Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/daf1ae-d5eb-4ca4-8aaf-78741ac93b30/1/DigqFcGl0VS72ocrNXYHqR-VCqU.mft
File: DigqFcGl0VS72ocrNXYHqR-VCqU.mft (raw, json)
Hash identifier: VFy2gx0TJ77wgaWitQjs2Ekm4aFwaaEuxGOhksXTYiI=
Subject key identifier: 00:09:30:3C:D3:DF:6E:78:B7:0A:4B:36:AB:0E:72:2D:03:52:D2:75
Authority key identifier: 0E:28:2A:15:C1:A5:D1:54:BB:DA:87:2B:35:76:07:A9:1F:95:0A:A5
Certificate issuer: /CN=0e282a15c1a5d154bbda872b357607a91f950aa5
Certificate serial: 0197B9336FC288A74F1D1ADDD63E0613CC59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DigqFcGl0VS72ocrNXYHqR-VCqU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/daf1ae-d5eb-4ca4-8aaf-78741ac93b30/1/DigqFcGl0VS72ocrNXYHqR-VCqU.mft
Manifest number: 11DD
Signing time: Sun 29 Jun 2025 01:00:45 +0000
Manifest this update: Sun 29 Jun 2025 01:00:45 +0000
Manifest next update: Mon 30 Jun 2025 01:00:45 +0000
Files and hashes: 1: DigqFcGl0VS72ocrNXYHqR-VCqU.crl (hash: yNnHjADKL0m39VfrO2B5yyfUDWq39RIWnfPjR254IzY=)
2: u3O0A5kbS_BKPuygQ5bEuCuWEmM.roa (hash: EFUICxjgOr4/W3Yre79DXYxTO7h614siVS4H6ARHwaw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/daf1ae-d5eb-4ca4-8aaf-78741ac93b30/1/DigqFcGl0VS72ocrNXYHqR-VCqU.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/daf1ae-d5eb-4ca4-8aaf-78741ac93b30/1/DigqFcGl0VS72ocrNXYHqR-VCqU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DigqFcGl0VS72ocrNXYHqR-VCqU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:33:6f:c2:88:a7:4f:1d:1a:dd:d6:3e:06:13:cc:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e282a15c1a5d154bbda872b357607a91f950aa5
Validity
Not Before: Jun 29 01:00:45 2025 GMT
Not After : Jun 30 01:00:45 2025 GMT
Subject: CN=0009303cd3df6e78b70a4b36ab0e722d0352d275
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:53:fb:bd:09:12:72:09:83:ca:ee:66:59:59:
5d:00:7c:b3:4d:b8:4b:01:bc:5a:d9:bc:e6:fd:9f:
6b:31:58:88:f5:7f:d7:ac:2c:4f:3e:61:10:c6:61:
b5:79:23:63:93:02:41:c6:26:56:98:40:94:7c:57:
9b:b0:71:87:c9:0a:8b:4f:7d:e8:f1:b0:58:30:6a:
4f:06:c2:66:c7:d1:2f:0b:d7:e1:49:31:41:ef:5e:
86:47:c7:a7:1d:a9:cc:22:6c:0a:58:3c:79:40:1e:
78:0a:9b:5d:c8:cf:87:e4:f6:b0:26:17:13:ce:c7:
d9:d7:53:49:e8:19:28:44:f7:95:41:81:1a:bc:b2:
81:ed:e2:2e:43:54:7e:e2:12:3f:90:84:27:c8:cc:
fd:fc:57:30:5b:f8:e4:37:bd:94:87:e1:64:0b:c6:
2c:69:10:bd:f3:42:1b:98:25:f4:d6:bd:a5:5b:19:
39:1c:b4:35:4b:a5:1b:7e:93:e0:99:eb:65:81:7c:
eb:00:29:ba:43:26:29:ca:4e:2b:67:ee:12:c0:fa:
48:3d:ac:40:40:35:56:0c:1e:45:05:b1:02:a8:be:
a6:a5:2e:9f:f6:82:3d:03:b0:1e:44:74:2c:a9:cb:
bb:7f:06:61:2c:40:88:79:cf:21:a8:80:58:a8:84:
96:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:09:30:3C:D3:DF:6E:78:B7:0A:4B:36:AB:0E:72:2D:03:52:D2:75
X509v3 Authority Key Identifier:
keyid:0E:28:2A:15:C1:A5:D1:54:BB:DA:87:2B:35:76:07:A9:1F:95:0A:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DigqFcGl0VS72ocrNXYHqR-VCqU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/daf1ae-d5eb-4ca4-8aaf-78741ac93b30/1/DigqFcGl0VS72ocrNXYHqR-VCqU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/daf1ae-d5eb-4ca4-8aaf-78741ac93b30/1/DigqFcGl0VS72ocrNXYHqR-VCqU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:ae:ab:67:29:52:d0:19:0c:e2:72:50:96:df:00:8a:1b:79:
2b:0d:b7:25:79:23:5e:4f:43:ec:fa:1e:39:28:e4:41:43:b0:
ea:81:e9:07:f9:b9:0d:98:5f:b6:8d:4f:a5:31:78:3b:e4:dd:
61:b7:75:22:d1:a3:41:bb:b6:10:04:1c:b0:fa:51:e3:a9:0d:
cd:ff:a9:41:18:7a:fc:1f:97:02:b6:71:cf:bf:90:bc:92:59:
dd:b1:19:65:60:df:72:1b:64:37:49:c3:6e:2c:eb:18:1c:f1:
6b:f0:1e:52:76:5d:ba:2c:4d:26:72:b3:ab:ec:22:2c:ef:0c:
26:ad:f5:d5:0f:cb:c4:1c:4e:58:5c:e7:92:1d:6c:37:d9:bc:
18:f9:ff:94:e3:bc:fb:0b:78:c3:01:9b:c5:05:87:b9:a9:10:
f2:50:8d:a4:0e:25:56:07:68:95:24:e3:4f:79:d2:e7:75:45:
1d:21:24:18:fe:d6:e9:af:2f:b0:c4:3e:cb:f4:b0:43:23:68:
f3:ad:ca:7c:5f:dd:c4:17:a4:cc:c3:e4:00:f7:ca:06:86:0d:
07:d6:68:62:a5:07:8c:7a:aa:a5:96:b5:c4:fc:cc:44:c8:2c:
90:2e:b6:a2:d1:27:f5:70:77:9b:fa:3d:95:dc:39:bd:dc:c2:
a7:dd:59:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:21:25 2025 by rpki-client