Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/9ec134-f04f-4423-8be5-7f5e1759f84e/1/dxBykg2MmitA6zoEXx8qbjNKRJY.mft
File: dxBykg2MmitA6zoEXx8qbjNKRJY.mft (raw, json)
Hash identifier: FED05c/VJ6KwMjGhdVxmPE+dXAYz09tZzaIRUrPZ0GQ=
Subject key identifier: EE:24:03:96:73:64:26:9A:3B:B9:22:22:B3:12:DA:55:78:C4:1F:A0
Authority key identifier: 77:10:72:92:0D:8C:9A:2B:40:EB:3A:04:5F:1F:2A:6E:33:4A:44:96
Certificate issuer: /CN=771072920d8c9a2b40eb3a045f1f2a6e334a4496
Certificate serial: 0197CDCDBF7147E57548C2CD0C9851F7F171
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dxBykg2MmitA6zoEXx8qbjNKRJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/9ec134-f04f-4423-8be5-7f5e1759f84e/1/dxBykg2MmitA6zoEXx8qbjNKRJY.mft
Manifest number: 15C3
Signing time: Thu 03 Jul 2025 01:01:42 +0000
Manifest this update: Thu 03 Jul 2025 01:01:42 +0000
Manifest next update: Fri 04 Jul 2025 01:01:42 +0000
Files and hashes: 1: YkTwnLLBjio1cr_ngfAfzZs1Hh0.roa (hash: Y9RRPtZapEofyZ5MjGOGJpjlqTcZ/UM1TnoKmtwIB40=)
2: dxBykg2MmitA6zoEXx8qbjNKRJY.crl (hash: uiX1unXLKDgdcLW/jhf/RT/jtySSNAxgAvMQfLCjjpU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/9ec134-f04f-4423-8be5-7f5e1759f84e/1/dxBykg2MmitA6zoEXx8qbjNKRJY.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/9ec134-f04f-4423-8be5-7f5e1759f84e/1/dxBykg2MmitA6zoEXx8qbjNKRJY.mft
rsync://rpki.ripe.net/repository/DEFAULT/dxBykg2MmitA6zoEXx8qbjNKRJY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 20:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cd:cd:bf:71:47:e5:75:48:c2:cd:0c:98:51:f7:f1:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=771072920d8c9a2b40eb3a045f1f2a6e334a4496
Validity
Not Before: Jul 3 01:01:42 2025 GMT
Not After : Jul 4 01:01:42 2025 GMT
Subject: CN=ee2403967364269a3bb92222b312da5578c41fa0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:9d:bf:d7:52:04:ea:3c:02:0d:25:1c:ef:0e:
5b:01:3a:a2:0e:2e:12:20:77:91:ff:d0:41:07:86:
da:53:53:e0:78:4f:17:e2:35:38:e0:0e:40:24:92:
fb:b8:f3:d7:9f:7e:05:57:14:19:cb:99:c5:35:14:
c3:30:f1:9f:c5:01:fd:fe:16:dc:1a:a5:be:77:f8:
d2:e0:6b:57:e6:3f:62:39:13:b5:04:2f:c8:ec:60:
32:f3:3b:fc:8f:5d:dd:de:a4:14:3d:15:cb:b4:e5:
24:73:ba:e3:60:6b:36:13:eb:05:da:06:b4:4d:7c:
35:d4:ef:2f:86:10:bc:2e:e7:63:4c:3d:e5:5e:49:
b2:d9:20:77:b5:b0:06:b6:05:93:51:48:41:d4:74:
d8:ec:ea:7b:62:24:ff:99:d2:1a:bd:c2:5c:9f:98:
08:56:c2:88:60:46:bd:20:c3:fc:14:ec:ac:85:49:
84:5f:fc:95:92:66:57:72:5d:01:b3:29:a7:74:64:
36:13:96:08:a2:7f:85:6e:5f:c4:ab:d6:1d:e9:6e:
f4:94:0e:23:f9:02:dc:25:72:2b:cc:28:3d:04:75:
c9:b5:72:1c:1a:25:56:43:96:1b:cf:70:96:ba:ef:
d2:5c:c9:e2:e8:a8:63:f7:9f:65:5c:58:af:73:f4:
08:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:24:03:96:73:64:26:9A:3B:B9:22:22:B3:12:DA:55:78:C4:1F:A0
X509v3 Authority Key Identifier:
keyid:77:10:72:92:0D:8C:9A:2B:40:EB:3A:04:5F:1F:2A:6E:33:4A:44:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dxBykg2MmitA6zoEXx8qbjNKRJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/9ec134-f04f-4423-8be5-7f5e1759f84e/1/dxBykg2MmitA6zoEXx8qbjNKRJY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/9ec134-f04f-4423-8be5-7f5e1759f84e/1/dxBykg2MmitA6zoEXx8qbjNKRJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:aa:ae:62:79:9f:4f:44:20:5e:c4:a8:30:42:62:76:34:a1:
bc:0b:58:b1:bb:4f:de:54:e1:c0:a6:af:24:2d:e2:25:1f:2b:
84:02:6b:21:01:01:dc:c3:c3:81:d3:2d:54:ea:e0:00:69:63:
40:41:db:a0:f3:e3:2b:e4:9e:e6:8a:40:09:fc:78:a9:07:fa:
4a:af:3b:ed:02:53:6d:a1:67:75:5e:cd:8f:72:2a:53:34:22:
d2:8d:41:01:86:5a:71:57:76:7f:5d:03:3f:f8:ad:83:07:02:
a0:97:58:9a:6f:f1:ec:34:bd:30:b9:15:39:8d:57:5a:b4:92:
de:cc:06:1b:f5:2c:31:6a:32:f8:31:1e:5f:be:24:de:86:88:
2f:3b:c3:21:da:e8:bc:e0:a4:b9:db:52:52:70:2c:6c:a1:fa:
ab:6c:85:23:ac:fd:67:ad:62:1c:d5:e2:4d:4e:31:0b:c6:13:
e5:b9:45:bd:2e:ba:b9:b9:a6:0b:b2:0a:0f:ca:b4:88:97:83:
a1:60:e5:c0:fc:f5:b8:62:fc:4a:fb:91:ac:38:02:6b:f1:1b:
72:36:19:10:33:c4:65:45:8c:7d:cd:d6:02:4a:0c:9f:3d:63:
3d:ce:4c:56:6b:3e:23:c3:94:cc:9d:62:1a:6a:25:29:f7:98:
08:e2:65:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 04:17:47 2025 by rpki-client