Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/5befa7-87fd-44a2-b1f4-3e8f575eddff/1/dhwFdTsZvNtTL9x_b0fpfpNboKI.mft
File: dhwFdTsZvNtTL9x_b0fpfpNboKI.mft (raw, json)
Hash identifier: sNyd3UiIuYkw9ldJ7TuHczUnrdR7t3T3AnCGCYzG/F4=
Subject key identifier: 9F:BA:07:BF:01:6C:E6:83:FF:9E:5B:9B:37:CD:7F:FB:11:35:78:DB
Authority key identifier: 76:1C:05:75:3B:19:BC:DB:53:2F:DC:7F:6F:47:E9:7E:93:5B:A0:A2
Certificate issuer: /CN=761c05753b19bcdb532fdc7f6f47e97e935ba0a2
Certificate serial: 0197B77CCEB8E7FA1F3EB4B063682C0276ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dhwFdTsZvNtTL9x_b0fpfpNboKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/5befa7-87fd-44a2-b1f4-3e8f575eddff/1/dhwFdTsZvNtTL9x_b0fpfpNboKI.mft
Manifest number: 1095
Signing time: Sat 28 Jun 2025 17:01:39 +0000
Manifest this update: Sat 28 Jun 2025 17:01:39 +0000
Manifest next update: Sun 29 Jun 2025 17:01:39 +0000
Files and hashes: 1: dhwFdTsZvNtTL9x_b0fpfpNboKI.crl (hash: +IO5DOU1M5E+n5hiDq8HsxP7uqWsp2rg+9JnEodGot8=)
2: xzA5d-E1vgeb4mwlvmzNBazR01w.roa (hash: ajfP28ApDq4Q5y/sbVJlhsT7w2HrFwDNTtJP+3l1w9U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/5befa7-87fd-44a2-b1f4-3e8f575eddff/1/dhwFdTsZvNtTL9x_b0fpfpNboKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/5befa7-87fd-44a2-b1f4-3e8f575eddff/1/dhwFdTsZvNtTL9x_b0fpfpNboKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dhwFdTsZvNtTL9x_b0fpfpNboKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:ce:b8:e7:fa:1f:3e:b4:b0:63:68:2c:02:76:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=761c05753b19bcdb532fdc7f6f47e97e935ba0a2
Validity
Not Before: Jun 28 17:01:39 2025 GMT
Not After : Jun 29 17:01:39 2025 GMT
Subject: CN=9fba07bf016ce683ff9e5b9b37cd7ffb113578db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:94:fa:a8:e5:3a:3a:95:60:d5:80:af:a7:da:
5e:54:16:c9:f4:13:c2:67:e8:06:a7:0a:93:99:17:
0b:51:ca:d2:94:59:2f:77:0a:9f:22:1e:1f:fd:ab:
93:e2:ca:76:9a:18:7f:85:a9:84:b8:a7:a2:ee:75:
ac:90:24:6a:ab:3d:7c:89:69:5f:43:06:af:a9:80:
e6:d2:3c:ea:7c:80:03:fa:77:b1:3f:37:c6:d7:28:
1f:37:6d:cd:8a:0f:f6:af:f8:ab:0e:6f:11:53:84:
ce:b7:4e:46:38:76:c9:43:c5:1a:0f:f6:3c:76:18:
6e:a2:2b:52:7b:bd:1f:34:b3:1c:f5:39:8f:05:33:
20:05:d4:46:06:1e:6d:94:58:a3:58:78:4c:e0:14:
c6:32:3a:a8:b0:c2:f1:df:ca:18:55:47:20:b1:c5:
1c:fd:84:2e:2b:fb:fa:9b:c2:bf:35:28:53:ea:f8:
28:d7:b4:2f:aa:bc:16:dd:a0:17:97:47:58:ab:1b:
72:e2:5e:e6:60:18:a2:1d:7c:ce:f5:eb:07:29:46:
9c:ea:c0:ea:9e:67:98:a7:cc:f9:ff:bd:74:1b:72:
fb:9c:1e:ad:c8:96:f1:a0:05:ed:d4:0f:df:c3:80:
9c:6f:9f:9b:de:6a:e2:0f:d9:ea:41:ef:b7:e7:ef:
7b:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:BA:07:BF:01:6C:E6:83:FF:9E:5B:9B:37:CD:7F:FB:11:35:78:DB
X509v3 Authority Key Identifier:
keyid:76:1C:05:75:3B:19:BC:DB:53:2F:DC:7F:6F:47:E9:7E:93:5B:A0:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dhwFdTsZvNtTL9x_b0fpfpNboKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5befa7-87fd-44a2-b1f4-3e8f575eddff/1/dhwFdTsZvNtTL9x_b0fpfpNboKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5befa7-87fd-44a2-b1f4-3e8f575eddff/1/dhwFdTsZvNtTL9x_b0fpfpNboKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:55:21:da:96:94:20:db:46:0e:c4:b8:e8:75:3c:c6:54:2b:
51:67:57:47:46:4c:96:bb:be:7a:87:23:c8:24:04:82:af:84:
26:a7:5d:d3:9f:16:b6:9c:46:f7:ba:3f:cf:30:83:5b:ec:38:
0f:c9:4c:b9:71:a3:0a:1d:8b:ef:5a:a1:6d:7b:05:cf:af:41:
97:fe:90:4a:7b:c2:2a:64:7a:04:a0:e7:77:63:7a:e4:08:5e:
e5:c8:bf:ec:c9:be:01:48:ac:b7:c3:69:2e:20:bc:f9:0c:63:
8e:20:d6:b4:ca:25:28:25:82:93:eb:4b:1d:f7:ff:20:0b:de:
4d:b0:d7:bf:2d:bb:a5:90:d4:a2:10:44:3d:5d:0c:85:57:81:
ee:05:62:c0:0b:98:45:e6:52:89:61:a6:af:6f:78:f9:a8:01:
d8:6e:01:f6:07:24:6c:a7:28:92:2d:03:56:12:23:1d:05:bd:
7d:c6:22:a4:9e:4a:4d:45:05:69:df:c3:65:f4:26:fa:11:7a:
ce:63:24:bf:05:13:09:ba:b2:b8:07:12:18:db:be:ea:8f:05:
93:5b:22:12:f2:6e:ea:55:44:ee:3b:80:26:b4:a0:9e:7b:cf:
9c:4e:b5:ec:43:3d:78:b2:f3:8e:ea:9e:0a:7a:b3:57:85:99:
4a:05:be:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:58:15 2025 by rpki-client