Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/d22140-d961-4377-b8c6-3ef594e6c696/1/Dp4K_r9UpNIYr7rtVDB3G793d6k.mft
File: Dp4K_r9UpNIYr7rtVDB3G793d6k.mft (raw, json)
Hash identifier: T0D5Y0oYlV7W6KjbfWdi2NGp42nUJS+fZl4XnirQpmY=
Subject key identifier: 37:03:55:0D:7F:8E:9E:A9:21:82:04:15:BE:07:3A:CD:B3:13:0B:99
Authority key identifier: 0E:9E:0A:FE:BF:54:A4:D2:18:AF:BA:ED:54:30:77:1B:BF:77:77:A9
Certificate issuer: /CN=0e9e0afebf54a4d218afbaed5430771bbf7777a9
Certificate serial: 0197B70EB2ABE6D12C3EE30CB1A4706DBD96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dp4K_r9UpNIYr7rtVDB3G793d6k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/d22140-d961-4377-b8c6-3ef594e6c696/1/Dp4K_r9UpNIYr7rtVDB3G793d6k.mft
Manifest number: 15B4
Signing time: Sat 28 Jun 2025 15:01:22 +0000
Manifest this update: Sat 28 Jun 2025 15:01:22 +0000
Manifest next update: Sun 29 Jun 2025 15:01:22 +0000
Files and hashes: 1: Dp4K_r9UpNIYr7rtVDB3G793d6k.crl (hash: SVY3tLGoRS+qWNNBAdL24wY4rYjvNfnRaur9uBU6DEk=)
2: RX3j6hG8jPHQlqgQDFsxWI9wjiU.roa (hash: iX9OHbXh9X/4e6G7wovNf6r/WuAf8SkEeNMsZiGLv+M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/d22140-d961-4377-b8c6-3ef594e6c696/1/Dp4K_r9UpNIYr7rtVDB3G793d6k.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/d22140-d961-4377-b8c6-3ef594e6c696/1/Dp4K_r9UpNIYr7rtVDB3G793d6k.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dp4K_r9UpNIYr7rtVDB3G793d6k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:b2:ab:e6:d1:2c:3e:e3:0c:b1:a4:70:6d:bd:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e9e0afebf54a4d218afbaed5430771bbf7777a9
Validity
Not Before: Jun 28 15:01:22 2025 GMT
Not After : Jun 29 15:01:22 2025 GMT
Subject: CN=3703550d7f8e9ea921820415be073acdb3130b99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:11:f8:07:30:63:39:6f:a6:5a:9f:28:28:ea:
56:a2:64:b3:a5:71:8f:72:ef:af:c8:f4:f4:2d:20:
e7:5d:83:ed:34:49:0d:04:7d:8f:e6:bf:1a:94:4e:
52:16:61:11:a6:87:8b:fc:42:30:93:ff:d1:38:c0:
f8:94:58:7e:bd:90:8c:05:ee:6e:21:c8:c0:0c:9f:
56:a0:5a:a7:d0:22:a2:46:1f:ae:83:83:d7:d2:85:
bb:87:8a:1f:12:b3:ae:ad:82:d7:c6:46:52:fc:f3:
69:3b:4b:ff:7e:59:77:fb:d3:bf:c4:e7:4a:d7:1e:
07:19:b2:ec:cf:66:ff:60:b3:3f:07:8f:cd:8d:f6:
9c:1e:85:9b:3d:f6:39:27:7f:cc:1b:94:ec:14:6b:
b5:62:f8:2a:39:cd:c0:ae:33:87:29:25:bb:3c:d3:
52:44:6b:14:96:3c:64:e1:15:0a:5d:35:74:39:7a:
a3:c3:84:60:e1:0e:a0:02:86:e9:74:23:33:cb:25:
f1:09:f3:4c:b1:39:44:c4:a3:33:5f:9d:d7:6d:46:
89:31:c7:a8:d4:e4:06:1e:14:23:3e:19:e0:0d:cc:
00:b3:a5:79:b7:24:95:66:cf:02:24:5c:d5:38:72:
a1:de:34:71:a8:6c:46:3c:2f:35:b5:0c:27:62:74:
1c:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:03:55:0D:7F:8E:9E:A9:21:82:04:15:BE:07:3A:CD:B3:13:0B:99
X509v3 Authority Key Identifier:
keyid:0E:9E:0A:FE:BF:54:A4:D2:18:AF:BA:ED:54:30:77:1B:BF:77:77:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dp4K_r9UpNIYr7rtVDB3G793d6k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d22140-d961-4377-b8c6-3ef594e6c696/1/Dp4K_r9UpNIYr7rtVDB3G793d6k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d22140-d961-4377-b8c6-3ef594e6c696/1/Dp4K_r9UpNIYr7rtVDB3G793d6k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:df:11:fe:f6:53:e0:c2:6d:bb:62:5a:01:a7:e0:ca:6e:31:
3c:3b:89:46:57:0b:77:e1:69:06:d1:e9:6d:1d:7f:97:50:f9:
63:80:e4:db:87:a7:85:a1:8a:19:8d:96:88:e9:bd:01:a4:8d:
5b:4f:66:67:84:b5:43:61:ae:10:d1:0f:38:b8:d8:76:45:f7:
9e:3e:a4:65:da:62:fe:8f:98:9d:f1:c9:a9:28:24:ec:2b:27:
01:7d:54:0c:a8:3f:ad:c9:1b:cc:98:6a:47:15:eb:61:2c:e0:
90:1f:22:42:1e:f7:2b:ce:63:cd:b3:bf:5b:08:43:f2:80:b3:
8d:f9:60:04:c5:38:88:19:f3:b4:a1:55:b1:16:af:e4:fd:db:
b6:bd:ed:aa:16:9f:5a:34:0f:e9:9c:5e:55:b2:33:94:c7:20:
fe:d1:40:10:9f:ea:ab:b6:6b:cd:47:2d:61:6f:87:2b:6e:d3:
4c:d5:cf:0b:71:95:18:9d:c5:a8:63:76:3b:ca:d5:29:20:c0:
25:95:cc:d8:32:fb:40:c6:cc:9b:31:d1:b6:68:51:6e:f6:6f:
88:d1:55:ad:92:62:e0:4d:d0:9a:4b:13:25:42:b3:3e:b4:c1:
dd:2b:b1:b6:a2:d9:73:13:58:72:83:89:54:db:23:3c:35:26:
41:77:f9:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:16:27 2025 by rpki-client