Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/0fb69d-cefc-46ec-be39-85bd34bd4e5a/1/dHdLe1MO2s-PpzNTqQFKVjiUm_s.mft
File: dHdLe1MO2s-PpzNTqQFKVjiUm_s.mft (raw, json)
Hash identifier: 7Orp6aZglj1hnzhi/Q4dyHjq0qzUEseaaM51TjCXKSw=
Subject key identifier: 4E:77:F8:1D:78:9C:7F:5E:F8:C0:11:9E:7F:3D:50:BE:1A:85:CE:C2
Authority key identifier: 74:77:4B:7B:53:0E:DA:CF:8F:A7:33:53:A9:01:4A:56:38:94:9B:FB
Certificate issuer: /CN=74774b7b530edacf8fa73353a9014a5638949bfb
Certificate serial: 0197B7451327F1892C5C041A7F4B9A189DD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dHdLe1MO2s-PpzNTqQFKVjiUm_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/0fb69d-cefc-46ec-be39-85bd34bd4e5a/1/dHdLe1MO2s-PpzNTqQFKVjiUm_s.mft
Manifest number: 0C84
Signing time: Sat 28 Jun 2025 16:00:46 +0000
Manifest this update: Sat 28 Jun 2025 16:00:46 +0000
Manifest next update: Sun 29 Jun 2025 16:00:46 +0000
Files and hashes: 1: 4V_ibiqr3ToA5yeO7eCC_kmdHfY.roa (hash: iaaPPpRPgVRp2VBYf0amI7H0JrYQ2W8NdUPmUpkX7Ug=)
2: dHdLe1MO2s-PpzNTqQFKVjiUm_s.crl (hash: EuqnxzV8HuffM1vkL0vc6zoIkEycL7Rpors5fEeZDLU=)
3: jcgG2k-DMvgq0AsuFmjBxm0-O-Q.roa (hash: SEfA+iWkgEeN5RJiBiU8Z6qVRU+/NBl881HzOl2we+M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/0fb69d-cefc-46ec-be39-85bd34bd4e5a/1/dHdLe1MO2s-PpzNTqQFKVjiUm_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/0fb69d-cefc-46ec-be39-85bd34bd4e5a/1/dHdLe1MO2s-PpzNTqQFKVjiUm_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/dHdLe1MO2s-PpzNTqQFKVjiUm_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:13:27:f1:89:2c:5c:04:1a:7f:4b:9a:18:9d:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74774b7b530edacf8fa73353a9014a5638949bfb
Validity
Not Before: Jun 28 16:00:46 2025 GMT
Not After : Jun 29 16:00:46 2025 GMT
Subject: CN=4e77f81d789c7f5ef8c0119e7f3d50be1a85cec2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d9:25:7d:b5:04:cc:8c:c0:1b:30:8f:60:f9:
f9:88:66:af:87:f1:fe:e3:87:12:4c:58:9c:73:23:
23:de:cf:6f:91:65:2a:2c:33:6c:05:36:63:85:a0:
a8:1a:0b:64:17:e9:a2:06:70:d1:84:bb:c8:17:bc:
e2:eb:4b:c7:98:d7:b1:9b:e4:58:7d:96:c5:a5:05:
0c:6b:6b:04:c8:3d:8e:cf:75:7d:a7:4b:14:ac:61:
5a:05:24:b8:91:f1:04:42:94:61:cb:78:81:20:d2:
8b:4c:58:5c:66:23:16:73:bb:42:65:f8:7d:13:70:
b7:15:ba:bb:70:19:88:e7:17:2a:69:a1:2c:22:75:
30:26:9b:ba:16:19:3a:63:21:7a:07:5b:88:10:1c:
d1:99:d4:18:eb:8a:48:cc:16:19:7f:63:de:8a:2c:
47:d2:17:65:3a:0f:49:fc:59:5d:01:fd:4e:17:c7:
66:75:b4:09:46:91:10:14:f0:28:89:b5:25:ef:23:
e4:12:3d:c1:63:44:2b:be:f2:5a:ec:54:2d:d9:8c:
68:da:93:24:cc:ae:7e:3c:c3:ea:02:72:94:90:f5:
f1:ec:bc:08:af:e7:42:32:96:78:82:6d:97:2e:b3:
70:a3:80:ce:04:e3:67:0d:c9:67:a5:17:d6:2e:d7:
57:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:77:F8:1D:78:9C:7F:5E:F8:C0:11:9E:7F:3D:50:BE:1A:85:CE:C2
X509v3 Authority Key Identifier:
keyid:74:77:4B:7B:53:0E:DA:CF:8F:A7:33:53:A9:01:4A:56:38:94:9B:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dHdLe1MO2s-PpzNTqQFKVjiUm_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/0fb69d-cefc-46ec-be39-85bd34bd4e5a/1/dHdLe1MO2s-PpzNTqQFKVjiUm_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/0fb69d-cefc-46ec-be39-85bd34bd4e5a/1/dHdLe1MO2s-PpzNTqQFKVjiUm_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:35:65:85:24:1d:8b:47:10:15:e1:ea:1d:91:84:ed:47:0a:
8a:b8:b2:59:dd:68:9d:f2:ea:d8:2e:16:21:02:9c:f0:e5:58:
10:aa:4d:a1:04:08:2b:e1:c7:07:0d:ec:79:a0:ab:9c:11:94:
07:7a:7f:21:db:59:3a:ea:6d:e3:79:be:75:68:da:20:f3:50:
96:0b:16:a8:b1:4c:78:ba:f2:52:24:9f:39:8f:92:8f:c6:dd:
64:82:b2:10:ba:da:50:44:54:d8:6f:98:3f:5e:ca:d3:51:31:
0d:66:f1:51:e1:69:98:4c:7e:e5:92:46:d1:96:4f:8b:8c:7a:
bf:af:ea:cd:3a:12:75:20:b4:ae:a9:cd:59:13:12:c0:1c:3e:
c6:d1:b0:a2:61:6d:2e:b6:52:fa:51:90:16:15:d5:a8:36:cf:
f7:9c:99:c6:d3:5e:2c:3c:91:3b:86:6d:5b:7f:1f:f0:16:7e:
56:b3:2f:35:6f:5a:6c:ac:5f:93:27:48:b9:b9:df:4b:80:09:
4e:de:01:29:c7:dd:1f:23:ad:35:24:06:98:95:8d:40:70:a6:
35:96:2a:00:61:cc:1f:bf:00:43:0a:07:18:a2:bd:93:48:39:
92:b5:fd:e5:03:c3:28:da:8e:14:55:e6:df:04:bf:95:0d:0c:
4e:05:8a:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:43:27 2025 by rpki-client