Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/DmT4G542uEmRd4dnjQFNtL_O8xE.mft
File: DmT4G542uEmRd4dnjQFNtL_O8xE.mft (raw, json)
Hash identifier: nN+XlYCcwFg2eQKpqLvotBW24VB4L/XYd4ilKhHuetw=
Subject key identifier: 4F:01:26:92:12:FB:C3:FD:0C:D2:9A:6F:4C:67:DA:9E:84:FE:0B:B2
Authority key identifier: 0E:64:F8:1B:9E:36:B8:49:91:77:87:67:8D:01:4D:B4:BF:CE:F3:11
Certificate issuer: /CN=0e64f81b9e36b849917787678d014db4bfcef311
Certificate serial: 0197B7457E758E26E1666F669F164627080C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DmT4G542uEmRd4dnjQFNtL_O8xE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/DmT4G542uEmRd4dnjQFNtL_O8xE.mft
Manifest number: 05F2
Signing time: Sat 28 Jun 2025 16:01:14 +0000
Manifest this update: Sat 28 Jun 2025 16:01:14 +0000
Manifest next update: Sun 29 Jun 2025 16:01:14 +0000
Files and hashes: 1: DmT4G542uEmRd4dnjQFNtL_O8xE.crl (hash: +GJAkOBrsrJwvvxxlhIFjjYk4rvLcF27FDX7KdN8QPU=)
2: EEHOXZie7GfjFP8O_aL3DaZW-cs.roa (hash: X68IlMoKqFdfJQq29aFoZvl4dyUrIU6qUuNNpdY5QY0=)
3: GRNi9FaG_cegQglT0i8FIDNWU2U.roa (hash: bCWNDCmq66YbcJ+QlNZxut5x3FKlyihHpYRCb3I31oo=)
4: R6j9VFf9hyGNWvQI3K-rac4qKtM.roa (hash: OsF+wduGV2ZDH6UXcdpVcVuvDncNr0AEm//3Zi2I5P8=)
5: XVq1TrlQkDFo2a7BPxVZPb6kuUE.roa (hash: aTCk4tDEozYvDRrFyrZ3f3BlxhXKcnoh7F4+cF/wfgQ=)
6: a543lKmyyGMa0HBPrwfoutV1h7c.roa (hash: LmAVwRAD65X9ZkrQl9CW8/V9eNzAq0UoEpMZCq2ur1o=)
7: jR8-xAGcr5eXfnf9PQ-gCr4sqBU.roa (hash: xAyKDInYSvUkNUl6uz5vwMUk+j1zJC/E+Ymsw/w0qH0=)
8: mK6Hd1l33q60MXDCDb-v3OAM0UE.roa (hash: BlNVjbSzLjZletHX6nfFNTrDwvaIRsmo9MnmSGytaUo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/DmT4G542uEmRd4dnjQFNtL_O8xE.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/DmT4G542uEmRd4dnjQFNtL_O8xE.mft
rsync://rpki.ripe.net/repository/DEFAULT/DmT4G542uEmRd4dnjQFNtL_O8xE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:7e:75:8e:26:e1:66:6f:66:9f:16:46:27:08:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e64f81b9e36b849917787678d014db4bfcef311
Validity
Not Before: Jun 28 16:01:14 2025 GMT
Not After : Jun 29 16:01:14 2025 GMT
Subject: CN=4f01269212fbc3fd0cd29a6f4c67da9e84fe0bb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:27:d2:d2:ab:ac:6b:03:13:ff:65:9b:21:db:
f5:60:b9:02:d3:27:7b:96:7c:d0:b3:ff:89:a0:ff:
c3:cb:4c:19:1d:de:70:43:0f:7d:e6:5c:25:39:f0:
62:2a:67:ec:2e:d1:bf:73:15:b0:e8:f2:d0:ba:8c:
b9:2a:12:e1:2c:8f:6e:55:b3:84:b9:f9:ae:6d:d7:
51:39:15:7b:c3:0d:17:2a:0b:2c:99:33:94:c1:2f:
5a:b2:b7:b1:bf:b3:3a:22:25:34:d7:f5:d2:1a:fe:
4a:a8:4f:c3:47:e8:30:55:71:19:12:e3:c4:4b:f3:
f4:f8:bb:1d:25:e6:f4:de:64:aa:95:46:be:53:c6:
c6:57:67:ee:aa:76:82:5c:80:b3:38:c8:8a:fe:90:
c4:dc:c9:34:67:7c:71:c9:37:07:60:c4:b7:2a:3b:
49:5b:34:83:9a:74:53:2d:e1:21:4c:f8:19:b3:0f:
d1:79:c7:94:fe:3b:d3:f1:38:ff:89:7a:c6:95:66:
62:de:53:d7:68:40:0d:19:63:ab:25:e9:d5:89:26:
21:d8:44:3f:1f:91:a9:ff:ec:3a:0d:00:fb:db:1b:
af:27:93:8c:6e:e3:48:79:0a:3a:09:e9:32:e5:ab:
69:91:73:51:1c:ee:bf:c6:74:14:d6:9e:0e:1d:6b:
b9:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:01:26:92:12:FB:C3:FD:0C:D2:9A:6F:4C:67:DA:9E:84:FE:0B:B2
X509v3 Authority Key Identifier:
keyid:0E:64:F8:1B:9E:36:B8:49:91:77:87:67:8D:01:4D:B4:BF:CE:F3:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DmT4G542uEmRd4dnjQFNtL_O8xE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/DmT4G542uEmRd4dnjQFNtL_O8xE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/DmT4G542uEmRd4dnjQFNtL_O8xE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:83:d0:2e:ce:3b:e0:9b:7c:c7:1f:0c:ed:5b:a5:51:7d:b6:
18:d0:8d:78:2a:64:2e:5b:ab:e7:94:a4:d6:95:21:e2:00:7f:
df:02:d3:79:c8:7f:19:71:d5:03:a3:c1:ff:8a:55:99:e7:d2:
3e:dd:16:77:51:0f:b5:30:21:6e:1f:15:f0:6a:1b:94:00:fb:
73:cb:24:47:a6:9f:d4:04:41:6d:07:ff:4a:9a:43:e6:07:9c:
99:33:fe:93:58:5d:f2:e9:03:73:cc:22:f5:c9:d0:07:4c:3a:
31:dc:bc:15:39:08:f2:11:50:8f:e6:83:d8:07:bd:f2:a0:a3:
51:c8:db:00:4f:7c:68:2c:34:67:34:6f:82:9e:b9:8e:15:78:
e8:ca:79:05:c8:2d:9c:d8:3c:eb:81:cf:85:a3:53:89:9b:f5:
67:a4:41:a3:24:38:c1:67:05:0e:e3:e5:9e:73:6b:3e:08:19:
b7:d7:1e:2f:34:82:e3:0c:70:3d:bc:6c:cf:e8:9d:bb:5d:2d:
96:35:ab:54:fc:02:af:d3:0a:31:56:af:4c:9c:8d:e1:9f:27:
70:6e:ce:39:59:84:b3:38:bc:df:b8:1b:e9:e5:cd:45:08:46:
4b:fa:92:5e:4a:a8:6f:d4:54:6e:85:3a:05:89:5e:26:62:76:
50:d5:30:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:59:47 2025 by rpki-client