Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/7e51b4-0ab4-4719-b330-bdc5ae8abdb1/1/DL6R62OkTx6fGoPt0hih7HXCXpE.mft
File: DL6R62OkTx6fGoPt0hih7HXCXpE.mft (raw, json)
Hash identifier: UaJJMLx4436jjPr9F8TOQPfMI+coRpzjqHKew4nu/is=
Subject key identifier: 68:A5:B8:AE:4C:D1:A9:1B:8A:E2:ED:98:61:E2:B0:0C:33:A3:1A:6A
Authority key identifier: 0C:BE:91:EB:63:A4:4F:1E:9F:1A:83:ED:D2:18:A1:EC:75:C2:5E:91
Certificate issuer: /CN=0cbe91eb63a44f1e9f1a83edd218a1ec75c25e91
Certificate serial: 0197C613FDBEDFE9F85909E76BCCB303FA61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DL6R62OkTx6fGoPt0hih7HXCXpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/7e51b4-0ab4-4719-b330-bdc5ae8abdb1/1/DL6R62OkTx6fGoPt0hih7HXCXpE.mft
Manifest number: 0781
Signing time: Tue 01 Jul 2025 13:01:28 +0000
Manifest this update: Tue 01 Jul 2025 13:01:28 +0000
Manifest next update: Wed 02 Jul 2025 13:01:28 +0000
Files and hashes: 1: Abi5pH7cUtL8rs9zrgavPjQRxnI.roa (hash: 7ApJuHPbwwQ8ZW2QLt3m10DbTaxlvMl9pvX3Esbaw0s=)
2: DL6R62OkTx6fGoPt0hih7HXCXpE.crl (hash: 6NdnddQ9yMZXo3HZyocWEDMe1661hXz0cSGduTnML84=)
3: rub7QgF_m8ViZ2zh8TifmWsv33k.roa (hash: D3MkLEEj8OyFp5olxebWk6+e8+j7slJr87cSCNkpbeI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/7e51b4-0ab4-4719-b330-bdc5ae8abdb1/1/DL6R62OkTx6fGoPt0hih7HXCXpE.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/7e51b4-0ab4-4719-b330-bdc5ae8abdb1/1/DL6R62OkTx6fGoPt0hih7HXCXpE.mft
rsync://rpki.ripe.net/repository/DEFAULT/DL6R62OkTx6fGoPt0hih7HXCXpE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 13:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c6:13:fd:be:df:e9:f8:59:09:e7:6b:cc:b3:03:fa:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cbe91eb63a44f1e9f1a83edd218a1ec75c25e91
Validity
Not Before: Jul 1 13:01:28 2025 GMT
Not After : Jul 2 13:01:28 2025 GMT
Subject: CN=68a5b8ae4cd1a91b8ae2ed9861e2b00c33a31a6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:21:3e:e0:fc:fb:fa:84:7a:4f:b8:36:65:88:
64:ce:ed:be:a5:50:38:57:5e:8b:b4:5b:a0:6a:44:
6b:d4:7c:33:a8:b5:7f:56:db:db:fe:16:dc:0d:82:
e3:99:79:a7:f8:cb:4a:7b:c3:27:a6:8c:8f:d2:6b:
9d:51:c6:71:a4:3b:92:fa:43:e0:80:a8:49:3b:86:
2f:2d:6d:cf:34:87:10:f6:11:c2:b0:3b:9f:2b:41:
3e:d7:b7:b4:fd:65:7e:c8:c8:6c:0e:0d:70:12:e8:
a0:52:3b:20:32:08:49:f5:cb:1a:e6:34:a5:b5:2b:
02:0d:12:bc:1d:c3:78:10:85:bf:52:a7:d8:20:33:
e6:5f:16:9d:19:76:af:db:95:73:78:ac:03:29:11:
9b:53:1e:75:a1:66:41:8d:55:57:47:86:fa:9a:1f:
35:a3:7c:dd:82:03:57:a4:d6:e6:eb:9c:5c:45:1e:
ea:06:52:fa:31:ea:7b:80:f1:0b:37:31:4c:bb:f5:
34:2c:9b:84:7e:62:cb:36:e7:82:e8:d2:18:40:81:
37:92:0f:02:8c:1b:e8:2a:71:24:ca:d3:93:13:4e:
82:b9:82:93:8e:bb:73:15:b2:bc:5e:a4:79:20:26:
e4:85:f7:cd:6c:bc:eb:5e:7e:fc:3a:3b:cc:13:f7:
4e:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:A5:B8:AE:4C:D1:A9:1B:8A:E2:ED:98:61:E2:B0:0C:33:A3:1A:6A
X509v3 Authority Key Identifier:
keyid:0C:BE:91:EB:63:A4:4F:1E:9F:1A:83:ED:D2:18:A1:EC:75:C2:5E:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DL6R62OkTx6fGoPt0hih7HXCXpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/7e51b4-0ab4-4719-b330-bdc5ae8abdb1/1/DL6R62OkTx6fGoPt0hih7HXCXpE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/7e51b4-0ab4-4719-b330-bdc5ae8abdb1/1/DL6R62OkTx6fGoPt0hih7HXCXpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:59:77:21:37:f4:fc:0b:1d:29:bd:a8:fd:13:96:c6:29:ab:
53:79:92:39:57:81:7f:a7:c6:90:1b:ea:9b:21:3e:ae:52:2d:
81:7f:c8:1f:7b:e3:64:ae:ef:e2:24:f6:1e:c4:01:b7:12:13:
68:ff:55:5f:02:ca:7e:08:97:0c:bb:33:ab:83:33:a8:a2:06:
72:67:44:4b:d7:9b:cc:e1:a6:b2:16:8e:79:e8:9a:3b:4d:60:
23:94:85:1a:d8:73:f7:e6:78:c1:ea:f5:e8:94:9d:1d:23:f1:
1a:39:b6:05:1f:af:2b:f0:6e:c6:27:30:84:39:c1:3f:32:03:
2f:be:99:50:e0:19:1f:b9:a1:47:53:a2:bf:a7:1c:f1:6b:13:
9b:f9:ef:bb:c4:67:e7:98:9a:f3:5c:3a:1d:ce:7b:82:13:ab:
21:1c:09:90:7b:ad:cd:15:23:1a:2f:6f:d1:0b:04:ff:3f:a8:
8d:fd:0f:ca:81:ce:ed:a3:7c:cb:22:04:c6:b4:e2:96:c7:65:
ba:9f:8d:a3:81:e3:04:c3:43:5a:ec:89:9e:81:dd:64:8a:d0:
7b:fb:12:7e:93:1a:40:84:c6:fb:e7:d6:dd:3a:d2:31:84:76:
e5:c6:39:4e:1a:56:ee:62:43:0c:8c:32:63:d9:92:32:25:7a:
aa:4b:db:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 21:59:09 2025 by rpki-client