Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/581c5d-bc9b-40a6-a5a4-64540205ecf4/1/ddzHdrK_WVv0s-YLukJF8BIKIXY.mft
File: ddzHdrK_WVv0s-YLukJF8BIKIXY.mft (raw, json)
Hash identifier: 8KSD/Y6J04Wd6cXTyF9t9FU35iEvyEAz5UVE8+9yeUo=
Subject key identifier: 8F:3C:E7:1D:42:82:18:AD:E7:70:71:C6:44:80:DD:83:E4:5F:F5:92
Authority key identifier: 75:DC:C7:76:B2:BF:59:5B:F4:B3:E6:0B:BA:42:45:F0:12:0A:21:76
Certificate issuer: /CN=75dcc776b2bf595bf4b3e60bba4245f0120a2176
Certificate serial: 0197B70EF04E2CC1DB95466220A83114603E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ddzHdrK_WVv0s-YLukJF8BIKIXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/581c5d-bc9b-40a6-a5a4-64540205ecf4/1/ddzHdrK_WVv0s-YLukJF8BIKIXY.mft
Manifest number: 15BC
Signing time: Sat 28 Jun 2025 15:01:38 +0000
Manifest this update: Sat 28 Jun 2025 15:01:38 +0000
Manifest next update: Sun 29 Jun 2025 15:01:38 +0000
Files and hashes: 1: Dk824yYieLhb3lnVQMoI_RB7E3g.roa (hash: 8CE4AzqmIW8OvhBrwxxjFMn8prAKH8KtnXAsx4//qm0=)
2: ddzHdrK_WVv0s-YLukJF8BIKIXY.crl (hash: 7uJBoUTtKWrcQthwn7lNfyd1nR10/IMi9pbFrsguiPg=)
3: i_nP-RMEFWNsq8wmPatyh47z1H4.roa (hash: LMMjHpph11n+9N5yAaKIxDwK0rOXqWLUsY4TjiEcrdw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/581c5d-bc9b-40a6-a5a4-64540205ecf4/1/ddzHdrK_WVv0s-YLukJF8BIKIXY.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/581c5d-bc9b-40a6-a5a4-64540205ecf4/1/ddzHdrK_WVv0s-YLukJF8BIKIXY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ddzHdrK_WVv0s-YLukJF8BIKIXY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:f0:4e:2c:c1:db:95:46:62:20:a8:31:14:60:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75dcc776b2bf595bf4b3e60bba4245f0120a2176
Validity
Not Before: Jun 28 15:01:38 2025 GMT
Not After : Jun 29 15:01:38 2025 GMT
Subject: CN=8f3ce71d428218ade77071c64480dd83e45ff592
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:24:71:d2:bd:1a:9b:d0:43:1c:47:bf:f5:c3:
5c:f8:14:9b:a5:e1:a8:7b:0d:1e:36:44:27:f8:f5:
51:0e:85:42:73:19:f2:cc:0d:47:04:a0:99:19:eb:
63:9a:5b:25:57:80:d3:77:57:49:56:da:b0:7c:22:
9d:8b:bd:f5:52:c0:3e:bc:d3:f5:3f:86:0d:6e:d3:
ba:ea:c4:7e:df:b3:21:db:a9:0c:09:7e:1a:f9:ca:
ac:40:4a:fc:50:9e:4e:cd:7c:bd:43:44:87:d9:80:
2a:fd:1c:d2:fc:bd:4f:a5:f8:73:80:0b:bc:c2:ce:
8e:1b:3c:f4:0e:9c:72:85:a9:21:b9:cc:3f:c7:0c:
85:d0:7c:07:0a:05:b8:73:ca:d2:31:6f:bc:76:cf:
7e:60:a2:34:fa:5b:dd:f6:e6:d8:b6:c8:90:d8:ef:
00:0a:3a:3e:d3:78:89:5e:34:b8:32:29:bb:8a:91:
7f:2b:53:a7:5d:60:a8:d7:3b:96:31:ae:ad:e7:c9:
fa:ff:f0:dd:aa:e0:16:60:2a:56:e9:22:39:da:1f:
45:aa:74:37:3b:72:b4:10:89:62:ab:39:26:fe:93:
a4:55:f8:82:23:6e:df:19:9d:d5:de:65:b0:6c:60:
fb:c7:33:50:d4:0d:27:6c:9b:4a:e3:ec:e6:7c:c2:
62:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:3C:E7:1D:42:82:18:AD:E7:70:71:C6:44:80:DD:83:E4:5F:F5:92
X509v3 Authority Key Identifier:
keyid:75:DC:C7:76:B2:BF:59:5B:F4:B3:E6:0B:BA:42:45:F0:12:0A:21:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ddzHdrK_WVv0s-YLukJF8BIKIXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/581c5d-bc9b-40a6-a5a4-64540205ecf4/1/ddzHdrK_WVv0s-YLukJF8BIKIXY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/581c5d-bc9b-40a6-a5a4-64540205ecf4/1/ddzHdrK_WVv0s-YLukJF8BIKIXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:c6:11:9f:47:0d:5d:d5:7b:f0:49:c3:af:01:82:10:29:27:
bc:6b:ac:ff:0d:62:16:d3:2d:f5:0a:bf:f5:f0:01:d8:93:69:
88:7a:db:52:f7:f1:f0:54:32:b2:ef:0d:25:97:cd:d1:92:8b:
33:1e:f0:dc:1c:d3:5d:1e:85:c8:58:07:26:b3:2d:90:3e:7b:
77:b3:66:87:16:ec:e8:4f:2a:12:ba:34:34:66:e9:80:56:8d:
d5:a4:73:6f:17:a8:65:f2:5b:ae:31:80:68:3d:3a:eb:40:11:
06:3d:eb:da:a5:f8:33:61:3f:8b:14:87:3b:2e:45:ba:e2:26:
4b:30:45:e5:67:af:6f:06:f2:16:23:a4:7e:74:fe:72:41:1b:
75:67:1d:70:48:fd:41:a5:ab:5d:72:48:3b:bf:0e:f0:ed:dc:
ef:d1:25:be:56:7c:c3:c4:34:2a:4f:f6:31:30:2d:6c:87:4f:
69:12:c8:1b:38:19:ba:86:3f:f5:02:0f:33:82:ff:81:cb:ab:
6a:79:f3:85:ca:25:ff:6b:cb:d3:ea:48:86:80:aa:7e:4c:9e:
b2:7a:61:2f:5f:ec:a9:23:5e:c9:c1:bc:57:59:ee:28:34:ab:
25:eb:50:e3:be:4f:cf:19:5b:52:de:75:1b:5d:36:9f:71:dd:
f9:d1:88:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:05:56 2025 by rpki-client