Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/0841b5-1955-4f00-8bf1-289f95893e84/1/D-Gntqa4WzwyZ8gDmW7YGKSmZHk.mft
File: D-Gntqa4WzwyZ8gDmW7YGKSmZHk.mft (raw, json)
Hash identifier: blogTS4RYuyu8H7w1K7GEcXQQX+y+Pk3mpE28UPM/W4=
Subject key identifier: 81:3E:DE:E8:4C:7F:D3:20:EA:7C:1F:95:9F:35:4C:AC:56:9F:D7:EB
Authority key identifier: 0F:E1:A7:B6:A6:B8:5B:3C:32:67:C8:03:99:6E:D8:18:A4:A6:64:79
Certificate issuer: /CN=0fe1a7b6a6b85b3c3267c803996ed818a4a66479
Certificate serial: 0197B70E4D2144672865AA97EFF5294ADB30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D-Gntqa4WzwyZ8gDmW7YGKSmZHk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/0841b5-1955-4f00-8bf1-289f95893e84/1/D-Gntqa4WzwyZ8gDmW7YGKSmZHk.mft
Manifest number: DD
Signing time: Sat 28 Jun 2025 15:00:57 +0000
Manifest this update: Sat 28 Jun 2025 15:00:57 +0000
Manifest next update: Sun 29 Jun 2025 15:00:57 +0000
Files and hashes: 1: D-Gntqa4WzwyZ8gDmW7YGKSmZHk.crl (hash: qtD33mGmSnTghZvcIrTAhhDKWc28BE8bskDZfgcjTJk=)
2: jcTO1fBkVXsp4y6wlcBbebFM8iw.roa (hash: NkT9ooqiKYOuDT79Rkr1WXdOvqeB/1D8TcQH5fNDnzE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/0841b5-1955-4f00-8bf1-289f95893e84/1/D-Gntqa4WzwyZ8gDmW7YGKSmZHk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/0841b5-1955-4f00-8bf1-289f95893e84/1/D-Gntqa4WzwyZ8gDmW7YGKSmZHk.mft
rsync://rpki.ripe.net/repository/DEFAULT/D-Gntqa4WzwyZ8gDmW7YGKSmZHk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:4d:21:44:67:28:65:aa:97:ef:f5:29:4a:db:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fe1a7b6a6b85b3c3267c803996ed818a4a66479
Validity
Not Before: Jun 28 15:00:57 2025 GMT
Not After : Jun 29 15:00:57 2025 GMT
Subject: CN=813edee84c7fd320ea7c1f959f354cac569fd7eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:33:43:58:41:eb:ce:8f:a5:e3:dd:7c:8f:31:
36:e7:e1:bf:32:99:e3:f6:e3:0f:8b:32:34:fd:89:
c1:14:08:43:dd:42:94:32:57:8c:78:20:8f:fd:d4:
5b:ff:88:db:a2:3d:bc:9a:5f:46:b8:3c:a8:a5:62:
63:aa:c5:55:b9:cd:09:76:1b:a9:d0:d4:3c:a8:b4:
ab:8c:fa:c4:5d:f3:5f:8a:af:81:6b:29:e8:c7:bf:
dc:0a:6e:65:95:fb:93:a7:37:20:a9:da:76:24:19:
a1:3a:3c:26:01:95:68:2c:10:c8:e7:fd:11:33:d1:
44:2f:7a:25:a8:72:a2:9f:d5:b8:43:32:29:2e:70:
4c:16:3f:d3:6f:3d:2e:c0:19:92:1b:ca:ab:c9:77:
27:ba:59:2b:24:21:45:3b:33:ca:2e:67:e1:61:fb:
13:e2:6e:c9:d9:9e:e7:5c:b3:7e:2b:58:b0:71:51:
aa:73:52:10:3a:c0:56:19:aa:bf:88:bc:1a:97:11:
5c:c9:90:aa:da:93:39:a9:86:15:4c:6b:42:39:de:
c7:34:09:64:14:c1:fd:10:77:a2:e2:9b:20:bf:72:
35:f9:44:e8:7c:1e:be:62:76:21:2c:87:b0:39:dd:
36:76:89:4a:0d:07:39:ad:db:b4:a8:98:f2:4e:20:
cf:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:3E:DE:E8:4C:7F:D3:20:EA:7C:1F:95:9F:35:4C:AC:56:9F:D7:EB
X509v3 Authority Key Identifier:
keyid:0F:E1:A7:B6:A6:B8:5B:3C:32:67:C8:03:99:6E:D8:18:A4:A6:64:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D-Gntqa4WzwyZ8gDmW7YGKSmZHk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/0841b5-1955-4f00-8bf1-289f95893e84/1/D-Gntqa4WzwyZ8gDmW7YGKSmZHk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/0841b5-1955-4f00-8bf1-289f95893e84/1/D-Gntqa4WzwyZ8gDmW7YGKSmZHk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:4c:a2:d2:62:8d:aa:72:69:86:16:92:df:9d:d5:b2:c6:89:
39:99:48:e2:90:ba:60:af:9c:2f:03:72:da:6b:04:c4:bc:3f:
ab:2d:30:34:71:aa:30:50:e8:e8:7a:d2:1b:45:44:30:e9:48:
c9:92:56:96:39:59:48:fd:25:b3:cb:af:10:3f:2f:b3:6d:98:
b7:af:42:d8:fb:7b:6e:14:93:7c:e0:67:45:96:46:02:37:d3:
e5:05:01:35:bb:01:c9:69:e1:5b:30:66:28:db:bb:90:35:ae:
57:2d:48:e3:ae:1d:25:7f:a6:a2:36:f0:d1:81:4f:f3:97:02:
81:c6:c0:08:b4:88:d4:74:2f:74:57:61:c0:87:c6:46:79:dc:
f5:e6:19:e1:d0:56:57:11:6c:72:92:5a:c6:87:e4:f3:f8:30:
68:8a:8d:c9:95:54:52:25:4e:7b:87:52:b2:58:48:54:a4:fe:
1d:2f:63:54:c2:24:ea:34:18:65:75:dc:12:54:59:ec:e3:6b:
7e:e8:60:e0:4a:f3:04:fb:20:7a:21:cf:09:96:07:e1:a3:7b:
7f:5a:eb:a9:a5:19:6c:d7:6e:f8:0c:59:b4:76:7f:f4:13:34:
99:9b:6a:f0:05:0a:9d:6f:0b:c0:8a:29:76:8c:6b:c3:e5:9a:
0a:87:5f:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:26:40 2025 by rpki-client