Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/466aab-a470-4344-a367-547be4cfa457/1/dbeVBmFQocNn2rzPaclwqwxyMhU.mft
File: dbeVBmFQocNn2rzPaclwqwxyMhU.mft (raw, json)
Hash identifier: EKQrT2xlCcLORgbL1RCs2dCDYUlM3IMMiDhO2gvXIx8=
Subject key identifier: AE:0C:44:45:31:5C:76:B6:FB:D9:80:42:60:C6:F8:52:EE:A1:1B:37
Authority key identifier: 75:B7:95:06:61:50:A1:C3:67:DA:BC:CF:69:C9:70:AB:0C:72:32:15
Certificate issuer: /CN=75b795066150a1c367dabccf69c970ab0c723215
Certificate serial: 0197B7B37764F6A6C7961B388F362ACDAB13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dbeVBmFQocNn2rzPaclwqwxyMhU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/466aab-a470-4344-a367-547be4cfa457/1/dbeVBmFQocNn2rzPaclwqwxyMhU.mft
Manifest number: 099B
Signing time: Sat 28 Jun 2025 18:01:21 +0000
Manifest this update: Sat 28 Jun 2025 18:01:21 +0000
Manifest next update: Sun 29 Jun 2025 18:01:21 +0000
Files and hashes: 1: K2WTfNgGTgwLI8daJh2SwttMQ5w.roa (hash: kg2DGvsW5/IaD92YzOAMjHp8f1xtHOO7qcNliTfoKss=)
2: Ppnz_gWGkTgslud1nbRvdKIkQ7U.roa (hash: pUR0ufw079uWlFJjSqIiEUz3vris4ZJFN/dXSNPf1bk=)
3: dbeVBmFQocNn2rzPaclwqwxyMhU.crl (hash: yx4mYESFDG96hB2c4zV6RbhJ/jAWL5oUgwErfuu35io=)
4: gYinuUkN5-ijpn1rqGGqGii0p6g.roa (hash: lpzZyTHLuJfHa94o7AaeZ6AmXeDKqlRwU9KcssuE8rk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/466aab-a470-4344-a367-547be4cfa457/1/dbeVBmFQocNn2rzPaclwqwxyMhU.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/466aab-a470-4344-a367-547be4cfa457/1/dbeVBmFQocNn2rzPaclwqwxyMhU.mft
rsync://rpki.ripe.net/repository/DEFAULT/dbeVBmFQocNn2rzPaclwqwxyMhU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:77:64:f6:a6:c7:96:1b:38:8f:36:2a:cd:ab:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75b795066150a1c367dabccf69c970ab0c723215
Validity
Not Before: Jun 28 18:01:21 2025 GMT
Not After : Jun 29 18:01:21 2025 GMT
Subject: CN=ae0c4445315c76b6fbd9804260c6f852eea11b37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:26:ac:d0:22:b1:a2:20:a9:23:85:6b:92:89:
0b:ce:d0:b3:d9:7f:45:ad:ec:0d:29:08:01:10:6d:
94:8f:a2:2e:36:0c:65:dc:a5:05:56:0b:98:3d:28:
bc:6a:02:9d:7a:a5:15:c2:d7:1f:b7:71:37:06:c3:
af:d0:6c:6a:4d:54:d8:26:1e:34:c4:d0:d4:ba:f5:
71:a0:6f:a2:37:d7:86:c9:fe:34:f7:f1:4f:43:86:
a8:6e:d8:58:9c:b4:1c:fa:ac:50:76:93:75:fd:74:
1e:15:f8:77:24:14:21:07:57:57:bb:76:e5:ec:43:
08:08:e8:fa:15:e2:f7:66:0d:25:2d:20:1b:11:ee:
73:92:12:d1:0c:b9:a0:b6:48:79:06:8f:75:71:74:
b4:d9:06:0d:30:da:37:7c:8d:55:57:77:f8:3c:2a:
1c:f0:4b:40:ec:02:b9:02:e4:b3:37:ea:c1:0c:d2:
c4:30:b2:7f:ea:fb:59:be:eb:73:6d:44:30:b5:42:
a4:ba:ae:a7:1e:88:65:ab:02:7c:3e:01:7a:14:0c:
5c:af:4e:0f:44:57:e9:d4:45:7d:1c:c1:1c:0e:7c:
d4:b8:a5:a0:39:d4:f5:9b:0f:85:bf:bd:2b:06:6b:
bc:7c:97:ac:b9:4b:b4:df:97:63:64:69:4d:7d:d6:
a3:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:0C:44:45:31:5C:76:B6:FB:D9:80:42:60:C6:F8:52:EE:A1:1B:37
X509v3 Authority Key Identifier:
keyid:75:B7:95:06:61:50:A1:C3:67:DA:BC:CF:69:C9:70:AB:0C:72:32:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dbeVBmFQocNn2rzPaclwqwxyMhU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/466aab-a470-4344-a367-547be4cfa457/1/dbeVBmFQocNn2rzPaclwqwxyMhU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/466aab-a470-4344-a367-547be4cfa457/1/dbeVBmFQocNn2rzPaclwqwxyMhU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:88:02:86:33:b1:ea:d2:a4:cc:0b:a5:c0:79:9f:99:37:da:
77:8d:33:9c:4f:45:d7:ca:1e:2a:4e:9e:bd:60:7b:aa:2d:f6:
b7:a0:d7:12:28:17:98:a0:f2:8c:4a:a7:80:15:39:97:e8:18:
8b:0f:40:12:4a:68:95:3a:19:e7:51:25:ba:a6:8c:24:bb:e6:
11:87:a3:5f:5d:d2:53:c6:f0:27:e0:f2:6d:bc:98:0a:a1:a3:
09:2f:bc:b7:45:77:4a:e7:4e:fd:64:b9:58:e5:43:d6:12:fc:
b0:66:bc:2a:66:5d:b1:cd:55:aa:fe:6d:2d:9e:cf:44:bf:94:
0e:31:ca:dd:26:62:34:34:8e:65:6a:91:4a:df:2f:28:f8:b7:
cd:35:98:b3:ed:d3:1e:e0:bb:a5:cd:63:70:c5:26:0f:8b:23:
59:61:70:94:04:61:e2:26:1f:88:64:2a:f3:62:56:15:87:e0:
dd:95:00:81:a3:22:08:c3:2a:4c:1f:1f:d9:ae:0c:13:5f:4a:
94:d5:e2:b1:2e:91:ea:87:cc:08:3c:45:35:9a:e0:2a:8b:fe:
5a:1c:a6:8e:86:5d:61:d0:d9:03:ff:75:9e:46:51:74:58:dc:
c1:5d:20:81:29:bd:f9:ca:f0:b0:33:6e:de:d5:97:54:b3:70:
44:fb:df:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:08:55 2025 by rpki-client