Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/da81cb-1972-4c9b-9dab-e8f3a66ef558/1/DAN90it6q-KCIlr7JWuNncvro1M.mft
File: DAN90it6q-KCIlr7JWuNncvro1M.mft (raw, json)
Hash identifier: WGXlDJiAUYokrNxJlv95dXTky3zMgAMxffPFU/R/CW8=
Subject key identifier: B3:7C:58:1A:11:7C:6A:C8:F0:8B:29:9D:9D:B1:6B:66:C9:D4:A0:98
Authority key identifier: 0C:03:7D:D2:2B:7A:AB:E2:82:22:5A:FB:25:6B:8D:9D:CB:EB:A3:53
Certificate issuer: /CN=0c037dd22b7aabe282225afb256b8d9dcbeba353
Certificate serial: 0197B77C386678BE093DECE9F75B1B8307E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DAN90it6q-KCIlr7JWuNncvro1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/da81cb-1972-4c9b-9dab-e8f3a66ef558/1/DAN90it6q-KCIlr7JWuNncvro1M.mft
Manifest number: 051F
Signing time: Sat 28 Jun 2025 17:01:00 +0000
Manifest this update: Sat 28 Jun 2025 17:01:00 +0000
Manifest next update: Sun 29 Jun 2025 17:01:00 +0000
Files and hashes: 1: DAN90it6q-KCIlr7JWuNncvro1M.crl (hash: ASX6AUq76f5cYDId450+lYWJxHV8Fqn/HrctNT/cNE8=)
2: tDD9B-lEcyqNvoNAET5cpeS9CP4.roa (hash: rKwo3X/3AKqFNwDQChvvjw66ToIOE4+PnSG73JsvhIg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/da81cb-1972-4c9b-9dab-e8f3a66ef558/1/DAN90it6q-KCIlr7JWuNncvro1M.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/da81cb-1972-4c9b-9dab-e8f3a66ef558/1/DAN90it6q-KCIlr7JWuNncvro1M.mft
rsync://rpki.ripe.net/repository/DEFAULT/DAN90it6q-KCIlr7JWuNncvro1M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:38:66:78:be:09:3d:ec:e9:f7:5b:1b:83:07:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c037dd22b7aabe282225afb256b8d9dcbeba353
Validity
Not Before: Jun 28 17:01:00 2025 GMT
Not After : Jun 29 17:01:00 2025 GMT
Subject: CN=b37c581a117c6ac8f08b299d9db16b66c9d4a098
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b7:9c:16:30:cc:7a:89:98:7f:62:2e:a2:e0:
91:b8:fd:e7:a1:c7:bc:96:9c:8b:18:37:7f:77:5b:
c4:e7:d5:ae:77:aa:27:a5:19:19:a0:97:8a:1e:a9:
b2:af:bc:7a:03:65:16:2e:f1:61:f8:29:f8:fd:0f:
45:d3:b4:1a:25:b4:9f:86:92:b1:0a:a1:bc:15:58:
7d:77:d5:ef:78:a2:5a:08:94:28:e1:ab:30:00:3b:
f8:f5:50:8b:c9:3a:0a:3f:63:e0:35:69:e0:a6:77:
bc:05:88:e2:fd:fc:53:09:1e:0b:58:3d:0b:31:f1:
6f:2e:f5:e2:3f:3d:ea:c3:c5:16:a3:4e:02:57:99:
cd:70:5f:d6:6c:4a:c0:b2:7f:e8:e8:31:54:77:a0:
26:b7:9c:e1:32:fb:da:0a:d9:fa:e1:4c:d8:fc:2a:
f9:32:8f:09:db:95:f1:8d:d0:84:68:33:ce:9d:ae:
4c:d5:d6:ab:eb:b0:15:c4:b7:e4:c0:7f:8e:20:e9:
30:04:dd:43:ac:4b:4e:75:4a:f9:b7:b9:2e:63:3d:
62:c8:35:ae:6e:b2:91:27:39:ad:bf:37:80:21:ae:
58:d2:1b:2c:6a:9b:7d:ed:43:5f:81:1e:57:30:98:
95:1e:dd:44:df:d4:e1:0e:aa:6c:cb:b7:3d:af:e2:
cf:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:7C:58:1A:11:7C:6A:C8:F0:8B:29:9D:9D:B1:6B:66:C9:D4:A0:98
X509v3 Authority Key Identifier:
keyid:0C:03:7D:D2:2B:7A:AB:E2:82:22:5A:FB:25:6B:8D:9D:CB:EB:A3:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DAN90it6q-KCIlr7JWuNncvro1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/da81cb-1972-4c9b-9dab-e8f3a66ef558/1/DAN90it6q-KCIlr7JWuNncvro1M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/da81cb-1972-4c9b-9dab-e8f3a66ef558/1/DAN90it6q-KCIlr7JWuNncvro1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:d2:70:b1:93:7c:93:ec:6b:64:8d:76:b7:1d:94:b5:21:9b:
03:32:ba:a0:9b:c0:4f:b0:f6:12:27:45:bf:89:d4:d7:77:c9:
fd:e0:b7:50:bd:bb:8c:cd:5a:39:d0:b1:ea:b9:d4:57:f4:19:
9c:6f:2c:8f:ad:e6:6a:5b:05:07:b6:b1:e1:05:5b:0d:53:94:
a8:64:e4:bb:79:cc:9d:c7:d8:d8:d4:9b:46:e2:91:36:39:df:
0f:3b:05:1d:af:15:b8:2b:d6:c0:06:37:df:16:c5:48:e5:31:
e1:d8:ae:7a:0c:2e:23:ed:fb:e8:fd:29:e1:e6:05:7a:37:cb:
78:2b:63:44:b9:86:67:a5:90:7c:8b:0a:9e:c3:1e:33:04:34:
54:b3:fe:0b:8d:f7:09:fc:da:c7:56:d1:90:53:e8:18:c8:eb:
27:bf:e3:70:a1:76:92:c8:e4:0c:c4:54:ad:a9:e3:66:c2:25:
9f:17:81:8f:49:30:42:4b:16:7f:f8:08:bc:1a:72:29:27:97:
bd:4c:e1:a5:6a:ce:f6:ca:7e:26:59:ad:71:55:d9:2e:9b:eb:
ca:10:df:c8:d2:cc:fe:b2:a0:12:64:74:f6:1f:e8:f9:f2:a6:
e3:70:a3:1c:53:2b:02:df:3d:0e:e1:9b:4e:e0:32:1c:ee:1c:
9f:f5:63:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:50:50 2025 by rpki-client