Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/1f1ade-e2e6-4d73-96a9-427429fcd74c/1/DDnQStg6rB3lqYzfdiQKlzYsSsY.mft
File: DDnQStg6rB3lqYzfdiQKlzYsSsY.mft (raw, json)
Hash identifier: 4DtdeUYUbQXsNZvbLpT4rtBca7AeUqsVUbD+tP0dwFE=
Subject key identifier: EB:8E:C7:B2:EC:46:7A:DF:72:17:7A:56:AF:7A:3E:B5:4F:AF:16:57
Authority key identifier: 0C:39:D0:4A:D8:3A:AC:1D:E5:A9:8C:DF:76:24:0A:97:36:2C:4A:C6
Certificate issuer: /CN=0c39d04ad83aac1de5a98cdf76240a97362c4ac6
Certificate serial: 0197D104E2D2B53F89B9E93F895669605F1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DDnQStg6rB3lqYzfdiQKlzYsSsY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/1f1ade-e2e6-4d73-96a9-427429fcd74c/1/DDnQStg6rB3lqYzfdiQKlzYsSsY.mft
Manifest number: 02A5
Signing time: Thu 03 Jul 2025 16:00:47 +0000
Manifest this update: Thu 03 Jul 2025 16:00:47 +0000
Manifest next update: Fri 04 Jul 2025 16:00:47 +0000
Files and hashes: 1: DDnQStg6rB3lqYzfdiQKlzYsSsY.crl (hash: rXws7BGXQjMehLZvtBKpd0FCrfUPeTjjjJkdb8wDyco=)
2: NOYTh7ZlTxAFEDHg6RZrbrrgktU.roa (hash: tsOnlXCMm1Zkvk7dgvDTsJOertYGX+iBxLbtlWab/tk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/1f1ade-e2e6-4d73-96a9-427429fcd74c/1/DDnQStg6rB3lqYzfdiQKlzYsSsY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/1f1ade-e2e6-4d73-96a9-427429fcd74c/1/DDnQStg6rB3lqYzfdiQKlzYsSsY.mft
rsync://rpki.ripe.net/repository/DEFAULT/DDnQStg6rB3lqYzfdiQKlzYsSsY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 14:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d1:04:e2:d2:b5:3f:89:b9:e9:3f:89:56:69:60:5f:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c39d04ad83aac1de5a98cdf76240a97362c4ac6
Validity
Not Before: Jul 3 16:00:47 2025 GMT
Not After : Jul 4 16:00:47 2025 GMT
Subject: CN=eb8ec7b2ec467adf72177a56af7a3eb54faf1657
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:60:f3:68:5b:f2:e2:86:89:8b:18:6e:bf:e5:
11:9d:18:d3:6d:c5:65:b8:5c:e6:17:38:7d:bf:f9:
19:d3:af:46:b0:8d:ed:b0:84:bf:8e:37:23:ac:2d:
07:e2:c2:be:dc:1f:f1:3f:b2:4c:96:60:e2:03:98:
5c:1e:3c:cd:78:1f:49:43:2a:85:d3:64:4c:c9:46:
59:56:e9:15:f5:42:08:7f:0c:d6:aa:a4:32:01:21:
7c:d3:47:84:02:1f:57:12:69:f4:b2:3c:63:db:2f:
bb:50:3b:c6:83:2e:0a:f2:85:d6:44:a3:27:2d:89:
54:37:fb:7b:e2:3d:79:b0:82:cc:e2:b0:75:a4:3f:
c3:10:0a:81:4b:0b:10:e0:d5:5a:9b:f2:0d:db:1d:
e4:09:28:3b:73:0f:ac:04:be:00:0a:04:cd:c1:46:
b8:bd:89:19:03:31:82:33:99:0b:24:e6:4d:89:a6:
66:d1:9f:1c:d9:b8:28:f4:c1:cb:9f:66:28:07:fb:
d7:b7:04:cd:1d:1e:24:b3:7f:0f:01:0f:57:94:54:
82:66:f2:7b:0b:e6:16:62:d1:67:40:2a:20:1f:b1:
1d:ab:1f:cb:7d:b1:14:c2:c1:77:40:21:6b:85:fa:
74:97:07:2f:97:a8:1c:00:56:c6:6c:1e:a1:91:ea:
24:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:8E:C7:B2:EC:46:7A:DF:72:17:7A:56:AF:7A:3E:B5:4F:AF:16:57
X509v3 Authority Key Identifier:
keyid:0C:39:D0:4A:D8:3A:AC:1D:E5:A9:8C:DF:76:24:0A:97:36:2C:4A:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DDnQStg6rB3lqYzfdiQKlzYsSsY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/1f1ade-e2e6-4d73-96a9-427429fcd74c/1/DDnQStg6rB3lqYzfdiQKlzYsSsY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/1f1ade-e2e6-4d73-96a9-427429fcd74c/1/DDnQStg6rB3lqYzfdiQKlzYsSsY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:68:cd:0f:84:d1:09:fc:48:ea:88:ac:93:3c:2f:0e:4f:f0:
4d:18:3f:a9:de:fd:46:02:1a:3c:74:92:73:fe:ea:ff:85:ed:
2f:6b:86:50:81:8c:3a:ef:97:ef:7e:2c:a5:cb:94:0f:93:a2:
0f:58:57:f0:32:cc:7f:40:dd:06:43:8f:98:c8:90:07:45:8c:
ed:d0:91:e2:4a:5d:e6:eb:74:0c:4f:9b:5b:49:50:09:46:e8:
85:44:76:a6:e7:8e:bb:ba:e1:1c:89:d8:fc:e9:2e:1a:60:34:
0f:5b:64:ed:c6:ff:bb:4f:b8:a3:8c:a1:26:a9:c3:05:b4:b5:
77:50:6d:0f:43:14:87:55:13:e7:25:2f:5f:a1:46:d7:af:ed:
ef:40:62:72:10:24:d1:9f:fc:aa:6a:ae:f3:ba:94:0a:10:26:
2c:92:8b:01:f0:28:14:c7:b9:78:b0:10:d9:0b:af:3d:ab:b5:
4c:d7:2a:a1:1a:ea:df:3b:82:c4:a7:7b:74:1f:ae:0e:a1:f6:
ba:61:c8:35:2c:78:84:c3:db:af:c6:ec:ab:8c:76:af:ed:89:
a5:17:dd:0d:8b:9e:28:f9:16:73:d9:80:ab:d7:75:ac:0e:0e:
d3:60:00:cf:1f:a3:f6:ce:c7:67:66:6f:18:67:ce:ac:ac:b3:
58:fd:21:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 23:51:39 2025 by rpki-client