Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/caa2da-5ebc-45cb-b8fe-08f3e8907c42/1/Djye4b4zCP1r1KfHrCudkQCJt3k.mft
File: Djye4b4zCP1r1KfHrCudkQCJt3k.mft (raw, json)
Hash identifier: ppwp6qbbDGnd6vKZUqSYB0B7s1oWX44djyQMomTOvSg=
Subject key identifier: 00:AD:82:08:81:2F:9A:8E:2D:C2:57:6B:56:9D:BE:95:70:1C:AB:19
Authority key identifier: 0E:3C:9E:E1:BE:33:08:FD:6B:D4:A7:C7:AC:2B:9D:91:00:89:B7:79
Certificate issuer: /CN=0e3c9ee1be3308fd6bd4a7c7ac2b9d910089b779
Certificate serial: 0197B632AFE01EB09C19383923FDE9D2BA67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Djye4b4zCP1r1KfHrCudkQCJt3k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/caa2da-5ebc-45cb-b8fe-08f3e8907c42/1/Djye4b4zCP1r1KfHrCudkQCJt3k.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 11:01:04 +0000
Manifest this update: Sat 28 Jun 2025 11:01:04 +0000
Manifest next update: Sun 29 Jun 2025 11:01:04 +0000
Files and hashes: 1: Djye4b4zCP1r1KfHrCudkQCJt3k.crl (hash: 9PRC+bCIX4SGhOBOtRVdfRRvihjkWnjb48ih7k4a3Uc=)
2: Z7WQLysLOr9KTXHt3eRvtbiWeZo.roa (hash: fdaTiSBPfJFKIhyYKXlfKo3BVE4saxPRnib+dEXPrFo=)
3: ZOrfGuxYr-AGVishKANZfi1iYXI.roa (hash: LaLqBnWYlU5gFFvKLSeOrADM1iF3GbcpOkH2fyWF5fo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/caa2da-5ebc-45cb-b8fe-08f3e8907c42/1/Djye4b4zCP1r1KfHrCudkQCJt3k.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/caa2da-5ebc-45cb-b8fe-08f3e8907c42/1/Djye4b4zCP1r1KfHrCudkQCJt3k.mft
rsync://rpki.ripe.net/repository/DEFAULT/Djye4b4zCP1r1KfHrCudkQCJt3k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:32:af:e0:1e:b0:9c:19:38:39:23:fd:e9:d2:ba:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e3c9ee1be3308fd6bd4a7c7ac2b9d910089b779
Validity
Not Before: Jun 28 11:01:04 2025 GMT
Not After : Jun 29 11:01:04 2025 GMT
Subject: CN=00ad8208812f9a8e2dc2576b569dbe95701cab19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:38:ed:a1:c5:28:ac:50:16:80:59:0f:41:13:
fa:2b:36:39:24:f9:b9:ba:a7:6b:dc:bd:af:0c:f8:
05:bb:67:52:0a:ae:55:88:98:1c:82:57:ad:7b:1a:
6f:07:71:68:03:09:68:fc:3b:58:1e:27:98:02:dd:
6d:12:e4:e1:9d:e9:3d:24:44:c6:62:27:9a:07:d8:
36:f3:be:c2:9e:38:2f:ae:f1:bf:7b:43:cb:ed:96:
95:0f:6b:cb:8b:b5:67:68:83:a0:e4:6a:d2:52:00:
a8:db:55:51:76:f3:a5:d3:42:77:58:a0:72:db:a6:
04:86:a4:9a:46:b8:e8:12:83:77:3b:5d:6f:2e:ed:
ed:56:44:9d:be:55:68:8b:77:82:ce:13:82:4c:c6:
f2:ff:15:32:a1:45:c1:d5:12:05:f2:33:e9:48:34:
97:f2:15:f4:53:2e:1a:0b:4c:11:06:b1:03:33:ea:
3c:62:93:ff:0e:22:51:35:69:e1:e0:82:71:82:51:
e6:42:54:83:85:7d:69:7d:58:7f:64:70:37:fe:56:
53:23:4f:22:c7:9b:51:15:b8:c7:d9:d2:32:8e:a9:
d8:74:97:af:bc:6e:3c:7e:52:be:82:77:43:8d:41:
2c:42:60:fb:a1:db:91:d0:5b:80:b4:d2:88:66:36:
4f:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:AD:82:08:81:2F:9A:8E:2D:C2:57:6B:56:9D:BE:95:70:1C:AB:19
X509v3 Authority Key Identifier:
keyid:0E:3C:9E:E1:BE:33:08:FD:6B:D4:A7:C7:AC:2B:9D:91:00:89:B7:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Djye4b4zCP1r1KfHrCudkQCJt3k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/caa2da-5ebc-45cb-b8fe-08f3e8907c42/1/Djye4b4zCP1r1KfHrCudkQCJt3k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/caa2da-5ebc-45cb-b8fe-08f3e8907c42/1/Djye4b4zCP1r1KfHrCudkQCJt3k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:2b:8d:47:76:d6:26:e3:f4:02:9c:08:6b:6f:1a:17:94:d8:
ea:98:50:9b:0c:8b:af:e6:b1:4b:77:2e:fa:e8:6d:a5:5b:27:
23:54:b6:5d:ca:96:47:bb:9f:c3:cc:11:08:14:e3:60:bf:64:
0e:59:a8:40:22:f9:cb:db:ee:72:75:b5:4c:d0:97:d4:83:f7:
09:3b:be:fc:d3:56:22:45:c2:df:db:b9:4a:e1:73:28:63:2e:
91:75:76:b0:96:37:8d:db:08:bf:c6:11:05:01:b1:b8:ef:bc:
86:59:68:09:1a:a8:1f:98:52:f1:13:d6:15:81:0f:0e:f8:87:
2b:ed:31:e9:35:49:51:cb:49:f7:24:48:af:fd:3d:a3:3b:3d:
fc:1d:03:68:0b:87:8e:e5:57:5b:0e:97:c3:aa:f7:5b:0f:7b:
74:54:f9:bb:dd:3b:1f:e2:3e:e8:44:c1:4d:5f:1b:4e:8b:db:
ad:e9:4c:f7:fa:5e:4f:00:61:09:4d:31:f1:d7:50:65:15:38:
c8:86:98:39:41:10:6e:ff:c7:c9:ac:9c:ba:da:c9:c8:68:0e:
f3:30:59:f9:73:07:c1:b0:34:dd:ed:7a:71:4e:fd:cb:2c:47:
40:5d:7e:06:e2:8a:ca:05:63:ec:b4:f9:54:7d:1d:45:0b:66:
e3:0d:da:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 18:57:20 2025 by rpki-client