Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/9844cd-24f8-4e52-b42b-c7bf021ee664/1/djLJDvGdK9b2aKSCbi0NFWNelH0.mft
File: djLJDvGdK9b2aKSCbi0NFWNelH0.mft (raw, json)
Hash identifier: Uinjeq2uIShKj6k0v2iJJvbOI+B/s0pC/BEK+usBC+0=
Subject key identifier: 57:7E:B9:0E:83:56:C9:36:D9:79:2F:89:C2:03:8F:92:98:8D:AA:EE
Authority key identifier: 76:32:C9:0E:F1:9D:2B:D6:F6:68:A4:82:6E:2D:0D:15:63:5E:94:7D
Certificate issuer: /CN=7632c90ef19d2bd6f668a4826e2d0d15635e947d
Certificate serial: 0197B7452F146485FA18D767A108FEEA8D90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/djLJDvGdK9b2aKSCbi0NFWNelH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/9844cd-24f8-4e52-b42b-c7bf021ee664/1/djLJDvGdK9b2aKSCbi0NFWNelH0.mft
Manifest number: 15B8
Signing time: Sat 28 Jun 2025 16:00:53 +0000
Manifest this update: Sat 28 Jun 2025 16:00:53 +0000
Manifest next update: Sun 29 Jun 2025 16:00:53 +0000
Files and hashes: 1: djLJDvGdK9b2aKSCbi0NFWNelH0.crl (hash: Un0hqb/MafGMI3wHMPYM8oy53ajJd8blc6piQ4Vf8B4=)
2: wBaE5svUrTDa4cJiCAHlEwrForw.roa (hash: sNv0g7ZzW3+C7EQOHQU5ckniP/nqJPJ/xsRMEfe9338=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/9844cd-24f8-4e52-b42b-c7bf021ee664/1/djLJDvGdK9b2aKSCbi0NFWNelH0.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/9844cd-24f8-4e52-b42b-c7bf021ee664/1/djLJDvGdK9b2aKSCbi0NFWNelH0.mft
rsync://rpki.ripe.net/repository/DEFAULT/djLJDvGdK9b2aKSCbi0NFWNelH0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:2f:14:64:85:fa:18:d7:67:a1:08:fe:ea:8d:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7632c90ef19d2bd6f668a4826e2d0d15635e947d
Validity
Not Before: Jun 28 16:00:53 2025 GMT
Not After : Jun 29 16:00:53 2025 GMT
Subject: CN=577eb90e8356c936d9792f89c2038f92988daaee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:2e:59:3d:fb:67:64:fa:0a:14:7e:77:0f:68:
e0:13:ff:09:bc:18:6a:ad:00:01:5b:05:38:bb:ed:
6d:8e:f3:c4:ab:64:82:96:8c:56:4d:ec:28:36:28:
80:47:d9:5a:c4:1d:93:f5:72:0a:41:6a:fb:8b:e1:
d8:a2:8b:dc:74:a6:1d:35:92:86:99:9a:07:35:94:
86:12:50:da:d4:25:70:3f:e1:d6:20:82:e0:e8:01:
3a:dd:85:19:29:8d:e5:b3:2c:3c:cc:c8:db:d9:aa:
7b:00:65:5d:46:bc:c5:75:c9:b0:9c:6d:fd:3b:81:
9d:72:cb:c7:98:e5:54:df:a0:bb:92:71:48:0e:d7:
27:95:16:12:1c:b8:b5:c4:5c:ae:84:86:52:da:4a:
58:e5:28:9b:45:ab:17:70:89:99:04:c2:e4:04:40:
c1:13:13:42:ef:84:a4:f5:4f:cb:57:cf:5c:1a:da:
a8:9e:e0:4d:0b:0f:06:eb:63:2d:99:80:c7:e5:55:
08:9a:90:58:ae:8c:c4:61:1c:81:cd:ff:d8:ad:ad:
57:26:f0:a6:0e:8a:40:9a:42:a4:cc:05:14:04:b9:
eb:7d:0a:cd:5b:62:fc:46:fd:f9:82:c0:32:2b:cb:
84:24:8d:de:14:cb:04:2d:a6:b4:f7:a2:cf:de:5f:
0f:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:7E:B9:0E:83:56:C9:36:D9:79:2F:89:C2:03:8F:92:98:8D:AA:EE
X509v3 Authority Key Identifier:
keyid:76:32:C9:0E:F1:9D:2B:D6:F6:68:A4:82:6E:2D:0D:15:63:5E:94:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/djLJDvGdK9b2aKSCbi0NFWNelH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/9844cd-24f8-4e52-b42b-c7bf021ee664/1/djLJDvGdK9b2aKSCbi0NFWNelH0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/9844cd-24f8-4e52-b42b-c7bf021ee664/1/djLJDvGdK9b2aKSCbi0NFWNelH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:28:72:13:5d:b2:b1:e9:8c:82:ce:79:ce:12:d8:6c:85:4a:
98:e7:63:72:3e:31:25:53:e0:a4:28:55:c8:7c:be:6a:a3:29:
a4:c9:55:41:fa:23:42:e1:08:21:1a:6e:ec:29:3d:24:1d:1c:
b0:06:dc:01:fe:6f:98:93:99:28:df:72:4d:57:40:84:25:f5:
e3:f4:3c:a3:13:81:c9:4b:26:8d:70:e1:f9:53:ab:17:f9:7c:
82:a2:83:2f:c1:b0:e3:2d:2b:5e:e7:83:70:d9:2a:fe:9a:35:
c6:1f:ad:78:8e:fa:49:4c:1d:b9:ac:07:a6:a2:da:75:70:dd:
17:a6:eb:3d:9f:82:7f:8a:a9:15:28:41:36:e0:a2:68:09:37:
99:12:88:9b:bf:97:82:73:6a:6f:37:2a:f0:0c:b7:e0:3d:9f:
c0:5f:d0:f1:9d:76:14:5a:cf:ea:1f:b9:20:61:9c:8c:ed:dc:
66:92:14:d1:3b:b3:7e:13:bb:e2:a8:b7:04:ac:0b:6b:db:b1:
69:3d:68:52:1a:09:5c:4d:1f:2c:88:ac:33:b9:cd:0b:98:ba:
19:cd:14:2b:16:24:eb:d6:d5:48:dc:8d:fc:62:01:ce:37:db:
a1:19:90:d9:54:0b:40:32:b3:e7:17:03:85:a5:54:87:71:11:
9f:eb:e9:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:07:01 2025 by rpki-client