Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/e326b9-795f-4a0b-9efd-e69be395b0f7/1/DXQT3PU3N0pw2qMf2amf0psDMjk.mft
File: DXQT3PU3N0pw2qMf2amf0psDMjk.mft (raw, json)
Hash identifier: 2ikLHYnFYbO8+hICN/dnvaAR1twj2KsN0A4/vid5RNI=
Subject key identifier: 89:C0:3E:AC:A1:A2:4B:5E:D5:DB:16:BD:AF:7D:27:E6:6B:AF:6B:5A
Authority key identifier: 0D:74:13:DC:F5:37:37:4A:70:DA:A3:1F:D9:A9:9F:D2:9B:03:32:39
Certificate issuer: /CN=0d7413dcf537374a70daa31fd9a99fd29b033239
Certificate serial: 0197B632B390F22BE29D0847586F019FA7E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXQT3PU3N0pw2qMf2amf0psDMjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/e326b9-795f-4a0b-9efd-e69be395b0f7/1/DXQT3PU3N0pw2qMf2amf0psDMjk.mft
Manifest number: 137A
Signing time: Sat 28 Jun 2025 11:01:05 +0000
Manifest this update: Sat 28 Jun 2025 11:01:05 +0000
Manifest next update: Sun 29 Jun 2025 11:01:05 +0000
Files and hashes: 1: DXQT3PU3N0pw2qMf2amf0psDMjk.crl (hash: S7SMCo52naLXEO6g/7ghh8d+E1DRSg1lg9wUrHSPkns=)
2: ka4zet-SkUrSnEvI5_4fHR-JIQI.roa (hash: EBw/ap+q2JTBNlcLQGiKoKAynchkYNGQi71a58xmflM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/e326b9-795f-4a0b-9efd-e69be395b0f7/1/DXQT3PU3N0pw2qMf2amf0psDMjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/e326b9-795f-4a0b-9efd-e69be395b0f7/1/DXQT3PU3N0pw2qMf2amf0psDMjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/DXQT3PU3N0pw2qMf2amf0psDMjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:32:b3:90:f2:2b:e2:9d:08:47:58:6f:01:9f:a7:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d7413dcf537374a70daa31fd9a99fd29b033239
Validity
Not Before: Jun 28 11:01:05 2025 GMT
Not After : Jun 29 11:01:05 2025 GMT
Subject: CN=89c03eaca1a24b5ed5db16bdaf7d27e66baf6b5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:5b:d8:35:92:e4:b3:10:33:e2:2b:ed:26:bb:
e3:93:d5:59:be:5e:fe:1f:95:9e:4c:fa:5a:d9:d8:
28:5e:23:83:8c:28:4e:6e:19:0c:fc:b6:04:39:fb:
54:f6:0e:16:30:3a:8d:3d:da:8c:f3:d0:2d:5a:ff:
d4:0a:4b:fc:30:43:a0:db:94:f5:d6:3c:26:b1:f7:
ed:49:69:bc:76:3f:86:62:14:54:ea:16:bb:61:0b:
3f:62:5a:d6:1c:29:7b:37:80:89:9a:18:eb:58:d7:
51:37:37:be:6e:69:34:65:e8:d9:20:8f:6a:41:d8:
71:82:5f:6f:fd:3e:c3:1f:f4:d6:cb:d6:7d:57:f2:
a4:44:79:9a:d8:b4:62:2f:4e:92:c6:a5:30:a4:34:
61:e1:fb:8a:9e:b1:65:78:19:66:5a:d3:25:10:7f:
75:d6:f0:34:15:7b:43:a4:6a:d1:03:96:a1:c0:15:
a0:54:b8:80:2a:7e:9a:fb:51:30:bd:b4:9d:7d:52:
16:d7:a0:6f:90:1d:9a:a0:8b:8f:97:e0:69:63:e4:
a0:b5:c1:bc:c9:67:77:94:95:c2:9c:c3:f4:0e:12:
0a:93:b4:ad:48:fb:2a:dc:d1:47:97:7e:43:33:93:
97:24:77:5d:fc:7a:54:d9:2f:8c:50:81:cb:13:c3:
a3:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:C0:3E:AC:A1:A2:4B:5E:D5:DB:16:BD:AF:7D:27:E6:6B:AF:6B:5A
X509v3 Authority Key Identifier:
keyid:0D:74:13:DC:F5:37:37:4A:70:DA:A3:1F:D9:A9:9F:D2:9B:03:32:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXQT3PU3N0pw2qMf2amf0psDMjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e326b9-795f-4a0b-9efd-e69be395b0f7/1/DXQT3PU3N0pw2qMf2amf0psDMjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e326b9-795f-4a0b-9efd-e69be395b0f7/1/DXQT3PU3N0pw2qMf2amf0psDMjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:8a:e0:79:7c:98:18:88:88:06:34:58:4e:07:47:ed:17:6a:
c2:73:8d:e7:b7:0e:83:cd:53:80:1d:ac:06:4b:74:79:21:e1:
22:e1:51:ac:08:5e:84:9a:b7:ec:e8:bd:cc:9d:98:3c:2b:b3:
70:79:5e:21:af:63:3c:e9:6c:fd:de:81:c4:c2:9b:71:48:7c:
54:e1:1e:e7:50:f8:7a:be:9e:7e:bd:6a:6c:57:f0:76:33:f3:
ab:33:27:70:1b:c7:70:32:a5:e7:0b:42:98:e6:5f:eb:db:d5:
1c:43:0c:5d:fc:ce:7e:cc:44:0c:78:65:cd:2c:05:8b:20:86:
29:bf:58:0c:e5:23:7b:9d:34:bc:9f:fd:2c:31:ee:6d:d6:a5:
a8:0d:89:b4:40:e8:26:d1:cc:9e:52:67:da:89:49:83:1a:13:
67:ce:80:65:87:01:a3:2c:4f:ee:99:c4:7c:44:d1:35:be:7e:
da:6f:3c:9e:23:8c:5a:d6:32:12:4c:ca:4b:02:0e:70:f9:7c:
ad:d1:98:3c:25:3f:b0:36:b8:e0:5f:7e:e4:1d:87:8d:0c:24:
9f:f6:88:6c:8c:2f:b7:1e:59:19:a2:4a:c8:41:e1:c5:4c:16:
37:48:fe:c7:c9:de:7b:81:d5:c0:87:5d:24:b2:08:c8:8c:9d:
28:29:7d:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:55:48 2025 by rpki-client