Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/589a15-9c52-4a1b-8d32-b8aab3323524/1/DsOtX_ZbjctHYinxLUV9d2GguXw.mft
File: DsOtX_ZbjctHYinxLUV9d2GguXw.mft (raw, json)
Hash identifier: JmAfctH53yp57zqqgESs8tNXT2kJ6YoLYAOqW8yH4ck=
Subject key identifier: E5:64:39:5A:E8:13:2F:CE:88:2E:99:FA:D4:65:C4:0C:95:1D:45:0A
Authority key identifier: 0E:C3:AD:5F:F6:5B:8D:CB:47:62:29:F1:2D:45:7D:77:61:A0:B9:7C
Certificate issuer: /CN=0ec3ad5ff65b8dcb476229f12d457d7761a0b97c
Certificate serial: 0197B632EB6746AF61EF5B7EFA70F71064F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DsOtX_ZbjctHYinxLUV9d2GguXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/589a15-9c52-4a1b-8d32-b8aab3323524/1/DsOtX_ZbjctHYinxLUV9d2GguXw.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 11:01:19 +0000
Manifest this update: Sat 28 Jun 2025 11:01:19 +0000
Manifest next update: Sun 29 Jun 2025 11:01:19 +0000
Files and hashes: 1: DsOtX_ZbjctHYinxLUV9d2GguXw.crl (hash: e9xZCRR5rrKJzrDsBDcv7/FR/+Vzpp3NhVKjRAv1rFE=)
2: V9zLJ_snXWssBPY1Rmgu3ZTD-rU.roa (hash: hUff0lfnMQTwyppmA7CbM6Vyj9Moq1TvnfUvdLLp36w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/589a15-9c52-4a1b-8d32-b8aab3323524/1/DsOtX_ZbjctHYinxLUV9d2GguXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/589a15-9c52-4a1b-8d32-b8aab3323524/1/DsOtX_ZbjctHYinxLUV9d2GguXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/DsOtX_ZbjctHYinxLUV9d2GguXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 11:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:32:eb:67:46:af:61:ef:5b:7e:fa:70:f7:10:64:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ec3ad5ff65b8dcb476229f12d457d7761a0b97c
Validity
Not Before: Jun 28 11:01:19 2025 GMT
Not After : Jun 29 11:01:19 2025 GMT
Subject: CN=e564395ae8132fce882e99fad465c40c951d450a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:74:7e:77:eb:66:94:da:34:7d:06:b1:32:4b:
53:32:7d:9b:5d:5b:7b:f1:e8:ad:5b:64:f1:82:ff:
7c:49:ef:0c:85:f4:07:b7:f7:99:74:9b:fa:f7:49:
d0:37:d1:f6:9c:17:6b:9d:e8:c4:63:68:b0:ed:24:
96:ef:2f:03:48:4c:b0:e6:8a:ad:84:52:1c:21:66:
cf:8b:f1:02:09:6b:0c:be:54:60:e9:3c:bf:7e:e5:
bc:95:cc:da:e3:cc:d0:2a:b4:b0:08:e6:de:71:95:
3c:de:5d:50:02:72:f0:54:94:53:5f:27:14:ee:20:
5f:84:95:97:01:60:d5:27:ab:cb:f7:b5:82:f6:d2:
08:c8:3e:2b:9d:7e:46:e8:01:b0:8c:c7:5d:3b:2d:
c1:9a:9b:14:cf:d8:59:4c:7d:b8:61:e0:ac:8e:48:
38:84:11:da:10:cb:c5:9d:d0:52:20:c7:ae:a4:7d:
b4:60:c0:60:f2:68:81:82:52:36:c3:33:4d:d9:ec:
b5:77:6d:25:5d:55:d2:8e:47:a9:c6:25:d5:62:de:
83:59:73:67:cd:6d:b2:9c:a8:15:f9:ba:33:8c:72:
21:8d:c5:43:6f:0a:32:7d:f2:d9:da:6b:53:bd:da:
da:7d:d6:ad:ae:20:35:7a:2d:3e:3b:c8:d7:91:e9:
da:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:64:39:5A:E8:13:2F:CE:88:2E:99:FA:D4:65:C4:0C:95:1D:45:0A
X509v3 Authority Key Identifier:
keyid:0E:C3:AD:5F:F6:5B:8D:CB:47:62:29:F1:2D:45:7D:77:61:A0:B9:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DsOtX_ZbjctHYinxLUV9d2GguXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/589a15-9c52-4a1b-8d32-b8aab3323524/1/DsOtX_ZbjctHYinxLUV9d2GguXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/589a15-9c52-4a1b-8d32-b8aab3323524/1/DsOtX_ZbjctHYinxLUV9d2GguXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:fd:c5:0b:62:9f:c0:64:62:b7:13:0e:36:45:44:27:7d:bc:
c1:aa:c6:21:8e:cf:64:cb:30:36:d9:dd:69:c6:b3:26:56:9a:
68:a9:4c:f0:e3:02:10:8a:6e:6f:c8:c1:5f:ab:e2:09:d1:7a:
3e:3b:5f:87:86:d1:93:c2:79:77:1f:29:74:4f:99:18:21:83:
06:7a:d1:13:0f:74:8b:02:df:69:14:08:0d:6f:ac:fb:a0:73:
f0:66:92:f6:74:b2:84:e4:4a:34:65:35:f6:78:83:64:e5:5b:
4a:fc:82:27:56:e9:6b:e2:95:b2:4d:3e:58:a8:e7:4e:af:54:
88:39:03:ef:32:4d:a5:bc:58:f3:29:16:5e:87:75:67:6c:fd:
5f:70:c2:3f:a3:2a:3f:a2:5d:be:a4:d6:8e:39:20:45:7f:43:
4d:95:40:a6:df:73:76:8c:07:00:0d:41:23:29:59:a6:96:db:
98:8e:41:94:ea:1a:35:64:32:ec:10:b2:50:21:7d:a9:fe:12:
13:f7:f0:f4:e1:5f:f0:a9:e4:5a:f8:a2:99:04:68:ec:e9:22:
f1:6d:e4:cf:10:7c:e1:ab:28:45:e3:28:2a:78:ed:51:29:25:
29:2a:9f:ba:89:01:4d:53:c4:9a:58:a8:17:9e:ac:f4:d2:08:
95:9d:f5:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:40:52 2025 by rpki-client