Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/37c8ff-187f-4d91-b4d6-136656a3ede7/1/D5uga20iZz9_ez0PiJ9HIEQbbgw.mft
File: D5uga20iZz9_ez0PiJ9HIEQbbgw.mft (raw, json)
Hash identifier: oJJB4hbYUczhTtEzGOBaN/7V3Kknd8m7fw3E/LhYtow=
Subject key identifier: B6:38:D6:DE:73:29:B6:DF:58:CC:61:98:6E:FB:AC:65:85:A7:AD:F2
Authority key identifier: 0F:9B:A0:6B:6D:22:67:3F:7F:7B:3D:0F:88:9F:47:20:44:1B:6E:0C
Certificate issuer: /CN=0f9ba06b6d22673f7f7b3d0f889f4720441b6e0c
Certificate serial: 0197B7451E9D3139BFD30A5D16A72E2969C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D5uga20iZz9_ez0PiJ9HIEQbbgw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/37c8ff-187f-4d91-b4d6-136656a3ede7/1/D5uga20iZz9_ez0PiJ9HIEQbbgw.mft
Manifest number: 0566
Signing time: Sat 28 Jun 2025 16:00:49 +0000
Manifest this update: Sat 28 Jun 2025 16:00:49 +0000
Manifest next update: Sun 29 Jun 2025 16:00:49 +0000
Files and hashes: 1: D5uga20iZz9_ez0PiJ9HIEQbbgw.crl (hash: e2laepNQbKOvN0upTMH9RiLQMLzE8tg2mDbVJrSvEtQ=)
2: dpEQqFiEzcBminPXKwfV-PABopw.roa (hash: aNr5tdVzzBcZX6IXpoVPaBnNNk42qKTnrWG6P7E7Joo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/37c8ff-187f-4d91-b4d6-136656a3ede7/1/D5uga20iZz9_ez0PiJ9HIEQbbgw.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/37c8ff-187f-4d91-b4d6-136656a3ede7/1/D5uga20iZz9_ez0PiJ9HIEQbbgw.mft
rsync://rpki.ripe.net/repository/DEFAULT/D5uga20iZz9_ez0PiJ9HIEQbbgw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:1e:9d:31:39:bf:d3:0a:5d:16:a7:2e:29:69:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f9ba06b6d22673f7f7b3d0f889f4720441b6e0c
Validity
Not Before: Jun 28 16:00:49 2025 GMT
Not After : Jun 29 16:00:49 2025 GMT
Subject: CN=b638d6de7329b6df58cc61986efbac6585a7adf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:8e:43:1f:67:23:49:35:62:47:f1:c9:a0:23:
ec:f4:09:e6:82:03:5c:7d:48:51:94:5a:c6:ea:37:
49:2c:a7:90:7e:06:5d:4d:20:bc:3e:12:4d:c0:78:
35:04:37:03:f6:a5:b1:c4:ed:2b:fb:84:3a:ea:94:
a4:1b:76:b6:19:bf:3b:1f:c0:5d:2c:fd:69:06:79:
ec:27:7d:12:3a:92:ed:d9:15:96:91:ec:0f:fd:7d:
f2:de:4a:ab:95:20:df:d2:0b:8b:5f:fa:b2:eb:78:
db:72:1e:ec:88:80:44:30:9b:72:21:9e:55:ea:c4:
f0:00:7f:1b:67:aa:6d:6a:3a:65:34:18:40:97:95:
e8:4a:46:fc:c5:23:79:ef:b2:3d:db:e1:9b:da:cf:
0b:c9:83:eb:1c:b4:e4:3e:ce:a0:14:e7:67:f9:80:
f7:10:46:c6:a5:0b:73:1d:2d:6e:aa:a2:9d:56:b8:
d4:f1:9f:6f:e0:a4:a3:3e:3b:3b:82:0e:e9:e0:23:
b3:23:90:fc:c0:d3:84:a8:d9:43:7f:61:7e:5f:3b:
25:22:13:6b:fe:2c:02:8b:ac:ca:68:5c:a2:3b:82:
44:3b:45:32:70:4f:61:38:d0:0c:70:66:2a:b6:59:
00:0f:33:5a:22:d3:0f:a0:6b:b9:b3:5c:8c:3e:3a:
2d:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:38:D6:DE:73:29:B6:DF:58:CC:61:98:6E:FB:AC:65:85:A7:AD:F2
X509v3 Authority Key Identifier:
keyid:0F:9B:A0:6B:6D:22:67:3F:7F:7B:3D:0F:88:9F:47:20:44:1B:6E:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5uga20iZz9_ez0PiJ9HIEQbbgw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/37c8ff-187f-4d91-b4d6-136656a3ede7/1/D5uga20iZz9_ez0PiJ9HIEQbbgw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/37c8ff-187f-4d91-b4d6-136656a3ede7/1/D5uga20iZz9_ez0PiJ9HIEQbbgw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:71:b8:2f:74:4c:37:cc:9d:c0:da:89:8a:bd:14:15:6c:64:
48:f7:1d:36:ed:17:8c:ac:71:3e:26:71:55:d3:ca:8e:22:77:
be:85:40:76:ae:72:9f:79:3e:6f:da:ff:14:9e:d3:cc:7f:71:
7c:50:25:4a:30:cd:de:2a:b3:dc:94:24:0d:a1:49:d4:02:f6:
50:ba:fa:0b:a6:df:f2:77:5b:8a:28:5e:3e:30:60:66:1a:75:
ad:1e:e3:ed:af:cb:61:30:df:71:ff:a8:dc:55:fa:ba:35:2f:
79:04:cf:fe:db:2f:5a:0f:67:75:0b:0e:36:74:4f:c4:37:9c:
69:f7:e8:b4:aa:48:9c:60:2e:34:06:4d:87:1f:5e:b2:e1:6a:
cf:62:9f:09:be:6e:87:08:c0:d1:4d:4c:cd:3f:05:07:74:dd:
6e:b0:54:b7:ac:33:29:82:63:45:37:d7:b9:6e:fb:22:73:0c:
22:4e:4e:c1:4e:1c:ef:b0:f3:8f:1e:85:52:1f:44:ff:12:6e:
fe:d0:16:cb:07:ef:bb:77:74:22:83:f6:6a:2d:b7:6c:1e:28:
3a:ab:66:6e:f8:fc:80:b5:37:7a:7f:70:1b:5d:30:ca:82:a6:
7e:2c:d5:aa:ad:d5:f6:db:12:2a:c0:59:7d:21:b5:ec:94:b2:
f7:1e:4f:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:49:25 2025 by rpki-client