4ZBhrMVImsJxkIKs6lovxdM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:10:18:0d:13:b6:e5:f4:7c:31:39:8e:28:4e:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fea8ae19061acc5489ac2719082acea5a2fc5d3
Validity
Not Before: Jun 28 13:01:37 2025 GMT
Not After : Jun 29 13:01:37 2025 GMT
Subject: CN=eecbb222002d2c59ecfea2f34df7f08712ffa3eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:6e:f0:5b:7b:86:26:a9:4a:96:e0:7f:0b:f9:
61:62:48:d0:42:1a:81:90:56:91:64:fd:ef:65:55:
0b:76:9e:2d:e6:47:d4:73:ca:9d:4c:1d:6d:9d:ec:
73:b6:1a:c2:12:94:57:95:21:41:42:9b:01:83:44:
fd:b6:93:b4:c8:73:89:03:90:39:a4:6c:3e:b6:6b:
c2:ec:00:fa:da:03:f3:ee:81:d9:8f:fc:63:19:b5:
0b:a7:6e:fc:20:fd:a4:d4:78:be:5a:8f:c6:2c:fd:
c9:57:44:7d:31:97:55:5b:55:96:7d:a0:49:f8:54:
aa:8a:c9:34:14:f6:91:1b:86:af:68:01:52:81:16:
8a:eb:77:80:38:3c:b6:ea:5c:7c:ac:bf:78:46:b8:
6d:d3:1a:5a:fd:0b:6d:ce:7c:8a:b5:dc:d3:b8:97:
80:55:b6:2a:34:65:86:94:db:b5:e1:9f:ce:7b:b4:
a2:4b:5e:5c:ea:83:1c:91:6f:a9:93:6e:46:4e:a2:
b4:47:c6:42:0b:36:4b:a5:f0:e2:22:5a:1c:23:c4:
6a:af:60:51:bd:ec:e7:c2:6d:78:d6:40:29:36:4f:
16:41:78:63:b5:01:b8:3c:da:42:70:cd:75:47:ab:
18:16:69:ed:aa:98:9e:e8:25:76:68:36:b4:90:e4:
2c:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:CB:B2:22:00:2D:2C:59:EC:FE:A2:F3:4D:F7:F0:87:12:FF:A3:EB
X509v3 Authority Key Identifier:
keyid:0F:EA:8A:E1:90:61:AC:C5:48:9A:C2:71:90:82:AC:EA:5A:2F:C5:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D-qK4ZBhrMVImsJxkIKs6lovxdM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/6160c9-d2e5-439c-a25a-5d8700f65a38/1/D-qK4ZBhrMVImsJxkIKs6lovxdM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/6160c9-d2e5-439c-a25a-5d8700f65a38/1/D-qK4ZBhrMVImsJxkIKs6lovxdM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:e5:4a:25:29:d0:36:8b:ad:fa:c6:89:9b:33:99:88:de:30:
bd:22:93:80:94:4c:22:97:88:46:ef:84:a2:98:da:4a:33:c0:
68:58:df:95:56:54:92:f7:ea:f9:de:ed:62:83:17:2d:75:7e:
6b:6f:49:79:74:1c:bd:36:61:40:e0:da:a0:b3:ed:9d:9b:81:
6a:2e:63:a6:4c:63:67:d3:0c:bf:cb:2d:0b:d0:07:26:12:87:
73:b7:5c:e8:e5:47:43:40:a4:b5:61:be:0a:f5:8c:c1:0c:23:
12:00:3c:06:94:34:b5:11:82:e3:a1:ef:08:f5:29:db:26:e6:
96:10:5b:a8:10:44:7e:97:f0:fe:0e:97:ce:0b:9f:84:4c:94:
1c:4e:ee:3f:b7:0b:1b:10:1f:c0:04:75:31:af:7a:75:25:93:
84:2e:95:93:9c:b8:45:80:6d:30:d0:fd:89:47:9b:bd:76:5d:
2d:f7:4b:55:a1:d4:2e:a0:84:28:99:f2:b9:2b:93:cd:82:c3:
07:d0:42:e6:5e:ee:6a:3c:4b:8d:8a:69:aa:16:b4:51:b3:ae:
a1:3d:09:e4:05:53:4f:33:2c:c0:29:0d:b7:ad:3f:ad:30:07:
87:d3:1a:70:33:45:54:16:1f:b0:13:ad:5c:64:73:70:84:0d:
18:7a:c9:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:58:01 2025 by rpki-client