Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/df99d3-5028-4361-b795-3af4a9463b77/1/Dv0crRIZAnVQiePKgLptfMxLm3E.mft
File: Dv0crRIZAnVQiePKgLptfMxLm3E.mft (raw, json)
Hash identifier: eFopAg6fMQoH1xiiD732HbKoW/qVqYBh1FsFNGRrcL0=
Subject key identifier: C7:3D:2D:5B:8B:4D:7C:6A:2B:5F:AB:B1:64:1C:01:16:9B:C5:5F:7A
Authority key identifier: 0E:FD:1C:AD:12:19:02:75:50:89:E3:CA:80:BA:6D:7C:CC:4B:9B:71
Certificate issuer: /CN=0efd1cad121902755089e3ca80ba6d7ccc4b9b71
Certificate serial: 0197B7B369010D2DE7077E77FC73B9BA3D28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dv0crRIZAnVQiePKgLptfMxLm3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/df99d3-5028-4361-b795-3af4a9463b77/1/Dv0crRIZAnVQiePKgLptfMxLm3E.mft
Manifest number: 0BB1
Signing time: Sat 28 Jun 2025 18:01:17 +0000
Manifest this update: Sat 28 Jun 2025 18:01:17 +0000
Manifest next update: Sun 29 Jun 2025 18:01:17 +0000
Files and hashes: 1: Dv0crRIZAnVQiePKgLptfMxLm3E.crl (hash: tGVGxhXqYNdcqiq9CGs6aGP6vXdta9CB/fljVlWeIxc=)
2: kzypufx1A54QL9RnefA55meWSPM.roa (hash: cK+sc1FxI2UgckK1YuVxFsSFuYcOk8chhmHAVw1PhQ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/df99d3-5028-4361-b795-3af4a9463b77/1/Dv0crRIZAnVQiePKgLptfMxLm3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/df99d3-5028-4361-b795-3af4a9463b77/1/Dv0crRIZAnVQiePKgLptfMxLm3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dv0crRIZAnVQiePKgLptfMxLm3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:69:01:0d:2d:e7:07:7e:77:fc:73:b9:ba:3d:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0efd1cad121902755089e3ca80ba6d7ccc4b9b71
Validity
Not Before: Jun 28 18:01:17 2025 GMT
Not After : Jun 29 18:01:17 2025 GMT
Subject: CN=c73d2d5b8b4d7c6a2b5fabb1641c01169bc55f7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:86:26:52:ba:15:4d:60:37:a9:00:f0:06:be:
15:b0:67:15:6e:dd:d4:23:df:15:fa:a2:5e:d7:9e:
38:78:3f:5f:90:28:4b:1a:cc:da:4c:4c:09:3a:61:
83:73:bf:a0:0e:c6:4b:f4:24:da:b6:6f:b7:e9:c9:
c2:e9:f4:95:5d:60:1b:a9:85:6f:13:e0:7b:d3:c4:
00:d8:ca:6d:a3:36:8e:af:00:49:f1:4b:0b:32:9f:
7a:d1:23:65:81:fd:86:6d:4a:d6:88:95:aa:9b:cb:
3e:aa:70:6e:66:ab:a8:03:77:fc:4d:bb:a2:0f:c7:
f1:fb:2b:ad:6e:43:37:06:ac:f2:ae:d8:a2:2b:cd:
0f:0b:f8:b8:27:3b:79:d0:58:09:a8:ba:7e:e6:13:
b0:52:98:55:6b:74:17:0f:64:0c:66:0b:47:ab:a5:
84:c0:de:1a:dc:89:a3:53:d0:c6:ba:27:a0:de:0a:
ed:40:e9:81:74:0f:54:d9:fe:e8:13:05:c4:fe:3b:
89:5a:f1:ff:7b:4d:8d:1b:f3:90:b5:3d:31:45:d8:
ba:9f:de:24:73:52:76:72:3f:f5:2f:e3:49:19:e8:
5a:af:03:16:9c:e8:58:a5:15:b7:f8:ef:bb:c1:c3:
9a:47:d5:82:52:47:73:28:3a:6d:91:f6:83:ac:ed:
10:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:3D:2D:5B:8B:4D:7C:6A:2B:5F:AB:B1:64:1C:01:16:9B:C5:5F:7A
X509v3 Authority Key Identifier:
keyid:0E:FD:1C:AD:12:19:02:75:50:89:E3:CA:80:BA:6D:7C:CC:4B:9B:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dv0crRIZAnVQiePKgLptfMxLm3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/df99d3-5028-4361-b795-3af4a9463b77/1/Dv0crRIZAnVQiePKgLptfMxLm3E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/df99d3-5028-4361-b795-3af4a9463b77/1/Dv0crRIZAnVQiePKgLptfMxLm3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:fe:ef:31:06:86:9b:06:0b:53:8d:9c:c2:4a:e6:89:d6:3a:
34:76:8b:b1:8b:10:e0:1a:b7:39:db:e4:be:17:5b:22:15:1d:
15:a3:37:d1:3a:2c:e2:47:06:60:ff:47:de:92:e2:31:78:81:
ba:94:a6:60:c3:5e:1d:bb:4e:1e:be:c9:91:8b:9f:5e:1a:61:
de:d7:62:1b:8c:df:4f:a4:85:9f:61:c1:76:a6:2f:63:31:5c:
29:af:d7:e5:47:96:32:24:58:6e:5e:cf:f1:b9:e2:09:dd:9a:
94:df:12:58:25:88:16:24:22:19:6e:8c:e1:57:e7:41:f9:28:
a2:c3:8e:28:f7:92:b8:bf:e2:fc:de:8d:20:ff:6e:48:89:5e:
54:f0:6b:61:53:06:97:38:0f:85:42:98:eb:04:03:6b:1a:8d:
b5:d0:bd:8e:91:0f:46:23:01:fa:19:ff:90:26:ad:75:36:9b:
0b:23:ed:fe:04:9f:42:0f:a8:b0:6f:5a:fe:f8:16:25:ed:63:
c1:c2:df:c5:1a:7c:a9:2e:a8:5f:29:2e:c3:2d:a9:81:ed:8d:
b2:b1:39:7b:40:c7:c8:6e:ab:3e:54:3c:2d:0a:1d:bb:88:55:
c7:ec:fc:dc:21:de:e5:af:a5:91:bd:cc:f2:c7:39:5f:60:c3:
a0:7d:fb:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:50:48 2025 by rpki-client