Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/a600cf-8238-4471-a1b7-f6ed83e78ef5/1/DDVXITpnJSgrJKaFMI6c-EEHrH0.mft
File: DDVXITpnJSgrJKaFMI6c-EEHrH0.mft (raw, json)
Hash identifier: QbZdrUxI0061SPpiG5+MtHnI8qps9zWQ6bDOM48aXSQ=
Subject key identifier: 9E:70:CD:5C:CA:F9:30:94:D7:35:5F:F6:81:F6:A3:72:A7:B6:63:E0
Authority key identifier: 0C:35:57:21:3A:67:25:28:2B:24:A6:85:30:8E:9C:F8:41:07:AC:7D
Certificate issuer: /CN=0c3557213a6725282b24a685308e9cf84107ac7d
Certificate serial: 0197B70E4ED142C5BA8861CFD31BDEFD8B9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DDVXITpnJSgrJKaFMI6c-EEHrH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/a600cf-8238-4471-a1b7-f6ed83e78ef5/1/DDVXITpnJSgrJKaFMI6c-EEHrH0.mft
Manifest number: 0BC9
Signing time: Sat 28 Jun 2025 15:00:57 +0000
Manifest this update: Sat 28 Jun 2025 15:00:57 +0000
Manifest next update: Sun 29 Jun 2025 15:00:57 +0000
Files and hashes: 1: DDVXITpnJSgrJKaFMI6c-EEHrH0.crl (hash: PwOvrBJq4PGbm0HvTiPhd//Xc/hpitBUtMleuPv6Bmc=)
2: VZiF-Ol32xpPvgDNLsgn8o2ll8Q.roa (hash: jUXaFXCucr/kHxmzz2/hS3PZ0b17pBJZMH+/2Ezk2nE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/a600cf-8238-4471-a1b7-f6ed83e78ef5/1/DDVXITpnJSgrJKaFMI6c-EEHrH0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/a600cf-8238-4471-a1b7-f6ed83e78ef5/1/DDVXITpnJSgrJKaFMI6c-EEHrH0.mft
rsync://rpki.ripe.net/repository/DEFAULT/DDVXITpnJSgrJKaFMI6c-EEHrH0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:4e:d1:42:c5:ba:88:61:cf:d3:1b:de:fd:8b:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c3557213a6725282b24a685308e9cf84107ac7d
Validity
Not Before: Jun 28 15:00:57 2025 GMT
Not After : Jun 29 15:00:57 2025 GMT
Subject: CN=9e70cd5ccaf93094d7355ff681f6a372a7b663e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:f1:b0:53:7d:c8:9e:55:a9:60:7e:b5:1c:b6:
07:5c:38:0b:a7:3a:61:e0:47:95:e7:f3:f3:64:19:
4b:19:19:d6:d8:63:6a:42:12:c0:70:43:59:e4:93:
42:47:82:fa:7d:06:4b:93:11:3d:aa:0e:f4:3b:ff:
86:47:10:b7:50:17:6d:9a:06:aa:9a:76:31:35:2d:
dd:35:39:95:fd:f4:ba:eb:b5:cd:d2:fe:bb:63:92:
be:50:85:3e:3a:03:2d:56:8b:2c:b1:38:29:96:2f:
68:9a:38:11:2c:b1:aa:83:be:76:a5:e4:b3:44:58:
bb:5a:7f:5b:9e:c0:3e:b6:49:af:6e:53:ff:d8:d1:
f7:32:e7:c7:26:14:ad:c0:01:e2:c7:fb:98:39:e1:
32:7f:5e:91:b8:35:4b:d0:0a:b7:d9:ef:20:a7:5e:
d1:ea:be:e7:ac:79:ad:e6:cb:cb:53:fc:70:7a:be:
0b:84:6e:d3:1e:6c:1a:bf:62:ba:5a:09:ea:a5:bb:
a6:d8:8d:c9:01:71:a6:4b:ce:93:dc:f2:dd:69:b7:
7e:03:ff:db:e1:15:5e:1c:c7:45:b6:b4:08:4a:52:
2d:0d:f8:be:67:d7:db:cb:62:ff:3f:ae:a7:27:28:
4e:50:e7:c3:cd:94:f9:f1:12:b2:78:21:2b:b6:3f:
8d:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:70:CD:5C:CA:F9:30:94:D7:35:5F:F6:81:F6:A3:72:A7:B6:63:E0
X509v3 Authority Key Identifier:
keyid:0C:35:57:21:3A:67:25:28:2B:24:A6:85:30:8E:9C:F8:41:07:AC:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DDVXITpnJSgrJKaFMI6c-EEHrH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/a600cf-8238-4471-a1b7-f6ed83e78ef5/1/DDVXITpnJSgrJKaFMI6c-EEHrH0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/a600cf-8238-4471-a1b7-f6ed83e78ef5/1/DDVXITpnJSgrJKaFMI6c-EEHrH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:e7:16:86:9e:41:7b:7a:6c:c4:23:72:98:9b:28:92:d6:90:
55:6a:42:75:88:77:7a:9d:4a:f5:2b:a6:31:31:60:46:89:40:
db:48:28:03:d9:d8:a5:ea:1c:dd:fd:c5:b5:12:72:88:87:0e:
c0:bb:b0:d9:1c:98:d5:66:5c:64:48:6e:9a:99:6a:e5:a3:f6:
64:86:49:b2:d5:0c:64:9d:69:5a:fd:36:9b:5d:89:c3:56:7e:
33:90:45:3a:e1:28:2d:26:e7:b6:86:3d:50:b4:ea:9c:2d:5a:
07:93:e8:3a:37:94:9c:81:5b:aa:96:90:4e:42:27:59:24:04:
a9:57:24:7b:77:f1:40:61:18:b6:1d:75:44:ec:05:6e:5e:5f:
dd:15:85:38:4d:69:fd:32:5d:74:6e:5b:a0:08:8c:d5:8d:a8:
c4:bd:2d:31:53:e6:d5:7b:1e:ca:74:ad:ce:62:82:1e:87:8b:
72:86:d4:98:e7:18:94:b4:5e:56:81:db:78:7c:fa:54:e1:6c:
74:65:13:a4:f1:46:26:10:b2:e5:40:3c:f2:88:8d:24:93:2f:
a5:ac:c9:30:a7:06:4f:05:ab:77:64:42:8c:cf:8a:3d:14:b2:
f7:3b:38:8f:de:53:48:dc:ca:86:02:ce:67:b9:a3:9d:15:af:
e5:35:6f:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 18:54:05 2025 by rpki-client