Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/61ea48-3e39-41e8-b22a-6c9a825581cb/1/dGwOGnM62DO8vlCoEkSL9eCZ6V8.mft
File: dGwOGnM62DO8vlCoEkSL9eCZ6V8.mft (raw, json)
Hash identifier: l0J2pZul1Ig0YmEH2xjK/kEkmSlBR6VGqsrhU5/9grM=
Subject key identifier: CA:C7:45:7E:15:3F:97:2A:D1:2F:E9:DA:EB:B2:85:35:94:46:08:30
Authority key identifier: 74:6C:0E:1A:73:3A:D8:33:BC:BE:50:A8:12:44:8B:F5:E0:99:E9:5F
Certificate issuer: /CN=746c0e1a733ad833bcbe50a812448bf5e099e95f
Certificate serial: 0197B6A08E348DF6B97CA5FE650C5D8B0C4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dGwOGnM62DO8vlCoEkSL9eCZ6V8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/61ea48-3e39-41e8-b22a-6c9a825581cb/1/dGwOGnM62DO8vlCoEkSL9eCZ6V8.mft
Manifest number: 0A70
Signing time: Sat 28 Jun 2025 13:01:04 +0000
Manifest this update: Sat 28 Jun 2025 13:01:04 +0000
Manifest next update: Sun 29 Jun 2025 13:01:04 +0000
Files and hashes: 1: EkI17AhjtH4o6y1KK4g_wzf3KNE.roa (hash: Mqae8JvuYfzZf4ghYC7/qSTNS8cE9NEKQ8xHhpacTOs=)
2: dGwOGnM62DO8vlCoEkSL9eCZ6V8.crl (hash: 4J7xP4g3WKtMeRoOeLZ8l7CIII1wZaEoeMtCDw0AnCA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/61ea48-3e39-41e8-b22a-6c9a825581cb/1/dGwOGnM62DO8vlCoEkSL9eCZ6V8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/61ea48-3e39-41e8-b22a-6c9a825581cb/1/dGwOGnM62DO8vlCoEkSL9eCZ6V8.mft
rsync://rpki.ripe.net/repository/DEFAULT/dGwOGnM62DO8vlCoEkSL9eCZ6V8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:8e:34:8d:f6:b9:7c:a5:fe:65:0c:5d:8b:0c:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=746c0e1a733ad833bcbe50a812448bf5e099e95f
Validity
Not Before: Jun 28 13:01:04 2025 GMT
Not After : Jun 29 13:01:04 2025 GMT
Subject: CN=cac7457e153f972ad12fe9daebb2853594460830
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:5f:d5:8a:84:8f:ea:0d:94:4c:71:c6:57:3a:
79:48:ff:a0:66:4d:ee:57:f1:b4:40:79:31:74:6a:
81:48:aa:b9:ac:d5:a0:2d:4c:23:a3:29:d9:45:99:
79:c2:fd:46:c1:ce:59:2c:85:e7:e0:48:ea:46:ba:
06:c5:58:39:42:f4:ed:e9:10:7b:d5:83:b2:ce:8a:
48:36:a7:99:42:06:1b:07:88:8e:4b:f2:4e:ab:43:
14:e0:57:cc:8b:87:32:63:5a:76:0f:f1:5e:15:63:
0b:5e:69:a7:b8:69:39:76:9e:f0:14:3d:86:30:5c:
02:c0:d2:fd:24:0f:cf:b5:29:ef:07:0f:eb:4c:92:
6f:06:9b:4d:ea:ed:3d:fe:af:ed:a6:9e:29:69:cb:
41:ee:a7:79:2d:19:10:f6:52:ec:ed:1c:b1:36:45:
f6:56:ff:6e:8f:98:e7:02:df:fa:6f:3c:ee:0f:e9:
62:c2:4f:81:bf:40:6d:ee:54:b5:cf:b8:53:a2:c5:
67:cb:84:9d:89:66:67:e8:eb:3b:44:3a:54:e2:31:
f8:51:a5:9e:fa:57:d3:76:27:8a:8c:ef:c5:c4:e4:
2b:88:8b:bb:8b:89:4f:ed:c8:05:34:84:bc:95:4b:
8d:27:20:d8:7b:97:65:a6:b0:67:5b:40:5a:9a:73:
ff:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:C7:45:7E:15:3F:97:2A:D1:2F:E9:DA:EB:B2:85:35:94:46:08:30
X509v3 Authority Key Identifier:
keyid:74:6C:0E:1A:73:3A:D8:33:BC:BE:50:A8:12:44:8B:F5:E0:99:E9:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGwOGnM62DO8vlCoEkSL9eCZ6V8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/61ea48-3e39-41e8-b22a-6c9a825581cb/1/dGwOGnM62DO8vlCoEkSL9eCZ6V8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/61ea48-3e39-41e8-b22a-6c9a825581cb/1/dGwOGnM62DO8vlCoEkSL9eCZ6V8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:c9:fd:d0:ce:ea:da:97:f3:f9:3d:6b:ee:15:29:35:ca:69:
66:49:4d:1f:56:76:f7:cc:1f:95:76:42:06:6a:54:d9:89:47:
ab:55:94:32:31:47:43:f5:0e:97:e8:30:c3:f1:42:01:3b:d5:
b1:ed:35:45:b1:1f:a1:a2:e0:a7:67:2d:7e:65:bd:b2:70:84:
05:e8:64:cd:ef:a8:c1:48:72:90:66:7c:d0:e1:4f:62:fd:d3:
00:2a:10:0e:b0:dc:c2:45:6e:1c:0e:e3:a5:62:62:41:59:0a:
f2:f8:27:40:5a:46:f9:0d:0a:14:b9:8a:15:35:b3:1f:1a:9f:
4b:05:91:fe:ff:e4:77:60:20:c8:20:c0:91:c5:d9:8e:ec:6f:
5c:ea:c8:61:0f:ad:17:66:7e:49:d9:89:53:0b:c4:33:9c:33:
44:a6:27:0a:d4:5f:15:30:60:e1:5d:8f:da:c6:29:a8:7e:99:
29:72:a7:a3:2a:c6:19:bb:25:e8:b9:87:a1:8e:1e:ae:c0:01:
7d:89:dd:43:fb:b1:05:c9:4a:64:df:8e:87:6c:9a:99:74:b6:
8b:b4:30:47:8d:47:07:15:6f:10:d8:48:a7:74:c2:a2:40:16:
f0:5a:15:4e:03:bc:34:9f:7f:1a:c5:76:b5:d1:5a:92:a4:be:
1b:56:7c:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:59:30 2025 by rpki-client