Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/19f4d4-5c1e-421f-9f56-bc5104a385e2/1/08DVsQa4GpKSTqK8UTn7te4Rht0.mft
File: 08DVsQa4GpKSTqK8UTn7te4Rht0.mft (raw, json)
Hash identifier: OBUrICv+AM+GFe8XT/dCpzmqQuX8w+TX0BpATDwUEaw=
Subject key identifier: 03:D6:52:B0:83:92:D5:1A:65:EF:89:CA:09:86:70:3E:EE:BC:B7:87
Authority key identifier: D3:C0:D5:B1:06:B8:1A:92:92:4E:A2:BC:51:39:FB:B5:EE:11:86:DD
Certificate issuer: /CN=d3c0d5b106b81a92924ea2bc5139fbb5ee1186dd
Certificate serial: 0197B6A0908BF5A2A0B1D61B097E71F1952B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/08DVsQa4GpKSTqK8UTn7te4Rht0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/19f4d4-5c1e-421f-9f56-bc5104a385e2/1/08DVsQa4GpKSTqK8UTn7te4Rht0.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 13:01:05 +0000
Manifest this update: Sat 28 Jun 2025 13:01:05 +0000
Manifest next update: Sun 29 Jun 2025 13:01:05 +0000
Files and hashes: 1: 08DVsQa4GpKSTqK8UTn7te4Rht0.crl (hash: qwSxiE+6aKFnE4lQW79P81n2vBxMd4Db2GAiBjDQ7RY=)
2: vhpsA1QTyqlbOgTgwwiSOvjLosU.roa (hash: oOzCVm5vsYLrY+U1GpoNLtBM7Fbrqb31l0clRbwWzyA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/19f4d4-5c1e-421f-9f56-bc5104a385e2/1/08DVsQa4GpKSTqK8UTn7te4Rht0.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/19f4d4-5c1e-421f-9f56-bc5104a385e2/1/08DVsQa4GpKSTqK8UTn7te4Rht0.mft
rsync://rpki.ripe.net/repository/DEFAULT/08DVsQa4GpKSTqK8UTn7te4Rht0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:90:8b:f5:a2:a0:b1:d6:1b:09:7e:71:f1:95:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3c0d5b106b81a92924ea2bc5139fbb5ee1186dd
Validity
Not Before: Jun 28 13:01:05 2025 GMT
Not After : Jun 29 13:01:05 2025 GMT
Subject: CN=03d652b08392d51a65ef89ca0986703eeebcb787
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:56:c6:b7:25:0d:22:00:52:d2:4d:d8:c3:54:
dc:d9:8e:45:10:94:6b:ef:f9:90:37:3c:0b:3e:04:
6d:a1:42:60:38:4d:38:0e:d1:7d:b7:07:cb:0b:ab:
06:53:72:cf:29:ca:3b:6d:05:60:1c:2d:9b:3a:59:
e0:f4:7b:5a:f6:7b:06:aa:1b:68:26:65:2c:19:11:
f6:96:bd:dc:1a:65:47:f5:8c:d5:cd:4a:d8:04:30:
06:82:90:e2:62:b5:5e:0e:12:0e:c3:4d:c6:c0:25:
fe:a0:71:db:b6:92:49:0a:d5:45:cd:24:48:98:5b:
c2:f0:a1:f5:af:24:bf:55:6b:f0:39:f0:0a:6e:b2:
3d:fe:92:c2:81:f3:d3:f7:4b:d9:88:33:5a:22:d4:
2e:c0:a6:9e:30:29:d5:1c:da:90:f5:31:d2:02:0a:
2a:ae:1e:24:31:13:c8:79:06:8a:d6:3e:0d:74:51:
0d:21:07:ac:c5:d7:3b:31:7a:90:e1:9a:12:43:e8:
c5:63:f1:74:0d:b5:d1:b4:31:02:22:32:60:b1:97:
f8:19:92:f4:96:15:96:2d:4f:8f:3e:ca:28:e8:8d:
3d:eb:b9:8c:04:4d:e1:eb:74:45:e8:ed:93:bc:53:
59:9d:ba:15:cb:df:b0:3c:60:26:fa:fa:5f:09:9c:
f4:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:D6:52:B0:83:92:D5:1A:65:EF:89:CA:09:86:70:3E:EE:BC:B7:87
X509v3 Authority Key Identifier:
keyid:D3:C0:D5:B1:06:B8:1A:92:92:4E:A2:BC:51:39:FB:B5:EE:11:86:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/08DVsQa4GpKSTqK8UTn7te4Rht0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/19f4d4-5c1e-421f-9f56-bc5104a385e2/1/08DVsQa4GpKSTqK8UTn7te4Rht0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/19f4d4-5c1e-421f-9f56-bc5104a385e2/1/08DVsQa4GpKSTqK8UTn7te4Rht0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:a8:53:f7:f4:ac:9c:14:5b:fd:a0:a5:97:e4:37:c2:e7:89:
82:f1:6c:73:64:93:97:3c:1e:a4:bf:cf:66:5b:88:b8:ae:ca:
e4:d2:31:50:f1:65:ef:bf:a7:d0:4d:a4:0c:13:6e:e8:fb:f2:
63:77:aa:ee:21:06:d2:5e:01:59:ff:83:f9:38:76:56:f5:f2:
ff:6f:bd:7f:63:5e:97:c0:c8:a5:6b:62:7d:d1:d5:84:a4:41:
9c:1d:86:61:0a:68:8e:ef:f0:d3:9d:e1:4d:d3:09:e7:84:54:
34:3d:3c:d6:35:38:cc:16:a0:44:b2:44:89:8a:39:27:ba:91:
9b:e2:ce:59:b6:9e:c3:e3:d3:1d:54:67:c2:b5:72:fc:5b:43:
dc:aa:a6:b2:7f:2f:af:b1:fa:48:bd:00:4b:40:a1:10:5d:12:
6e:2b:0d:e0:40:04:23:80:80:f3:8c:68:37:0a:c3:47:3e:d1:
85:96:27:1b:3e:f8:c7:70:88:3a:88:f5:aa:aa:e9:1c:ce:67:
31:f0:0f:24:a8:6b:5e:54:e5:38:a2:80:21:f1:c5:b4:bf:ed:
8f:00:15:64:52:5e:0f:68:bf:de:4c:17:7e:b7:cf:35:ae:54:
40:ca:cb:c6:95:1d:5c:e5:b2:d6:3a:3e:d9:5d:1e:2b:6b:8d:
04:c5:01:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:53:50 2025 by rpki-client