Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/17a621-edae-4a9b-8455-fcc0091fe9e6/1/dHu3wkUFtvWPlIF9fI1TdnVtN_w.mft
File: dHu3wkUFtvWPlIF9fI1TdnVtN_w.mft (raw, json)
Hash identifier: cvxV3Loflfpd/YXvkLlEnkupOWSm5um5sNHPJcuCxSM=
Subject key identifier: D4:31:D2:D9:2B:93:B7:C1:6B:EB:99:4F:0D:5A:A3:05:4D:47:11:6B
Authority key identifier: 74:7B:B7:C2:45:05:B6:F5:8F:94:81:7D:7C:8D:53:76:75:6D:37:FC
Certificate issuer: /CN=747bb7c24505b6f58f94817d7c8d5376756d37fc
Certificate serial: 0197C68222B41A3060834A6F2DA0D1CF0580
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dHu3wkUFtvWPlIF9fI1TdnVtN_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/17a621-edae-4a9b-8455-fcc0091fe9e6/1/dHu3wkUFtvWPlIF9fI1TdnVtN_w.mft
Manifest number: 05DB
Signing time: Tue 01 Jul 2025 15:01:46 +0000
Manifest this update: Tue 01 Jul 2025 15:01:46 +0000
Manifest next update: Wed 02 Jul 2025 15:01:46 +0000
Files and hashes: 1: Akagd0l7QO9OvkucPctZVYCXA9M.roa (hash: IhMY55O2zxdfLlGwJcA2GKoYXI6fuVYr/yI0EHnUALg=)
2: dHu3wkUFtvWPlIF9fI1TdnVtN_w.crl (hash: X0B3vtNnpTtlSEYhQlM2T1Xe0j/WiU+8IPVfdBbkePg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/17a621-edae-4a9b-8455-fcc0091fe9e6/1/dHu3wkUFtvWPlIF9fI1TdnVtN_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/17a621-edae-4a9b-8455-fcc0091fe9e6/1/dHu3wkUFtvWPlIF9fI1TdnVtN_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/dHu3wkUFtvWPlIF9fI1TdnVtN_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c6:82:22:b4:1a:30:60:83:4a:6f:2d:a0:d1:cf:05:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=747bb7c24505b6f58f94817d7c8d5376756d37fc
Validity
Not Before: Jul 1 15:01:46 2025 GMT
Not After : Jul 2 15:01:46 2025 GMT
Subject: CN=d431d2d92b93b7c16beb994f0d5aa3054d47116b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:62:39:74:e0:6d:ae:94:75:68:0a:b2:94:0b:
00:1f:ca:6c:40:ef:78:3b:a8:fe:6d:4f:12:97:00:
d3:80:3b:71:c0:80:07:c5:da:00:d2:62:48:1b:8b:
7e:03:fe:01:51:39:2c:29:29:fe:b4:4c:7c:39:d0:
04:52:a3:d6:ce:64:0c:71:b8:d6:89:a2:23:2d:95:
16:9b:cb:d8:44:1d:b7:f1:01:c4:a8:0b:11:24:ef:
00:92:b7:df:96:75:77:ac:5d:96:2d:1d:6b:02:5e:
08:26:63:6c:c3:2f:94:c2:3a:2c:75:4d:76:ed:89:
08:2f:2a:17:07:72:28:f6:dd:bb:11:e5:4c:75:c3:
c2:a5:9d:b0:02:e7:18:21:0d:66:17:f7:7c:82:e8:
3f:22:57:8d:b2:29:05:0f:3c:e3:6a:b6:21:c3:7d:
4a:24:df:9e:8e:7b:f6:ed:27:f0:64:62:e1:48:87:
01:11:7c:59:0a:c4:cd:37:44:f3:fb:f9:4b:36:17:
c2:6c:ca:e4:fb:cf:98:4f:8e:37:86:34:55:e2:1a:
47:10:85:30:a2:fa:64:7d:cb:bb:fd:09:4b:4a:55:
01:d8:be:7a:61:44:f0:a7:8c:fe:0a:6a:11:85:40:
16:fa:d9:76:83:80:e7:ce:54:b4:dc:f6:d2:32:72:
24:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:31:D2:D9:2B:93:B7:C1:6B:EB:99:4F:0D:5A:A3:05:4D:47:11:6B
X509v3 Authority Key Identifier:
keyid:74:7B:B7:C2:45:05:B6:F5:8F:94:81:7D:7C:8D:53:76:75:6D:37:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dHu3wkUFtvWPlIF9fI1TdnVtN_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/17a621-edae-4a9b-8455-fcc0091fe9e6/1/dHu3wkUFtvWPlIF9fI1TdnVtN_w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/17a621-edae-4a9b-8455-fcc0091fe9e6/1/dHu3wkUFtvWPlIF9fI1TdnVtN_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:39:1b:6e:22:86:4c:1c:de:94:1d:ec:1e:bf:ec:2a:2b:18:
9e:79:d6:ca:59:4f:b5:9d:5b:21:df:38:b1:1b:3c:ba:8f:3d:
36:85:a8:74:d1:7c:a5:bc:ba:c3:48:b0:18:3d:6b:2c:4e:1f:
86:45:9f:49:e2:55:18:9b:80:10:5f:bb:ff:f3:53:f3:8f:4a:
04:1e:eb:38:c9:9f:d5:df:95:0f:95:ac:56:9b:b7:11:0d:9d:
e7:e6:77:bf:9d:ef:98:7c:eb:fb:68:99:86:7d:39:6c:3e:97:
67:d0:cb:33:a0:f1:96:12:b9:f6:03:b6:34:8b:5d:4a:b2:5e:
05:70:95:b1:a2:b8:29:01:40:ef:0f:38:3d:9e:fc:e0:9e:5b:
e4:7b:bc:6d:09:03:e2:47:97:a9:66:f0:83:9e:17:c8:d5:4a:
04:9d:29:82:6b:04:80:00:5d:18:84:50:75:26:1f:b2:5d:81:
cd:9c:01:b3:d6:cf:33:f0:5f:78:8e:c2:f9:80:ce:a0:3c:d5:
b2:6d:42:91:c5:33:c3:5e:3b:fb:6e:9b:15:08:4b:e5:61:c7:
f8:f3:45:ce:cd:5e:40:fe:29:f5:80:1d:3b:e5:a7:51:fc:af:
2f:72:2f:6e:0d:34:60:80:2b:ff:4a:3e:3c:23:79:f8:1b:83:
6f:d8:32:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 18:09:07 2025 by rpki-client