Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/b5939b-daa7-4f47-9873-64a27e977fd9/1/Dr1fVJBe6OTSgwxs9Q9g0mQgGpM.mft
File: Dr1fVJBe6OTSgwxs9Q9g0mQgGpM.mft (raw, json)
Hash identifier: Q6ZcFO3D/lzTVJ5JFoOAkcAijGSkNUPMcmooW9s84QQ=
Subject key identifier: 47:FC:12:21:E1:41:DC:3F:DE:ED:20:18:5F:71:8A:86:4E:1E:15:88
Authority key identifier: 0E:BD:5F:54:90:5E:E8:E4:D2:83:0C:6C:F5:0F:60:D2:64:20:1A:93
Certificate issuer: /CN=0ebd5f54905ee8e4d2830c6cf50f60d264201a93
Certificate serial: 0197B6A085FFC20B6AA6C8CCD7CF82E98D6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dr1fVJBe6OTSgwxs9Q9g0mQgGpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/b5939b-daa7-4f47-9873-64a27e977fd9/1/Dr1fVJBe6OTSgwxs9Q9g0mQgGpM.mft
Manifest number: 09F4
Signing time: Sat 28 Jun 2025 13:01:02 +0000
Manifest this update: Sat 28 Jun 2025 13:01:02 +0000
Manifest next update: Sun 29 Jun 2025 13:01:02 +0000
Files and hashes: 1: Dr1fVJBe6OTSgwxs9Q9g0mQgGpM.crl (hash: gNCQis9RUx7djokzx6/LOoAR5BgOvGt23bPpCNlnfxY=)
2: j5fTeizLnlg0u2Mo-sXKcy6aHzU.roa (hash: N7eKHafDgm+sPu3JQlpm/bB7Ce1uPT9byBM0H76oyj4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/b5939b-daa7-4f47-9873-64a27e977fd9/1/Dr1fVJBe6OTSgwxs9Q9g0mQgGpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/b5939b-daa7-4f47-9873-64a27e977fd9/1/Dr1fVJBe6OTSgwxs9Q9g0mQgGpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dr1fVJBe6OTSgwxs9Q9g0mQgGpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:85:ff:c2:0b:6a:a6:c8:cc:d7:cf:82:e9:8d:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ebd5f54905ee8e4d2830c6cf50f60d264201a93
Validity
Not Before: Jun 28 13:01:02 2025 GMT
Not After : Jun 29 13:01:02 2025 GMT
Subject: CN=47fc1221e141dc3fdeed20185f718a864e1e1588
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:dd:04:c9:d0:e3:68:a7:8d:11:95:ce:1d:fb:
3d:55:39:41:4d:fc:e4:d5:5a:e8:1d:53:dc:d3:10:
41:33:33:86:25:7e:90:74:f9:68:6a:e5:7c:ea:af:
3f:e2:dd:c7:95:8e:39:0f:87:64:82:eb:aa:a2:72:
75:de:97:73:57:2a:63:1a:0d:71:2a:66:5a:0f:13:
06:32:04:da:0b:b7:00:5e:ba:8b:97:26:31:a5:20:
b2:0d:b6:ba:8b:a8:cd:3e:1c:36:0d:95:42:a8:11:
7c:1b:47:72:fd:01:09:84:ce:01:4a:73:e9:42:e8:
c3:7f:ad:83:1a:23:c8:0d:3f:c0:1a:95:0c:a4:0f:
02:3f:0d:a9:0b:63:0e:24:23:e8:c5:9b:86:75:13:
b4:53:83:c1:30:11:30:6c:5a:bc:f0:4a:5f:8a:9f:
6c:b7:ad:fd:4e:3d:86:bd:6a:38:db:b3:ce:65:26:
47:ca:67:7c:98:ab:71:42:9b:30:14:90:96:ee:8c:
6e:e4:ee:8b:f3:f7:04:f9:78:d1:44:5d:7d:a3:d5:
ba:1b:07:58:91:e5:c2:3d:e4:ce:f8:20:7d:20:59:
b9:01:d2:da:b3:37:33:63:3f:ab:6c:0f:0e:17:c5:
74:6e:ec:03:1a:37:e1:68:b7:06:f4:19:18:ce:a1:
16:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:FC:12:21:E1:41:DC:3F:DE:ED:20:18:5F:71:8A:86:4E:1E:15:88
X509v3 Authority Key Identifier:
keyid:0E:BD:5F:54:90:5E:E8:E4:D2:83:0C:6C:F5:0F:60:D2:64:20:1A:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dr1fVJBe6OTSgwxs9Q9g0mQgGpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b5939b-daa7-4f47-9873-64a27e977fd9/1/Dr1fVJBe6OTSgwxs9Q9g0mQgGpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b5939b-daa7-4f47-9873-64a27e977fd9/1/Dr1fVJBe6OTSgwxs9Q9g0mQgGpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:bc:21:97:7e:18:f6:9a:67:fb:2d:c7:7f:2d:4e:2a:43:13:
03:1f:14:aa:57:be:8e:5e:43:6e:13:1d:31:40:9c:de:66:cd:
26:2a:fb:dd:6b:5a:ee:0e:6e:31:87:48:48:21:8f:23:60:6f:
e1:fc:b4:18:96:f5:34:e2:69:42:4e:ad:1c:dc:84:ba:2d:b2:
d1:78:a9:85:2a:f0:9e:e3:cc:03:50:71:19:53:80:b7:a7:fc:
6a:a7:63:53:af:54:42:02:c9:c3:dd:07:6b:a7:cd:6f:de:a4:
2f:cc:f9:cb:98:fe:e0:29:a0:bb:8f:5d:e6:5d:3b:29:60:de:
74:b8:2a:7c:45:94:a5:7d:00:ce:90:f5:15:02:da:84:66:10:
92:a0:45:98:ce:96:4e:cc:70:ae:32:b6:db:0a:fa:e8:5a:26:
00:de:a9:ac:cf:7f:c6:b5:0b:15:33:41:ab:ce:20:85:01:dd:
b8:f2:15:49:83:07:c9:bf:88:89:e9:4b:b2:30:e0:0e:38:34:
87:1d:67:af:c8:83:43:10:a6:eb:67:12:94:0c:3d:c6:09:2f:
fd:80:0e:73:f0:f4:fd:9c:e2:71:28:e0:a7:9d:d6:ba:b7:61:
e1:aa:7e:46:fe:b4:01:43:6b:ab:d3:7f:0b:07:e0:55:fa:c0:
a2:12:7e:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:52:34 2025 by rpki-client