Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/b039bc-213b-457c-96ae-3181db911a13/1/DQh0szPjXfFP2XDhiVgdoJO8gJM.mft
File: DQh0szPjXfFP2XDhiVgdoJO8gJM.mft (raw, json)
Hash identifier: B5oYUW5xNb4KKGGZvqZE9JoGtZ7HFu4pUhS0PXV9Flo=
Subject key identifier: 01:D7:F7:0F:9F:05:5A:DC:95:54:14:E9:29:D7:D6:A3:7A:D3:D6:09
Authority key identifier: 0D:08:74:B3:33:E3:5D:F1:4F:D9:70:E1:89:58:1D:A0:93:BC:80:93
Certificate issuer: /CN=0d0874b333e35df14fd970e189581da093bc8093
Certificate serial: 0197B8FCD931E849A5220FB3CE17D034E90B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DQh0szPjXfFP2XDhiVgdoJO8gJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/b039bc-213b-457c-96ae-3181db911a13/1/DQh0szPjXfFP2XDhiVgdoJO8gJM.mft
Manifest number: 15BC
Signing time: Sun 29 Jun 2025 00:01:07 +0000
Manifest this update: Sun 29 Jun 2025 00:01:07 +0000
Manifest next update: Mon 30 Jun 2025 00:01:07 +0000
Files and hashes: 1: DQh0szPjXfFP2XDhiVgdoJO8gJM.crl (hash: I4y7QchT9hdfPhNzwHkWUBcmpeDdLZgsGlCWGU7j1Gc=)
2: KXd_5OhpNxA2dAEUBM7BRlNmng0.roa (hash: naKbPeMlQvH49cTjg2nRiud0MzlhFN73NWmhIANkiB0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/b039bc-213b-457c-96ae-3181db911a13/1/DQh0szPjXfFP2XDhiVgdoJO8gJM.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/b039bc-213b-457c-96ae-3181db911a13/1/DQh0szPjXfFP2XDhiVgdoJO8gJM.mft
rsync://rpki.ripe.net/repository/DEFAULT/DQh0szPjXfFP2XDhiVgdoJO8gJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:fc:d9:31:e8:49:a5:22:0f:b3:ce:17:d0:34:e9:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d0874b333e35df14fd970e189581da093bc8093
Validity
Not Before: Jun 29 00:01:07 2025 GMT
Not After : Jun 30 00:01:07 2025 GMT
Subject: CN=01d7f70f9f055adc955414e929d7d6a37ad3d609
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e3:d3:b6:b9:d6:33:80:12:f2:fb:42:80:50:
c2:c3:5b:7a:98:2b:c6:d2:84:09:49:fb:54:2c:60:
65:81:d7:aa:b6:54:8b:1c:83:58:f4:dd:7d:1e:68:
e5:73:fa:85:fd:5d:d8:96:88:a4:71:15:91:19:7a:
ea:f7:fc:f5:e8:d6:53:32:5e:7a:2e:36:41:f9:df:
60:65:8b:b8:05:f1:e7:38:8b:fb:5e:42:a7:00:e1:
df:25:1c:67:2d:bf:15:3c:8a:d0:c4:9e:30:d0:50:
cd:f6:71:3a:32:52:43:e2:59:ae:d2:00:ac:45:0a:
5b:c4:35:47:68:5d:aa:d8:49:f2:93:ed:30:85:5b:
f6:88:75:ae:33:37:9f:7c:4c:77:8c:47:f0:31:99:
04:53:c9:43:c2:5c:bb:25:fb:49:d4:d5:fc:6c:7d:
46:b4:ef:d9:36:43:56:5d:64:b7:27:78:00:56:e5:
c7:e1:c7:02:55:06:34:e7:aa:71:fa:58:2a:62:8c:
88:a9:3a:d2:0b:e2:bd:ec:47:29:74:36:6c:82:ae:
df:f6:85:06:56:0b:0c:2e:f3:64:e8:36:e3:24:49:
56:e4:8a:f1:2c:75:04:b0:87:af:61:6d:b1:d9:11:
95:c3:f2:7b:73:c2:78:eb:4b:ab:fa:bb:65:05:8d:
93:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:D7:F7:0F:9F:05:5A:DC:95:54:14:E9:29:D7:D6:A3:7A:D3:D6:09
X509v3 Authority Key Identifier:
keyid:0D:08:74:B3:33:E3:5D:F1:4F:D9:70:E1:89:58:1D:A0:93:BC:80:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQh0szPjXfFP2XDhiVgdoJO8gJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/b039bc-213b-457c-96ae-3181db911a13/1/DQh0szPjXfFP2XDhiVgdoJO8gJM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/b039bc-213b-457c-96ae-3181db911a13/1/DQh0szPjXfFP2XDhiVgdoJO8gJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:d1:bd:7c:39:78:71:6d:79:7a:c8:fa:b4:8e:e6:95:c4:ad:
eb:fb:3e:c5:c9:ba:24:f9:bc:f6:05:04:e0:fd:fc:42:02:1e:
7b:fb:eb:8f:c8:cf:fa:b6:2d:cc:1a:a9:a0:d5:da:2f:e8:1a:
66:db:79:2f:d3:2d:7a:2f:3f:27:02:1b:38:95:b0:1e:e3:bc:
9a:d9:9c:2f:da:ea:21:74:ee:bf:e5:c1:ad:e4:36:1c:90:09:
0a:54:08:2e:7a:e7:92:9a:c3:be:88:14:af:2b:80:67:1c:7d:
8d:9b:39:e8:be:f1:98:5a:04:0f:45:12:20:34:90:d3:c9:09:
f7:8b:d7:b8:a1:43:10:d4:e4:fa:ae:3e:1f:ca:bd:5a:7b:99:
76:dd:e4:0b:f5:e1:b0:8c:9b:8d:7d:77:a6:d1:37:b5:66:b0:
10:e7:e0:a2:50:4c:80:d7:d0:98:b6:9a:82:75:df:10:09:26:
8b:8c:c8:bf:de:5b:72:5f:13:43:38:e2:82:c4:7b:3f:b6:2e:
d0:39:09:17:b9:82:c0:24:97:49:d1:52:da:04:b9:df:1b:e2:
af:f1:1a:68:09:34:5d:6d:bb:10:92:75:b9:87:99:af:ea:a1:
49:64:27:71:df:d3:a6:53:1a:96:f0:01:11:dc:e1:2a:50:db:
c2:40:cd:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:51:43 2025 by rpki-client