Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/9ba504-02af-4972-b0b9-822de9308e01/1/Djaq1zNfNOTNgpQjvrCJxOCk6HQ.mft
File: Djaq1zNfNOTNgpQjvrCJxOCk6HQ.mft (raw, json)
Hash identifier: jtGHK+BhZsHFDtPA/4n/0y9/aqvcFmfZ2/bIyeCt+VE=
Subject key identifier: F3:6A:55:09:BE:04:25:F9:8A:26:E7:1D:84:4C:A6:2D:96:F1:44:3A
Authority key identifier: 0E:36:AA:D7:33:5F:34:E4:CD:82:94:23:BE:B0:89:C4:E0:A4:E8:74
Certificate issuer: /CN=0e36aad7335f34e4cd829423beb089c4e0a4e874
Certificate serial: 0197B6A1C4ED744F576286751607F9939183
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Djaq1zNfNOTNgpQjvrCJxOCk6HQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/9ba504-02af-4972-b0b9-822de9308e01/1/Djaq1zNfNOTNgpQjvrCJxOCk6HQ.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 13:02:24 +0000
Manifest this update: Sat 28 Jun 2025 13:02:24 +0000
Manifest next update: Sun 29 Jun 2025 13:02:24 +0000
Files and hashes: 1: 8o1O-t_WKzJXOkGFsMQUN6blBp0.roa (hash: KBCGb1hk/sBmmTgro2o9IaPB/nx00oBvONm6CxD0Y2w=)
2: Djaq1zNfNOTNgpQjvrCJxOCk6HQ.crl (hash: K85gwVHBGD2TztZ40lpa/mgDH2SnguufR9Gd2IknBrw=)
3: aW93vIod8bw9akpUiGgWH-EgLiE.roa (hash: qyblENK3boODcPRYexEWYW0qmMFYuF1Qh/Vo8m2KhS0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/9ba504-02af-4972-b0b9-822de9308e01/1/Djaq1zNfNOTNgpQjvrCJxOCk6HQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/9ba504-02af-4972-b0b9-822de9308e01/1/Djaq1zNfNOTNgpQjvrCJxOCk6HQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Djaq1zNfNOTNgpQjvrCJxOCk6HQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:c4:ed:74:4f:57:62:86:75:16:07:f9:93:91:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e36aad7335f34e4cd829423beb089c4e0a4e874
Validity
Not Before: Jun 28 13:02:24 2025 GMT
Not After : Jun 29 13:02:24 2025 GMT
Subject: CN=f36a5509be0425f98a26e71d844ca62d96f1443a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:74:e9:b4:10:e1:81:e5:ae:1e:fe:18:c6:ee:
f5:42:77:01:95:e9:6d:7b:27:38:00:de:93:10:c3:
53:3b:9f:c3:11:67:91:75:43:04:a1:3c:9c:2f:0d:
98:9c:23:12:b8:57:bf:54:c9:dd:93:88:7f:0a:b9:
07:05:fa:77:cb:e5:c1:87:f3:04:1e:1a:9c:69:ee:
21:73:8b:5e:37:ae:8f:fc:4c:82:cf:62:2d:ab:ec:
a0:32:8a:b5:44:f6:16:2c:a2:11:7d:35:69:ac:86:
aa:d6:a8:d6:2a:f2:cd:f5:87:20:02:f7:fc:b3:4d:
e6:55:c3:0f:cb:23:ae:5a:4b:0e:5a:c4:ec:6b:b5:
3e:be:0f:2f:65:53:e0:a4:9c:32:3b:f6:2d:d8:e1:
57:e0:6a:9a:15:2c:a1:bb:ac:ba:1b:da:79:f2:36:
3f:73:63:7f:23:dc:41:dc:c7:14:d6:c3:18:4a:b4:
94:79:ef:c8:8d:fe:b7:51:83:d9:e6:f9:dd:5f:c8:
f8:dc:8c:72:ce:84:96:19:c8:4b:18:ff:ab:ec:c1:
5f:1f:64:74:8f:19:8a:8d:2c:d7:ee:08:00:1e:60:
34:6b:ef:f1:51:18:f8:df:e0:77:c5:d4:25:f5:06:
c6:b0:7a:2d:b4:33:d8:ff:6e:63:4e:d8:15:8a:ba:
0a:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:6A:55:09:BE:04:25:F9:8A:26:E7:1D:84:4C:A6:2D:96:F1:44:3A
X509v3 Authority Key Identifier:
keyid:0E:36:AA:D7:33:5F:34:E4:CD:82:94:23:BE:B0:89:C4:E0:A4:E8:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Djaq1zNfNOTNgpQjvrCJxOCk6HQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/9ba504-02af-4972-b0b9-822de9308e01/1/Djaq1zNfNOTNgpQjvrCJxOCk6HQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/9ba504-02af-4972-b0b9-822de9308e01/1/Djaq1zNfNOTNgpQjvrCJxOCk6HQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:d5:b1:eb:8d:64:a1:13:83:01:c6:68:53:07:1c:9d:22:54:
67:dc:4b:8e:79:1a:36:49:ad:9a:e3:25:ae:7c:34:ce:50:aa:
8a:42:72:af:12:0c:c2:00:51:27:dd:f2:c6:c1:4f:1d:19:8a:
8f:8f:99:7e:0a:fe:a6:84:79:a2:09:e8:07:f3:dd:7c:bc:d6:
d1:57:74:a6:11:92:57:ce:b6:48:b2:de:66:d2:88:29:7f:40:
32:f6:3a:b8:d8:40:04:6b:65:58:6e:59:a0:1f:fb:84:7a:98:
39:d9:20:84:1d:9d:9d:b4:9d:a2:04:7f:7a:9a:3a:95:da:e7:
73:00:a3:74:7a:0c:94:f2:ca:fc:89:a5:f0:d6:c6:17:2f:26:
f4:76:89:45:ce:28:de:46:4e:77:13:8f:5f:f9:8f:b4:81:d1:
13:c6:72:22:43:42:45:31:44:ff:97:49:48:d1:a6:72:a9:8f:
fd:cc:5e:02:36:75:f0:ed:61:49:32:d0:2b:13:a9:82:c9:e7:
c8:e6:bf:89:50:55:59:5c:c3:a9:61:02:59:66:b4:ca:14:02:
60:7b:f6:34:2e:2d:7e:d8:8c:a0:03:a8:31:76:19:e7:4b:c9:
95:22:e6:93:5b:72:66:d5:bc:e2:45:ae:13:a7:9b:c3:b1:d6:
e6:a2:8e:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:46:25 2025 by rpki-client