Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/b55e40-d8be-48d9-bd55-c83007327449/1/38JgNDfvdBF_oSJy7ELCUn2oAMc.mft
File: 38JgNDfvdBF_oSJy7ELCUn2oAMc.mft (raw, json)
Hash identifier: tIklnLikY0Bn2Qtg2U4VipwKQMtjOr1AF3Sjov/5nFs=
Subject key identifier: A6:BE:39:FE:06:BD:70:84:F9:24:77:D1:90:7A:F2:54:7E:BB:96:40
Authority key identifier: DF:C2:60:34:37:EF:74:11:7F:A1:22:72:EC:42:C2:52:7D:A8:00:C7
Certificate issuer: /CN=dfc2603437ef74117fa12272ec42c2527da800c7
Certificate serial: 0197B77CCB7D9DB92D1E2790EFDC9BA31772
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/38JgNDfvdBF_oSJy7ELCUn2oAMc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/b55e40-d8be-48d9-bd55-c83007327449/1/38JgNDfvdBF_oSJy7ELCUn2oAMc.mft
Manifest number: 0EBA
Signing time: Sat 28 Jun 2025 17:01:38 +0000
Manifest this update: Sat 28 Jun 2025 17:01:38 +0000
Manifest next update: Sun 29 Jun 2025 17:01:38 +0000
Files and hashes: 1: 38JgNDfvdBF_oSJy7ELCUn2oAMc.crl (hash: 98KieOO3ylXY8k9eZ0BFGd/8wyGpYRlKHSafmy3dl2I=)
2: C6Si8_4OvkA_L0SzhzDXIdZD70Q.roa (hash: MXDhlA4OqmmtXJ3YGQ8YOTAMBcB/6855qXcMYCrv39s=)
3: VehV-DaGpdPd27h7BeCPuf7XgGU.roa (hash: sAalVTrnmg6yf8SFv/nnSyHMnXSPLWE6BdkaiXIz7ts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/b55e40-d8be-48d9-bd55-c83007327449/1/38JgNDfvdBF_oSJy7ELCUn2oAMc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/b55e40-d8be-48d9-bd55-c83007327449/1/38JgNDfvdBF_oSJy7ELCUn2oAMc.mft
rsync://rpki.ripe.net/repository/DEFAULT/38JgNDfvdBF_oSJy7ELCUn2oAMc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 17:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:cb:7d:9d:b9:2d:1e:27:90:ef:dc:9b:a3:17:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfc2603437ef74117fa12272ec42c2527da800c7
Validity
Not Before: Jun 28 17:01:38 2025 GMT
Not After : Jun 29 17:01:38 2025 GMT
Subject: CN=a6be39fe06bd7084f92477d1907af2547ebb9640
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:5b:e4:2a:78:d7:3a:d5:30:2f:ac:a0:cf:f3:
1a:67:ee:4c:6a:2e:22:f7:39:26:67:e9:00:b2:68:
56:18:56:75:f7:67:ba:cc:4d:84:e5:fd:30:bd:59:
f9:1e:e6:13:d2:82:5c:a3:7e:5e:09:5e:aa:82:26:
49:f9:67:5a:f7:ac:fd:07:ba:b8:70:ae:2d:c4:56:
0c:b1:b4:8c:a7:1c:c9:e4:87:41:49:28:39:3a:52:
25:7d:2d:34:16:35:71:91:fd:07:b0:45:07:c4:e7:
55:12:65:cf:53:7b:aa:7d:5a:79:8c:3e:b2:a7:fd:
01:03:f5:b1:f5:10:ed:a9:c1:0d:5c:d4:11:b4:59:
23:00:54:13:2d:e3:37:bd:7b:41:8d:ce:05:93:ab:
e4:e1:c2:21:fe:77:3a:41:2c:58:21:38:94:1d:37:
6e:3b:d0:56:8b:d3:8a:9c:b2:33:81:d2:1e:44:1f:
2c:34:85:87:ff:fa:b6:4d:3d:8d:93:ef:13:41:65:
45:05:5f:59:9f:85:55:8f:ec:e2:67:b8:6d:2e:87:
41:27:35:a3:81:d9:59:5c:d9:2d:d5:a4:a2:ac:18:
d8:4e:0e:b2:c7:1d:f1:fb:b6:cd:c4:6e:14:6e:75:
24:c3:44:5b:90:3e:41:f2:f2:ff:77:e8:d7:fc:ff:
01:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:BE:39:FE:06:BD:70:84:F9:24:77:D1:90:7A:F2:54:7E:BB:96:40
X509v3 Authority Key Identifier:
keyid:DF:C2:60:34:37:EF:74:11:7F:A1:22:72:EC:42:C2:52:7D:A8:00:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/38JgNDfvdBF_oSJy7ELCUn2oAMc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b55e40-d8be-48d9-bd55-c83007327449/1/38JgNDfvdBF_oSJy7ELCUn2oAMc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b55e40-d8be-48d9-bd55-c83007327449/1/38JgNDfvdBF_oSJy7ELCUn2oAMc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:27:f6:8c:82:bd:72:dd:58:4f:f3:94:b0:5d:08:e1:75:fa:
ed:67:87:a0:a5:6d:36:5e:67:09:2a:fe:70:19:99:aa:ab:0a:
ef:ee:1d:5a:d6:b7:fe:d5:b7:d5:de:4e:0c:4a:91:e3:c2:21:
b1:7e:88:44:cd:6c:44:f5:f9:e1:94:bd:d1:e1:36:1d:a0:12:
b9:b5:be:e1:30:d3:54:7e:31:c9:61:11:6a:c5:f7:f9:ab:bc:
e1:82:bc:6e:3d:08:29:03:37:70:34:25:3a:0f:6a:5e:b7:c6:
19:b5:82:6a:2b:3b:b0:70:9a:61:fe:23:00:4d:ec:da:56:fb:
a1:20:66:99:6d:22:e5:8a:45:58:4f:52:57:f4:32:6e:6f:58:
1a:9b:55:34:13:be:66:bf:f1:73:9d:60:03:76:ce:64:56:62:
71:5a:36:e0:b4:4a:ad:0f:14:aa:6c:5b:cc:a4:c1:10:7e:d9:
9b:fa:1f:09:05:f0:24:59:d7:a1:ff:da:5f:a1:f7:f1:89:42:
fa:a2:86:5c:82:f9:f4:78:e9:17:b4:83:43:fb:22:90:ac:43:
c6:5a:52:b6:03:1c:62:b1:b1:1b:1e:9f:51:f4:e0:54:4f:ab:
4b:95:60:2e:63:f0:a5:2b:b0:5d:39:2e:c4:ae:45:b0:11:55:
41:f3:09:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 01:44:32 2025 by rpki-client