Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/4df8f1-241d-4339-b0f6-d65ad430beb7/1/DSkZIlh_dQ94oZeVy9ibxymvF9U.mft
File: DSkZIlh_dQ94oZeVy9ibxymvF9U.mft (raw, json)
Hash identifier: SvyxuWIWLTkn+IJ8mC23QsdYPBVj80nq14O3pyH0qdw=
Subject key identifier: 99:20:90:B0:73:46:AB:BA:5C:72:A5:40:CD:12:49:1F:B9:2C:12:07
Authority key identifier: 0D:29:19:22:58:7F:75:0F:78:A1:97:95:CB:D8:9B:C7:29:AF:17:D5
Certificate issuer: /CN=0d291922587f750f78a19795cbd89bc729af17d5
Certificate serial: 0197B70E4DAF4E00CB2F07FDB8989E9B4B85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DSkZIlh_dQ94oZeVy9ibxymvF9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/4df8f1-241d-4339-b0f6-d65ad430beb7/1/DSkZIlh_dQ94oZeVy9ibxymvF9U.mft
Manifest number: 122D
Signing time: Sat 28 Jun 2025 15:00:57 +0000
Manifest this update: Sat 28 Jun 2025 15:00:57 +0000
Manifest next update: Sun 29 Jun 2025 15:00:57 +0000
Files and hashes: 1: 1g3YzsLZ5QOCf6qi-eFi1LVqHQ8.roa (hash: +wFJ5tj+lSmxnwgEedsXBX4o8rthXQtXpU++hvEpCkM=)
2: DSkZIlh_dQ94oZeVy9ibxymvF9U.crl (hash: jUhWRnI3si77GDwRxoFRE64AFBvNtzOWRw0rk1tecbY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/4df8f1-241d-4339-b0f6-d65ad430beb7/1/DSkZIlh_dQ94oZeVy9ibxymvF9U.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/4df8f1-241d-4339-b0f6-d65ad430beb7/1/DSkZIlh_dQ94oZeVy9ibxymvF9U.mft
rsync://rpki.ripe.net/repository/DEFAULT/DSkZIlh_dQ94oZeVy9ibxymvF9U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:4d:af:4e:00:cb:2f:07:fd:b8:98:9e:9b:4b:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d291922587f750f78a19795cbd89bc729af17d5
Validity
Not Before: Jun 28 15:00:57 2025 GMT
Not After : Jun 29 15:00:57 2025 GMT
Subject: CN=992090b07346abba5c72a540cd12491fb92c1207
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:1b:cd:ce:c3:44:10:bb:4d:30:2b:12:8e:02:
12:8c:f7:57:e0:30:28:a3:0d:0e:cf:41:aa:04:bb:
c3:8b:21:b0:28:1a:20:28:27:21:76:89:3d:76:11:
8c:39:51:1d:31:c1:2e:63:70:fa:c1:62:c5:26:63:
e9:c0:dc:2d:24:26:a2:b9:b1:05:20:21:04:d1:7c:
6d:a3:ea:e9:f3:b9:30:bc:34:24:a4:77:5e:fe:72:
54:1d:8f:75:08:66:31:a7:87:20:b2:eb:a8:06:5f:
cf:d5:2f:bd:1f:21:70:41:3a:a1:47:69:e7:c5:9a:
4d:c7:be:68:fb:62:4a:1e:97:4a:bb:5f:3c:3b:1c:
d5:57:47:9b:bc:77:22:42:66:bb:3e:8d:a7:4b:29:
07:8d:9c:b3:d6:c6:38:ab:ba:e5:24:c6:8e:c0:13:
15:77:2c:bd:8d:80:75:2a:9f:0a:5e:10:b3:31:0b:
b8:66:b0:be:cb:85:7c:1f:b7:06:f6:02:9f:34:78:
1d:fb:e3:43:65:bb:6a:0c:ed:a4:56:16:54:12:85:
12:1d:8a:3c:cb:4b:37:a0:f9:28:65:e7:40:58:44:
17:56:2a:f7:c7:11:97:a4:6f:dd:c6:2e:1b:56:63:
c2:0d:f0:26:6f:c2:03:aa:5f:f3:1f:fd:f5:8f:8c:
9a:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:20:90:B0:73:46:AB:BA:5C:72:A5:40:CD:12:49:1F:B9:2C:12:07
X509v3 Authority Key Identifier:
keyid:0D:29:19:22:58:7F:75:0F:78:A1:97:95:CB:D8:9B:C7:29:AF:17:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DSkZIlh_dQ94oZeVy9ibxymvF9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/4df8f1-241d-4339-b0f6-d65ad430beb7/1/DSkZIlh_dQ94oZeVy9ibxymvF9U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/4df8f1-241d-4339-b0f6-d65ad430beb7/1/DSkZIlh_dQ94oZeVy9ibxymvF9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:33:c8:5e:6a:f2:7d:17:db:85:42:20:93:46:a3:fa:21:4e:
b7:f4:ff:c8:ac:4a:02:43:bb:8f:db:6f:52:71:50:52:8b:ce:
8f:79:b5:52:58:8b:94:b5:40:b0:64:af:b6:20:0c:9e:dd:11:
49:f7:9e:be:8c:51:6f:2c:c1:c1:6a:83:5c:31:ca:29:9d:79:
6c:95:8f:be:29:53:fc:c2:e8:19:05:51:9c:1d:e7:0c:3c:97:
31:22:d8:d7:b4:6b:87:7a:0e:1a:7c:e3:64:83:15:11:03:b2:
db:bf:e8:68:b4:93:ba:ee:17:1a:a7:e0:87:04:57:cd:7e:d1:
8f:73:53:cb:9d:e0:7e:e7:33:a9:e1:51:d9:cc:91:63:b2:0d:
68:be:4f:61:dd:7c:42:64:4b:aa:06:1b:af:64:55:57:90:0a:
e0:7c:f1:c0:b0:eb:d4:60:aa:a5:af:ef:14:49:a1:e0:dd:f7:
89:87:46:23:09:71:4f:a8:db:36:84:d9:a2:cb:4e:cd:82:27:
c3:9d:8a:b2:fd:6e:09:33:54:01:77:cc:9a:a6:60:16:b9:5d:
65:62:5b:84:ee:d0:66:37:7f:a2:0c:98:6a:70:3a:76:28:4f:
ea:e3:95:d4:05:1c:58:bc:c7:f4:ce:6b:3c:52:f0:7d:ae:eb:
fd:33:4e:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:28:39 2025 by rpki-client