Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/aa3b42-b601-40b4-b299-bf8e960fe0ad/1/du6ffY5dGMUIhPgzeK5Iui_NpuI.mft
File: du6ffY5dGMUIhPgzeK5Iui_NpuI.mft (raw, json)
Hash identifier: WLaJe+v+O/aHS4nsxyDQK9ptSuWGhdVZMWm66GB7RfU=
Subject key identifier: 72:A5:CA:CE:C0:2E:6C:EA:F3:7F:77:05:B1:02:04:CC:A7:BB:21:83
Authority key identifier: 76:EE:9F:7D:8E:5D:18:C5:08:84:F8:33:78:AE:48:BA:2F:CD:A6:E2
Certificate issuer: /CN=76ee9f7d8e5d18c50884f83378ae48ba2fcda6e2
Certificate serial: 0197B77C846C858E273A7A84E172BFB12028
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/du6ffY5dGMUIhPgzeK5Iui_NpuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/aa3b42-b601-40b4-b299-bf8e960fe0ad/1/du6ffY5dGMUIhPgzeK5Iui_NpuI.mft
Manifest number: 110D
Signing time: Sat 28 Jun 2025 17:01:20 +0000
Manifest this update: Sat 28 Jun 2025 17:01:20 +0000
Manifest next update: Sun 29 Jun 2025 17:01:20 +0000
Files and hashes: 1: du6ffY5dGMUIhPgzeK5Iui_NpuI.crl (hash: XvL+u9UyriJY4cOWdLWZNm2cpmz1HqZ15BQMHw6jxRk=)
2: mXqLLr6nY4_O8xCSHszNUcdYNRQ.roa (hash: mR7ch814nod8YJeRcpIlHri0tj0aQVOIDu8w+ijK6HU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/aa3b42-b601-40b4-b299-bf8e960fe0ad/1/du6ffY5dGMUIhPgzeK5Iui_NpuI.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/aa3b42-b601-40b4-b299-bf8e960fe0ad/1/du6ffY5dGMUIhPgzeK5Iui_NpuI.mft
rsync://rpki.ripe.net/repository/DEFAULT/du6ffY5dGMUIhPgzeK5Iui_NpuI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:84:6c:85:8e:27:3a:7a:84:e1:72:bf:b1:20:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76ee9f7d8e5d18c50884f83378ae48ba2fcda6e2
Validity
Not Before: Jun 28 17:01:20 2025 GMT
Not After : Jun 29 17:01:20 2025 GMT
Subject: CN=72a5cacec02e6ceaf37f7705b10204cca7bb2183
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:72:2e:cc:32:74:f1:f1:0a:0c:b2:9c:b3:db:
e4:9c:39:c5:24:30:2e:17:d6:47:cb:4e:d1:0e:4d:
69:2a:d1:52:6c:5a:50:dc:77:5f:91:a3:b7:c1:f4:
41:ad:7b:10:5b:83:f7:f5:00:43:dc:1e:a9:2b:b5:
c9:c8:74:c3:68:4d:a2:4a:0c:f0:07:96:5f:67:37:
05:0c:f7:a8:80:3d:a9:4e:52:5b:8f:c0:e5:eb:fd:
69:61:24:a5:31:fb:c3:c4:7e:e4:1b:1e:f4:43:4a:
b5:81:18:9d:1b:5a:cd:2e:aa:0c:d5:bd:d2:d6:43:
f8:18:94:44:6b:09:93:d0:3a:80:61:53:f4:f7:4e:
50:25:26:57:54:21:83:6f:49:63:7d:e4:ea:23:8f:
59:28:98:aa:7e:10:51:8c:05:53:9b:12:4f:a5:d1:
4d:6e:60:68:37:c8:f3:4f:c3:8c:41:c0:bb:9d:ac:
5f:d5:eb:6b:14:8a:d0:11:0f:a2:94:25:01:e5:ff:
4f:63:3f:ec:63:ba:04:7e:9f:1b:0a:b5:6b:8c:d2:
dd:8b:55:ec:b9:eb:b6:4f:6d:71:fc:dd:c2:f9:77:
af:b5:e4:01:b2:83:53:eb:b1:cf:3b:15:c1:fb:03:
32:2a:58:66:7a:3d:21:e0:d9:9f:2c:40:69:93:c2:
54:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:A5:CA:CE:C0:2E:6C:EA:F3:7F:77:05:B1:02:04:CC:A7:BB:21:83
X509v3 Authority Key Identifier:
keyid:76:EE:9F:7D:8E:5D:18:C5:08:84:F8:33:78:AE:48:BA:2F:CD:A6:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/du6ffY5dGMUIhPgzeK5Iui_NpuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/aa3b42-b601-40b4-b299-bf8e960fe0ad/1/du6ffY5dGMUIhPgzeK5Iui_NpuI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/aa3b42-b601-40b4-b299-bf8e960fe0ad/1/du6ffY5dGMUIhPgzeK5Iui_NpuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:b0:ca:b5:82:3d:56:97:d9:c0:59:18:2e:45:24:ef:7f:f7:
c6:79:db:67:ae:21:ac:ed:7b:54:d1:d7:20:05:96:be:a3:e4:
0f:4c:02:1e:77:30:de:cc:95:a4:9f:25:5e:70:05:85:34:38:
7c:85:ed:0b:73:38:47:4b:50:e0:73:af:1f:05:12:d7:66:97:
d9:93:46:51:36:f5:1c:67:66:01:8f:92:91:d7:b7:49:21:28:
28:b5:c1:c8:bb:71:2c:ad:a9:06:16:2a:01:6e:82:c6:31:f5:
d3:17:bd:74:f8:8d:34:a2:ee:a1:5c:27:d8:41:99:ac:22:47:
b1:c1:08:23:66:42:3a:9a:3a:a7:d5:ad:bd:b8:a5:bd:12:ca:
6e:4d:c6:9f:9a:53:d8:14:e5:70:86:db:dd:d6:a4:5f:d2:4b:
07:82:8e:8f:65:20:b6:8f:0d:14:c8:39:2b:ac:65:ec:6c:ec:
5f:c6:6d:c5:e6:26:92:77:a1:48:85:d0:92:de:80:10:0a:c9:
fd:3c:90:e4:a9:94:2d:37:e2:d2:88:41:9a:f2:dd:ee:29:06:
b3:5e:50:ad:66:ae:10:9a:5f:f2:b3:ca:7a:cb:5f:34:58:9a:
16:39:f7:86:06:1d:4b:fc:24:f6:2d:8b:52:d1:2a:59:c3:99:
c6:7a:56:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:40:31 2025 by rpki-client