Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.mft
File: dn871L-9MHHDjNTXCSvTSQkgw9k.mft (raw, json)
Hash identifier: 4KxUfG24pGjBkQ2Cf2kgEo3L5q98zZ63ceMbDpPZebU=
Subject key identifier: 37:F0:09:FF:C0:D6:9B:C9:74:DF:E2:C6:D7:67:DB:AD:7D:BC:67:2F
Authority key identifier: 76:7F:3B:D4:BF:BD:30:71:C3:8C:D4:D7:09:2B:D3:49:09:20:C3:D9
Certificate issuer: /CN=767f3bd4bfbd3071c38cd4d7092bd3490920c3d9
Certificate serial: 0197B82140FCBCE9723C30D35A0B8C92FD40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.mft
Manifest number: 0FA1
Signing time: Sat 28 Jun 2025 20:01:16 +0000
Manifest this update: Sat 28 Jun 2025 20:01:16 +0000
Manifest next update: Sun 29 Jun 2025 20:01:16 +0000
Files and hashes: 1: BlZTyn453CV0yZnKwe_T35RBLj8.roa (hash: PAa8WNraC9MFUR+BnYs7v6ED2lFQD5yfvCpmA0N6q0g=)
2: UDoseI4zszDcDoPnMdfmZguRd1g.roa (hash: VWwS6jcqEeePHwTnYZpbdNRT6bmACcXJEdqIR68HwbA=)
3: XeENoq2HuB6omGApVd7MyU5r1TA.roa (hash: epvaDIj9ho9XW3OqF0eBT6eF6xWMid+XMsTU4k7CI2s=)
4: Yrj8M2QKm85FgqezvTNKupJvfRM.roa (hash: 19NO01gkKNfH49H88V9pcdpwsCQD2Y7XMbrn6a7gp8I=)
5: dcRF9U3L6DhFSWTZEdsiTMS3P2o.roa (hash: ES6jEJ/RK/dO83oihrvVXwCUZSvWJGm8C1RK/nM0bYI=)
6: dn871L-9MHHDjNTXCSvTSQkgw9k.crl (hash: falgIONhhj24Zkvy8V+/TLBpDx8CR6fXYIcn/3SMxBA=)
7: eaH07OW5KOtKpWvHksqObMQWq4E.roa (hash: /p/ujtYI0LrIojxA4eFgMakt3BjMBgIlLRM6Y1JhEgo=)
8: fKdatG9WcJc5WVUN6pdVKIOjMnQ.roa (hash: kqSOLzeO/Lml0iGRyiBotGsiuI6Y4hQbc4VPC8laBE4=)
9: saRTVdpqQA0OCzsMYir3B6BlFes.roa (hash: nWaisSWXPPt/Ku1COahUOFAKdzpunAhgMbmaca4maXE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:21:40:fc:bc:e9:72:3c:30:d3:5a:0b:8c:92:fd:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767f3bd4bfbd3071c38cd4d7092bd3490920c3d9
Validity
Not Before: Jun 28 20:01:16 2025 GMT
Not After : Jun 29 20:01:16 2025 GMT
Subject: CN=37f009ffc0d69bc974dfe2c6d767dbad7dbc672f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:c1:3e:43:5f:3b:66:75:7e:6d:0d:b5:11:ed:
29:63:fd:6d:82:17:8f:4c:4b:77:cc:28:68:84:9b:
d8:1b:ce:76:e9:1c:a5:31:ef:28:a2:95:3d:87:f6:
7a:f5:f3:50:52:5a:a1:55:16:58:16:73:5b:42:7a:
9d:22:bc:df:06:26:7e:ba:d6:6c:ec:c6:cd:ff:f2:
b9:df:25:b2:15:5e:1d:07:4a:94:cf:90:7a:e9:24:
e9:2f:a4:e9:7c:f7:65:5e:3a:96:11:2b:7f:e4:06:
da:05:ba:5f:4f:8c:4e:bf:cd:c4:0d:49:3e:4f:a5:
30:f0:e8:43:c9:2c:68:f0:e2:76:84:c4:bc:2b:d6:
ed:d7:4f:56:bd:45:a0:da:ee:b5:4f:58:33:f3:e4:
6a:38:08:aa:0a:42:f5:1b:a0:53:7c:6d:a4:b1:71:
ee:a6:2e:5b:b5:31:df:44:bc:55:19:7e:26:40:94:
6a:ea:c2:9d:2f:55:96:cf:e1:84:fa:f5:a0:92:b4:
40:ff:9c:a5:5e:00:ff:19:30:56:41:ab:39:50:13:
b5:a6:03:32:41:1d:06:db:d6:6d:0d:aa:2a:1e:32:
aa:75:d1:88:30:4f:fd:e3:53:ab:e3:2e:72:d4:65:
97:54:4a:3c:ee:c7:77:e8:45:ba:fd:b1:f8:ce:3c:
e3:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:F0:09:FF:C0:D6:9B:C9:74:DF:E2:C6:D7:67:DB:AD:7D:BC:67:2F
X509v3 Authority Key Identifier:
keyid:76:7F:3B:D4:BF:BD:30:71:C3:8C:D4:D7:09:2B:D3:49:09:20:C3:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:e1:38:50:ce:e4:d6:2f:3f:f1:47:8b:f6:a1:91:05:7b:5c:
7b:21:05:31:e1:b3:55:2d:59:ca:91:36:52:c1:6b:4f:d2:24:
f7:d1:73:83:95:f0:35:35:f2:96:5c:a9:6e:77:06:ed:ed:59:
63:c0:72:7a:9b:36:24:23:40:70:12:1e:2b:f7:ec:43:e9:c2:
5d:22:7d:89:2e:df:d7:2a:dc:8d:5d:2d:c8:b0:bb:00:e8:f6:
46:db:91:20:ab:b1:aa:e4:3f:ba:b7:5e:17:8c:09:f2:fc:39:
88:e9:2e:2a:7c:ab:ee:cd:5c:41:c3:85:2b:77:cf:38:0a:d4:
d2:5f:3a:fb:ad:79:68:84:8d:6b:0f:56:ef:12:e1:2e:44:d0:
a8:5a:a4:82:1e:ea:ca:17:29:3e:16:38:e7:b3:fd:6a:57:82:
d5:3c:9b:6e:9f:46:e1:3d:f8:d8:c2:e7:28:d3:0f:e3:99:59:
7a:ea:65:c9:68:20:81:19:d3:29:18:e6:32:e3:37:79:be:08:
ca:89:42:14:52:99:e5:e7:c7:5e:87:8a:1a:74:fc:04:c2:5f:
da:95:0c:0e:c5:45:ef:c8:b8:5f:7d:8b:6b:ab:32:d5:51:24:
ed:de:f9:fd:51:8c:12:3e:39:39:97:0f:86:65:2f:78:62:d8:
43:45:c8:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:33:11 2025 by rpki-client