Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/1d2ef8-a86e-446f-8c35-b833bd9e0b3a/1/DWnj7lXdhiZ01FhmG6NJCLBhf6E.mft
File: DWnj7lXdhiZ01FhmG6NJCLBhf6E.mft (raw, json)
Hash identifier: dfvFFRRKM37D5zRQqiAhuDN/eoNl/k4BR8On6Fpkcd0=
Subject key identifier: 77:F5:C3:3B:F8:D2:3C:47:5B:C9:99:CE:81:D6:CC:ED:D6:38:3A:97
Authority key identifier: 0D:69:E3:EE:55:DD:86:26:74:D4:58:66:1B:A3:49:08:B0:61:7F:A1
Certificate issuer: /CN=0d69e3ee55dd862674d458661ba34908b0617fa1
Certificate serial: 0197B6A0BCD065424342B95BDFBF23065553
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DWnj7lXdhiZ01FhmG6NJCLBhf6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/1d2ef8-a86e-446f-8c35-b833bd9e0b3a/1/DWnj7lXdhiZ01FhmG6NJCLBhf6E.mft
Manifest number: 07CA
Signing time: Sat 28 Jun 2025 13:01:16 +0000
Manifest this update: Sat 28 Jun 2025 13:01:16 +0000
Manifest next update: Sun 29 Jun 2025 13:01:16 +0000
Files and hashes: 1: DWnj7lXdhiZ01FhmG6NJCLBhf6E.crl (hash: HFgVWbSjscRPHWOWMiYzlEJIIEPxIyo1o2ngF7LCm7A=)
2: MkhY8Wq6vpbqUA8JYFIfnWPN1Xc.roa (hash: P1izD/bPbpYCMheG0o/h8Q5qxusjF76rS35X5Ps2VoI=)
3: lN3w_CQ-pmg0o8Uv6v-3uj3yMXY.roa (hash: yR0ABww6qrzdgsxlfyOghUNrgq+qwWXZtqgAtOQG9ZA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/1d2ef8-a86e-446f-8c35-b833bd9e0b3a/1/DWnj7lXdhiZ01FhmG6NJCLBhf6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/1d2ef8-a86e-446f-8c35-b833bd9e0b3a/1/DWnj7lXdhiZ01FhmG6NJCLBhf6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/DWnj7lXdhiZ01FhmG6NJCLBhf6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:bc:d0:65:42:43:42:b9:5b:df:bf:23:06:55:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d69e3ee55dd862674d458661ba34908b0617fa1
Validity
Not Before: Jun 28 13:01:16 2025 GMT
Not After : Jun 29 13:01:16 2025 GMT
Subject: CN=77f5c33bf8d23c475bc999ce81d6ccedd6383a97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:ce:49:18:87:cf:6c:dd:ea:71:27:75:7c:76:
d5:d7:53:ac:59:11:e6:a3:83:1a:cc:f4:1a:23:26:
bf:8c:fc:2e:18:45:a6:bf:5e:90:ed:ad:21:c3:2e:
10:86:b8:39:9c:63:e2:27:f7:8f:98:27:db:d9:32:
53:50:3d:db:ba:1f:12:42:02:b7:05:f3:c5:ef:d4:
e3:78:d2:95:51:a0:54:c1:6e:a2:08:8a:ea:2a:3d:
d8:23:13:32:29:f9:51:a5:be:f0:f0:cb:73:64:d3:
8d:7f:68:d1:5b:35:94:6b:92:94:e3:cf:56:a2:fc:
cf:2d:21:32:16:c1:6e:23:39:42:c3:cd:bb:d2:54:
13:e8:34:bf:aa:8a:e2:94:71:fc:a8:f6:9b:f0:31:
22:85:08:f8:59:1b:88:dd:c5:b7:30:d7:bd:8c:11:
cf:cc:32:a4:0c:88:af:cb:22:19:ed:b7:7f:52:f9:
d7:10:26:7d:b6:1d:ea:e3:6c:86:bf:66:10:fb:cf:
a6:be:d8:1d:91:a6:d2:b2:de:65:a9:1e:7c:9a:5c:
26:57:a9:d1:e7:5f:2b:03:bd:6e:0b:4d:db:f9:de:
e1:cb:17:fe:60:ee:51:32:25:83:f9:0c:c6:cb:cf:
20:cf:4a:25:88:60:39:ac:cd:8e:df:4d:a2:8a:63:
19:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:F5:C3:3B:F8:D2:3C:47:5B:C9:99:CE:81:D6:CC:ED:D6:38:3A:97
X509v3 Authority Key Identifier:
keyid:0D:69:E3:EE:55:DD:86:26:74:D4:58:66:1B:A3:49:08:B0:61:7F:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DWnj7lXdhiZ01FhmG6NJCLBhf6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/1d2ef8-a86e-446f-8c35-b833bd9e0b3a/1/DWnj7lXdhiZ01FhmG6NJCLBhf6E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/1d2ef8-a86e-446f-8c35-b833bd9e0b3a/1/DWnj7lXdhiZ01FhmG6NJCLBhf6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:20:71:91:e9:53:90:08:e9:0e:03:77:89:26:44:a1:5f:4f:
b6:2b:7e:c8:cd:63:3a:8c:70:68:4c:12:bd:0b:23:61:02:ca:
47:24:36:54:66:61:20:64:c5:70:96:9b:cc:86:14:01:18:fa:
4b:84:1c:70:19:54:7e:53:79:8b:d6:6b:95:b8:58:4a:81:b6:
85:11:cd:b0:ca:02:bd:4d:02:cf:fa:27:73:70:10:d0:95:ae:
7a:4d:e8:8d:b6:17:96:75:fa:06:4c:39:9d:56:3a:50:be:c1:
73:f7:e8:7c:ba:43:40:85:0f:34:cf:04:d4:3e:24:1b:84:9c:
a4:e1:f0:e1:1e:42:b7:21:c7:de:90:f7:eb:2d:4b:da:db:63:
c0:9c:b5:0c:48:a2:12:09:39:97:a9:79:dd:68:98:b3:ac:14:
c8:f8:c6:0b:f6:ec:dd:0d:19:b0:9d:5d:8a:7e:71:db:1b:05:
06:ae:e0:78:66:cf:69:8e:52:bd:83:55:3c:72:4e:e7:29:ad:
d7:75:bf:d5:0c:9a:6a:46:5d:55:e3:20:ed:c0:0a:31:88:14:
99:2f:c0:8a:63:57:7f:ee:2f:d0:59:0d:4f:7f:3a:1c:2b:33:
45:35:28:0e:ce:cb:3b:4d:55:0c:5d:e5:36:c5:09:d5:a3:cb:
18:17:34:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:49:45 2025 by rpki-client