Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/791a4e-1be9-4976-bd95-6561c849057f/1/d52BXbMia3qEiWEmKtdP_BVVf6E.mft
File: d52BXbMia3qEiWEmKtdP_BVVf6E.mft (raw, json)
Hash identifier: YOs59OB3UdInnhvTSsqHjFynq+5LxK3W8UxzYfepO30=
Subject key identifier: EA:DC:2D:0F:1E:C1:8E:43:9E:C5:2D:76:BD:48:F6:93:CE:F1:FC:14
Authority key identifier: 77:9D:81:5D:B3:22:6B:7A:84:89:61:26:2A:D7:4F:FC:15:55:7F:A1
Certificate issuer: /CN=779d815db3226b7a848961262ad74ffc15557fa1
Certificate serial: 0197C42627BE9805806B2A9E400BF8892BE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d52BXbMia3qEiWEmKtdP_BVVf6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/791a4e-1be9-4976-bd95-6561c849057f/1/d52BXbMia3qEiWEmKtdP_BVVf6E.mft
Manifest number: 15B9
Signing time: Tue 01 Jul 2025 04:02:04 +0000
Manifest this update: Tue 01 Jul 2025 04:02:04 +0000
Manifest next update: Wed 02 Jul 2025 04:02:04 +0000
Files and hashes: 1: d52BXbMia3qEiWEmKtdP_BVVf6E.crl (hash: iGdBuf9XEaEyUzYNZdegJFQ5RTj533+EED9Qduhr8tI=)
2: r_pXvYOMh3gSQPYuo_0x5LIDY1s.roa (hash: bQrJT1cr1jHVeYHOeCbVvQ+uUO5ecYBMkZwEAtD6RHk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/791a4e-1be9-4976-bd95-6561c849057f/1/d52BXbMia3qEiWEmKtdP_BVVf6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/791a4e-1be9-4976-bd95-6561c849057f/1/d52BXbMia3qEiWEmKtdP_BVVf6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/d52BXbMia3qEiWEmKtdP_BVVf6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 23:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c4:26:27:be:98:05:80:6b:2a:9e:40:0b:f8:89:2b:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=779d815db3226b7a848961262ad74ffc15557fa1
Validity
Not Before: Jul 1 04:02:04 2025 GMT
Not After : Jul 2 04:02:04 2025 GMT
Subject: CN=eadc2d0f1ec18e439ec52d76bd48f693cef1fc14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:a6:43:f3:d6:4b:fe:35:e4:cf:42:20:d6:a9:
a5:b7:22:53:8f:bf:a5:93:c1:76:f7:7f:eb:47:74:
0d:c3:7d:5f:45:8e:a1:38:7c:6c:83:49:b9:44:5d:
9e:bf:e2:8f:89:f2:b2:68:e7:c2:0c:72:d5:73:8c:
be:ea:12:97:7c:71:19:b5:6e:69:55:a2:43:c3:6e:
48:c3:c3:98:1d:3e:51:a2:55:2d:8a:25:61:61:1f:
0e:88:39:60:e4:fc:f3:f7:5b:63:8d:ff:4e:b6:50:
3a:33:08:b9:fc:c0:cc:c8:4c:04:5e:0f:65:cd:54:
51:ed:a8:b9:cb:ce:68:40:eb:c8:14:a8:61:0e:f8:
cf:70:3a:4d:53:e9:82:e5:9d:34:6c:64:0c:1f:5f:
7d:57:95:cd:42:e6:f7:6e:19:4e:33:52:8f:64:ed:
c9:d8:b9:62:8b:e0:75:83:cd:6a:68:12:9a:b7:b3:
97:30:32:ec:e5:90:1c:52:2a:2b:6a:5a:7f:07:82:
72:c3:2b:f6:cf:39:74:d8:7e:06:f1:ab:99:36:ea:
03:71:ab:49:48:e8:9e:d9:a1:87:fe:2f:07:ee:e3:
80:74:1e:98:be:4d:93:3a:fa:67:ee:80:f9:c8:13:
81:f1:3f:55:e5:80:85:aa:76:24:45:c9:7e:26:86:
6e:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:DC:2D:0F:1E:C1:8E:43:9E:C5:2D:76:BD:48:F6:93:CE:F1:FC:14
X509v3 Authority Key Identifier:
keyid:77:9D:81:5D:B3:22:6B:7A:84:89:61:26:2A:D7:4F:FC:15:55:7F:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d52BXbMia3qEiWEmKtdP_BVVf6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/791a4e-1be9-4976-bd95-6561c849057f/1/d52BXbMia3qEiWEmKtdP_BVVf6E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/791a4e-1be9-4976-bd95-6561c849057f/1/d52BXbMia3qEiWEmKtdP_BVVf6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:8e:32:29:52:5b:86:03:56:ad:9f:a4:29:99:f2:24:fb:4e:
6b:4e:b7:fa:d4:77:7a:b6:bb:c3:c6:dd:9e:94:a2:60:1c:e5:
3b:33:0c:c0:b3:59:05:fd:d7:c9:47:16:c1:83:ae:f5:b6:bc:
7a:fc:09:55:81:af:6e:0c:5a:d3:f7:0e:9a:4a:09:e8:53:a0:
cf:4b:07:d6:6a:fb:57:83:7c:39:a2:94:0e:e4:0b:4e:6f:43:
82:28:08:1d:c2:5f:51:b8:8b:6e:32:2a:a1:cf:d9:b5:21:19:
5b:71:8f:11:f6:19:e1:f6:68:ec:96:9b:33:9d:79:de:68:f9:
40:10:dd:e7:15:20:f1:3f:01:5c:61:ce:ad:87:f6:ea:cb:ee:
89:fa:a8:87:ae:4f:e4:cf:0a:5b:cc:20:9d:1f:5d:2b:5e:06:
f1:f3:55:11:61:6e:a2:64:a4:09:2d:ff:19:cd:41:d0:62:8b:
46:a8:a5:21:2b:d0:b9:aa:48:e6:09:a7:12:62:49:c1:f3:59:
08:30:56:55:50:d4:fc:b0:a5:7d:62:07:dc:02:e6:62:1c:9b:
d2:29:be:56:25:56:82:44:f1:2e:c9:a5:c7:6f:12:7a:36:44:
36:b6:a8:70:4f:ff:dc:58:b3:fa:17:e2:2d:df:c8:0f:3a:6b:
2a:cd:b8:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 05:44:59 2025 by rpki-client