Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/1686c3-da70-4b54-ab2b-3be995d2bbda/1/du8KDuj6FU162kOK8SEiac4KzEE.mft
File: du8KDuj6FU162kOK8SEiac4KzEE.mft (raw, json)
Hash identifier: qogowYk1UHxjtYDjGaaNS/6i4k23I7W9ejJXaNbj0c8=
Subject key identifier: F0:D3:2F:0F:F0:A5:7C:4E:A7:74:82:1B:7C:81:E3:11:01:B7:C2:65
Authority key identifier: 76:EF:0A:0E:E8:FA:15:4D:7A:DA:43:8A:F1:21:22:69:CE:0A:CC:41
Certificate issuer: /CN=76ef0a0ee8fa154d7ada438af1212269ce0acc41
Certificate serial: 0197D1A9B0B31F0C5211F52C3A34B1FE679E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/du8KDuj6FU162kOK8SEiac4KzEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/1686c3-da70-4b54-ab2b-3be995d2bbda/1/du8KDuj6FU162kOK8SEiac4KzEE.mft
Manifest number: 0536
Signing time: Thu 03 Jul 2025 19:00:48 +0000
Manifest this update: Thu 03 Jul 2025 19:00:48 +0000
Manifest next update: Fri 04 Jul 2025 19:00:48 +0000
Files and hashes: 1: Duy0w8egSd6_tWOhbaPt5UeYgF0.roa (hash: 85ocILxngCmwXS32iOfp1qK7+ygQ+Dz/qqJJB6oRnIE=)
2: J4VjN9NGRUAj6-HvTcD4a4pRvuI.roa (hash: BPJJa1BdBThf5/6mJP59LpQAGjz4XfDNQ5fBL115gk0=)
3: _fP9Z6Qv2kJn-Wq44o76SeffPHk.roa (hash: 4imK77f8nPoaw3AiGFAa7c39oqo+0JEgUABlegcK0lE=)
4: du8KDuj6FU162kOK8SEiac4KzEE.crl (hash: 53wpA1jWRbjHjLScEe5ADZJBPt+HVJAiTR0lu9ClF6U=)
5: l65724QI29Rvj8Dehw-WDE4zXrs.roa (hash: GIynNXgCpE42jnQGxrKvLDY9GYzVvsdz2aApBnrj/3E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/1686c3-da70-4b54-ab2b-3be995d2bbda/1/du8KDuj6FU162kOK8SEiac4KzEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/1686c3-da70-4b54-ab2b-3be995d2bbda/1/du8KDuj6FU162kOK8SEiac4KzEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/du8KDuj6FU162kOK8SEiac4KzEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 17:39:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d1:a9:b0:b3:1f:0c:52:11:f5:2c:3a:34:b1:fe:67:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76ef0a0ee8fa154d7ada438af1212269ce0acc41
Validity
Not Before: Jul 3 19:00:48 2025 GMT
Not After : Jul 4 19:00:48 2025 GMT
Subject: CN=f0d32f0ff0a57c4ea774821b7c81e31101b7c265
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e0:19:22:35:47:f4:44:59:39:2c:e2:6d:bf:
85:9d:15:3f:c6:10:7e:b4:26:27:93:33:31:17:27:
8f:2f:14:2b:84:77:07:bc:6e:17:b6:f6:f7:0f:62:
12:12:53:fe:45:df:28:d4:e2:bf:ff:51:26:83:76:
2e:42:18:08:32:2e:2b:90:56:42:96:d5:07:8e:25:
e9:13:db:89:56:0c:69:62:eb:4e:1b:8e:bb:01:81:
8a:68:5c:fd:a2:f1:03:40:84:55:0e:ed:13:c6:00:
c8:da:2a:b8:52:6e:1c:ff:70:c5:39:3a:fd:c5:45:
dc:bd:04:a0:5e:3f:09:dd:04:8c:80:be:57:11:a0:
ce:fa:11:54:7a:84:4c:14:f7:a6:a1:66:55:7e:dd:
3b:d3:f8:ef:8b:6e:85:0e:95:fa:66:d9:06:14:29:
e7:7a:43:cf:00:01:9b:bc:bd:a9:56:f1:a9:bd:c0:
20:dc:85:9d:0f:a6:1a:19:33:30:8a:1f:c2:24:fc:
bb:d0:48:f7:31:62:aa:d9:aa:d0:3f:16:17:30:25:
06:99:ae:8e:90:ae:cd:e1:e2:94:db:2d:32:8e:31:
18:69:3f:d4:8b:a1:e2:8e:1e:a5:60:a0:77:da:8f:
10:14:17:ed:c5:f8:c1:c4:70:53:3a:2d:e2:78:9a:
74:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:D3:2F:0F:F0:A5:7C:4E:A7:74:82:1B:7C:81:E3:11:01:B7:C2:65
X509v3 Authority Key Identifier:
keyid:76:EF:0A:0E:E8:FA:15:4D:7A:DA:43:8A:F1:21:22:69:CE:0A:CC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/du8KDuj6FU162kOK8SEiac4KzEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/1686c3-da70-4b54-ab2b-3be995d2bbda/1/du8KDuj6FU162kOK8SEiac4KzEE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/1686c3-da70-4b54-ab2b-3be995d2bbda/1/du8KDuj6FU162kOK8SEiac4KzEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:ec:8f:0b:59:6e:45:68:e1:6f:1b:3c:1e:72:e1:db:2f:1a:
aa:3b:73:cd:b1:59:74:16:4b:92:76:3d:63:c1:cc:3d:d2:61:
61:80:8c:a3:1e:99:3f:57:a3:bc:3e:35:f1:f6:bd:95:56:7d:
b3:ce:6e:4b:c9:07:63:c1:57:a2:49:3c:be:a1:21:fa:ad:d8:
73:cf:e8:ad:25:a5:62:f9:5d:00:8c:de:48:36:4b:08:3a:ac:
87:d9:f2:55:d5:1a:8f:d6:a1:2e:33:22:c6:d3:54:55:76:9d:
3e:d2:a9:0d:5c:b0:89:55:1a:6b:50:a5:19:93:e1:0f:d4:b3:
c6:4d:1d:53:b3:8b:ee:b9:a2:f0:74:b0:00:6c:68:7c:e8:f0:
16:b7:cf:23:4a:80:d9:44:cc:70:a4:63:eb:ff:1d:e1:d8:82:
54:7b:08:24:87:84:ec:39:56:66:cb:f3:05:2a:2f:dd:84:14:
c7:a3:f6:33:6e:15:cd:ac:f0:3d:13:d6:59:d7:c9:12:13:58:
34:07:e9:0f:bd:3a:13:2b:5b:d2:8f:6c:2d:96:22:7d:a6:89:
e6:34:ee:d1:68:40:0c:e6:2b:87:17:79:ac:65:a1:ee:3f:86:
d7:ce:2d:90:19:40:00:b8:cb:11:b7:8f:f5:dd:3f:7d:73:42:
7f:8a:2e:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 02:17:23 2025 by rpki-client