Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7c38f4-5dae-4d2c-8208-1d19499d098f/1/DJvBsU8NllP1FOwWd3G3dVmsY8w.mft
File: DJvBsU8NllP1FOwWd3G3dVmsY8w.mft (raw, json)
Hash identifier: 3tBVtqt2ZAeEMETKuYjN+xRfBGqNM3SB4uKK7XBNKSQ=
Subject key identifier: B3:27:78:46:2D:DD:E8:14:C9:3D:3E:52:3D:7B:1B:29:62:BB:52:79
Authority key identifier: 0C:9B:C1:B1:4F:0D:96:53:F5:14:EC:16:77:71:B7:75:59:AC:63:CC
Certificate issuer: /CN=0c9bc1b14f0d9653f514ec167771b77559ac63cc
Certificate serial: 0197B8C61F3082559024110347C76D0A016F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DJvBsU8NllP1FOwWd3G3dVmsY8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7c38f4-5dae-4d2c-8208-1d19499d098f/1/DJvBsU8NllP1FOwWd3G3dVmsY8w.mft
Manifest number: 15B7
Signing time: Sat 28 Jun 2025 23:01:21 +0000
Manifest this update: Sat 28 Jun 2025 23:01:21 +0000
Manifest next update: Sun 29 Jun 2025 23:01:21 +0000
Files and hashes: 1: DJvBsU8NllP1FOwWd3G3dVmsY8w.crl (hash: 1beXQxZOEm8HCmtMIkblG6QmzrBaRhZKWGyQQsWidIE=)
2: YeUbav6EAp2mAnn2v72RBK_mFZw.roa (hash: 6lsjmApYWIJWgcJbH7Xr/EBHcstui66uMy/hUDB8r3c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7c38f4-5dae-4d2c-8208-1d19499d098f/1/DJvBsU8NllP1FOwWd3G3dVmsY8w.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/7c38f4-5dae-4d2c-8208-1d19499d098f/1/DJvBsU8NllP1FOwWd3G3dVmsY8w.mft
rsync://rpki.ripe.net/repository/DEFAULT/DJvBsU8NllP1FOwWd3G3dVmsY8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 23:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:c6:1f:30:82:55:90:24:11:03:47:c7:6d:0a:01:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c9bc1b14f0d9653f514ec167771b77559ac63cc
Validity
Not Before: Jun 28 23:01:21 2025 GMT
Not After : Jun 29 23:01:21 2025 GMT
Subject: CN=b32778462ddde814c93d3e523d7b1b2962bb5279
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:96:4e:14:ef:09:e1:6e:e9:b4:d1:e7:22:e1:
48:c7:1c:a6:6e:ff:03:df:bb:91:22:69:8a:f5:a5:
cc:cf:ee:a5:3d:59:3f:08:26:0a:b2:1d:b2:23:73:
2a:2e:f5:f9:73:82:df:05:c8:f6:55:ca:c5:23:7c:
e3:a0:b3:7a:33:31:de:f6:15:da:a0:51:15:c2:21:
05:9b:56:57:33:9a:b8:38:14:98:69:bc:cb:a1:92:
a5:2a:1a:b8:f5:ce:ca:d2:06:29:61:b3:da:8c:f6:
c9:73:bf:5b:3a:a4:87:13:82:fd:96:58:17:0b:91:
f6:d8:2c:7f:a9:6a:ec:7a:28:c4:18:5c:e8:a7:de:
b3:9c:98:f8:d7:bb:91:d6:5b:94:26:0c:68:e8:57:
cb:37:0e:3a:68:b5:59:9a:41:4c:c2:d0:a0:d1:e9:
f0:47:4c:c5:79:38:59:70:94:da:3c:3c:87:da:a7:
38:a0:2b:9b:69:66:c7:a9:c7:a4:00:80:bf:db:b0:
cf:f8:5c:2c:55:b1:c7:ac:4c:7e:be:22:7b:6b:f2:
eb:30:3f:cc:27:a5:f3:5a:3d:45:d4:9f:c8:c1:4b:
af:e1:6a:bd:e1:f0:92:a7:63:6c:73:42:ec:19:a1:
70:75:a1:4c:5d:ba:b8:4d:84:04:98:10:3d:f2:5e:
de:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:27:78:46:2D:DD:E8:14:C9:3D:3E:52:3D:7B:1B:29:62:BB:52:79
X509v3 Authority Key Identifier:
keyid:0C:9B:C1:B1:4F:0D:96:53:F5:14:EC:16:77:71:B7:75:59:AC:63:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DJvBsU8NllP1FOwWd3G3dVmsY8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7c38f4-5dae-4d2c-8208-1d19499d098f/1/DJvBsU8NllP1FOwWd3G3dVmsY8w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7c38f4-5dae-4d2c-8208-1d19499d098f/1/DJvBsU8NllP1FOwWd3G3dVmsY8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:8e:2b:52:a0:18:c8:33:6e:5b:a9:5d:ff:18:16:38:1c:91:
cd:e8:90:8d:ab:cc:03:2d:41:d9:43:d4:66:ff:ec:41:f8:7b:
11:2e:80:ab:98:99:06:6c:70:5f:d8:f9:3c:1d:9e:bc:48:9a:
f5:be:b2:2b:f7:0a:16:c9:d5:3b:01:c4:37:4e:96:34:c7:1e:
79:4f:ba:c2:c1:10:49:c1:fd:d5:01:f6:c3:bb:cc:b3:50:b3:
90:81:5a:2f:a0:3c:3d:93:e8:4d:2f:2a:32:e8:9a:fb:57:54:
cc:aa:d6:58:6b:29:12:78:54:b9:de:d6:87:99:1c:e8:c0:fe:
9a:a9:c2:b5:dd:00:0e:fa:9b:68:7c:00:5c:d0:32:e7:e3:26:
a6:fa:32:52:e2:96:21:a4:b3:73:e1:b9:75:0b:29:de:a8:0b:
0a:82:dd:f9:3c:12:05:b4:0d:d6:dc:66:64:dc:04:3e:9e:3c:
7a:dc:78:e3:81:56:13:d9:43:ca:d7:93:a0:c0:a5:c6:bb:73:
9a:d8:00:4e:87:31:19:c7:74:2f:c0:c1:7e:72:0e:0c:1b:1c:
5b:71:46:5f:3b:f1:03:1c:01:79:08:17:98:0e:65:d4:44:3e:
13:fd:6c:e0:5a:98:02:31:d7:86:b7:3d:ff:37:d8:51:94:e4:
f7:68:1b:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:22:47 2025 by rpki-client