Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/2b195e-0aba-47d4-8e3b-ad32ef49d419/1/dKWbf7TgNPZ3dfKHXvv8nv8kfo4.mft
File: dKWbf7TgNPZ3dfKHXvv8nv8kfo4.mft (raw, json)
Hash identifier: IP5YtqJEgGJWkrDxp7q8Quf3zS6/Pk0bUaayxPNR95g=
Subject key identifier: 92:BE:51:77:A2:12:13:5B:13:C3:C9:58:67:B7:52:A9:72:B9:24:97
Authority key identifier: 74:A5:9B:7F:B4:E0:34:F6:77:75:F2:87:5E:FB:FC:9E:FF:24:7E:8E
Certificate issuer: /CN=74a59b7fb4e034f67775f2875efbfc9eff247e8e
Certificate serial: 0197C07F11C1C98ED2B195C353CBDCF9DB98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dKWbf7TgNPZ3dfKHXvv8nv8kfo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/2b195e-0aba-47d4-8e3b-ad32ef49d419/1/dKWbf7TgNPZ3dfKHXvv8nv8kfo4.mft
Manifest number: 0E8B
Signing time: Mon 30 Jun 2025 11:00:42 +0000
Manifest this update: Mon 30 Jun 2025 11:00:42 +0000
Manifest next update: Tue 01 Jul 2025 11:00:42 +0000
Files and hashes: 1: dKWbf7TgNPZ3dfKHXvv8nv8kfo4.crl (hash: vI4mSrTmRGLkXsjTtQPmWmifk30wjT1Ehv7GWoizOt0=)
2: j_zwA3lMJMAwX3hbOGDvv36TWxI.roa (hash: jFs+ea1KgMM5z88rmof87A9yhp5WnGLZNGkzRM11ISg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/2b195e-0aba-47d4-8e3b-ad32ef49d419/1/dKWbf7TgNPZ3dfKHXvv8nv8kfo4.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/2b195e-0aba-47d4-8e3b-ad32ef49d419/1/dKWbf7TgNPZ3dfKHXvv8nv8kfo4.mft
rsync://rpki.ripe.net/repository/DEFAULT/dKWbf7TgNPZ3dfKHXvv8nv8kfo4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 11:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c0:7f:11:c1:c9:8e:d2:b1:95:c3:53:cb:dc:f9:db:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74a59b7fb4e034f67775f2875efbfc9eff247e8e
Validity
Not Before: Jun 30 11:00:42 2025 GMT
Not After : Jul 1 11:00:42 2025 GMT
Subject: CN=92be5177a212135b13c3c95867b752a972b92497
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d9:e6:a6:a9:e5:8d:b3:4c:75:6b:1f:08:c7:
d5:cd:d3:3d:36:86:c4:25:1a:4a:b8:f3:d5:bd:ca:
5f:ab:3f:12:6e:eb:18:21:e9:da:8e:fd:c8:b2:4b:
98:a5:d1:d0:a1:56:d0:49:6c:34:4e:46:dc:4c:4c:
0a:4a:84:17:e5:1a:3b:99:54:a0:0b:57:49:00:22:
7b:02:20:95:0b:b7:6f:3f:53:d2:ef:02:39:9e:55:
72:e5:ef:f1:e3:96:ce:d1:89:26:71:37:3c:9d:ba:
4c:b4:2c:b3:32:0c:38:59:78:de:81:46:70:c4:33:
f9:c5:70:29:01:92:03:1c:c9:b1:ad:bc:2f:6c:39:
fe:ea:49:9d:4d:e7:b9:9d:2b:8d:86:11:63:5f:5c:
03:2e:49:da:cb:24:14:84:20:dc:19:3c:af:a8:4a:
98:70:30:82:7e:55:13:e1:57:59:e8:b1:f6:60:01:
32:97:ba:d0:ea:25:7f:9f:b7:f8:51:ab:38:38:09:
e3:a7:e1:0b:5c:53:37:b7:8a:54:bd:c3:5e:4f:b7:
ad:eb:f1:d4:be:a1:b4:11:04:eb:4d:02:47:e6:37:
90:52:8c:ac:76:29:c4:23:e3:5d:61:d6:df:af:32:
db:b2:e5:89:be:69:b8:45:fa:ca:bd:3e:c3:8f:a2:
34:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:BE:51:77:A2:12:13:5B:13:C3:C9:58:67:B7:52:A9:72:B9:24:97
X509v3 Authority Key Identifier:
keyid:74:A5:9B:7F:B4:E0:34:F6:77:75:F2:87:5E:FB:FC:9E:FF:24:7E:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dKWbf7TgNPZ3dfKHXvv8nv8kfo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/2b195e-0aba-47d4-8e3b-ad32ef49d419/1/dKWbf7TgNPZ3dfKHXvv8nv8kfo4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/2b195e-0aba-47d4-8e3b-ad32ef49d419/1/dKWbf7TgNPZ3dfKHXvv8nv8kfo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:b0:13:51:a7:2d:e2:d0:92:d5:bc:a7:14:6b:fb:d4:36:3e:
79:1a:06:99:cc:8a:8c:ce:ef:34:fb:96:19:54:b0:12:79:3d:
48:f2:c7:66:60:0a:a2:f1:db:56:81:0d:fc:ca:fa:cc:c1:42:
f8:e0:05:93:9f:7b:9a:dd:e2:3a:bf:d6:ea:7a:c9:ff:53:67:
38:2d:fd:d4:8e:62:f2:25:00:ea:30:eb:97:66:49:ed:2a:3c:
4b:e3:75:a3:71:38:81:2f:76:23:c4:e3:35:d4:b4:dd:67:a1:
01:78:28:43:9c:8e:89:e5:e5:98:f4:5b:d5:00:8e:14:d3:df:
f1:0d:e4:68:5a:cb:16:8a:1c:d7:1b:30:59:41:06:c1:6f:d9:
8e:4a:aa:d0:26:91:59:fc:87:bd:38:78:c3:fa:ba:18:2d:ac:
06:08:49:68:0c:81:7d:e2:51:4a:f2:7d:90:2c:ff:67:4b:eb:
17:45:86:4f:6d:16:eb:56:fa:62:c1:1c:88:eb:45:16:80:7d:
9f:ff:2f:de:59:63:77:74:ad:58:3a:e9:8d:61:b1:8d:ba:a1:
03:65:14:f6:07:aa:c3:99:e6:15:b9:9f:29:87:0b:ff:d5:76:
1e:92:ff:4d:eb:24:b7:8c:3b:a5:5e:99:49:6b:14:3a:0f:dc:
77:8e:0b:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 18:25:08 2025 by rpki-client