Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/1be5e1-56b4-4c66-beab-6f163966af8b/1/dBmPcCK5VgUB20SK9gMB-ihekjY.mft
File: dBmPcCK5VgUB20SK9gMB-ihekjY.mft (raw, json)
Hash identifier: x2zWXiRNfzhDb7RyRiFIIlJ++mgFlAia6IFK4/+GLTo=
Subject key identifier: DF:5C:2C:D3:40:23:40:B4:D8:C6:73:09:7F:B3:62:D8:59:EC:10:88
Authority key identifier: 74:19:8F:70:22:B9:56:05:01:DB:44:8A:F6:03:01:FA:28:5E:92:36
Certificate issuer: /CN=74198f7022b9560501db448af60301fa285e9236
Certificate serial: 0197B96A804A231EF6533BEC2EB2A24DA114
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dBmPcCK5VgUB20SK9gMB-ihekjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/1be5e1-56b4-4c66-beab-6f163966af8b/1/dBmPcCK5VgUB20SK9gMB-ihekjY.mft
Manifest number: 15B9
Signing time: Sun 29 Jun 2025 02:00:53 +0000
Manifest this update: Sun 29 Jun 2025 02:00:53 +0000
Manifest next update: Mon 30 Jun 2025 02:00:53 +0000
Files and hashes: 1: HIDgrdHX_QU-bGXtDjZHW_ouIno.roa (hash: CeASJRYiDgx1fz5UAh5dDbAHwn7ALNNERk8t4H2LNDQ=)
2: dBmPcCK5VgUB20SK9gMB-ihekjY.crl (hash: GKm2zy0R0XVNkPdcHuSzqSxN7ffMd8//JK2JDhUQ7eg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/1be5e1-56b4-4c66-beab-6f163966af8b/1/dBmPcCK5VgUB20SK9gMB-ihekjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/1be5e1-56b4-4c66-beab-6f163966af8b/1/dBmPcCK5VgUB20SK9gMB-ihekjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/dBmPcCK5VgUB20SK9gMB-ihekjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 02:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:6a:80:4a:23:1e:f6:53:3b:ec:2e:b2:a2:4d:a1:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74198f7022b9560501db448af60301fa285e9236
Validity
Not Before: Jun 29 02:00:53 2025 GMT
Not After : Jun 30 02:00:53 2025 GMT
Subject: CN=df5c2cd3402340b4d8c673097fb362d859ec1088
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:a8:ae:59:a7:72:dc:40:73:13:b7:4f:5c:4f:
f6:ff:cb:e6:10:8f:90:c0:58:78:78:59:7f:e8:a5:
fb:fe:f3:a3:79:a1:d1:7b:01:48:a0:0f:9b:fc:f3:
0b:38:cc:3d:c5:a6:b8:66:af:75:83:ee:1d:fb:35:
26:bd:12:d7:7f:18:a4:e6:a9:73:19:8d:82:70:9f:
36:69:06:c3:a1:74:18:a7:c2:7d:23:1d:67:94:2f:
42:63:48:45:0d:6b:a3:84:47:32:b8:25:0b:72:95:
6a:f9:6a:e5:08:e6:b8:2f:9a:55:4c:f7:69:98:b7:
df:e5:cd:5b:5b:25:e8:c4:67:4a:36:16:db:c6:14:
3f:24:2c:a8:c9:1d:02:78:2d:02:32:7f:fe:d5:a7:
c1:a2:c9:d0:1d:34:08:85:45:f6:48:b2:40:06:e5:
1a:3e:fc:b8:aa:c3:33:96:7e:63:4a:7b:b2:13:b2:
07:7d:be:1c:df:63:67:54:35:b8:f6:93:e7:b8:5d:
83:1c:12:24:af:7c:97:c3:2b:ff:5d:da:64:13:17:
e4:de:58:a4:50:a1:c3:8c:5e:9d:52:eb:7f:f7:47:
e8:f5:38:4a:a0:35:59:50:a7:bb:e7:7d:df:df:e4:
67:c7:54:c0:b4:80:c3:ed:9e:11:b8:41:57:91:f7:
d7:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:5C:2C:D3:40:23:40:B4:D8:C6:73:09:7F:B3:62:D8:59:EC:10:88
X509v3 Authority Key Identifier:
keyid:74:19:8F:70:22:B9:56:05:01:DB:44:8A:F6:03:01:FA:28:5E:92:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dBmPcCK5VgUB20SK9gMB-ihekjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/1be5e1-56b4-4c66-beab-6f163966af8b/1/dBmPcCK5VgUB20SK9gMB-ihekjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/1be5e1-56b4-4c66-beab-6f163966af8b/1/dBmPcCK5VgUB20SK9gMB-ihekjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:09:d2:b1:60:f0:86:87:03:e5:cd:4f:b5:19:2f:6c:f5:9a:
a3:f7:1a:aa:80:0e:ab:1b:66:ca:c6:05:e6:5e:61:9b:a0:e5:
61:e6:19:74:f6:cb:16:e9:9f:b9:44:34:df:de:8e:1f:3b:5a:
25:c9:18:b9:18:88:19:19:d5:07:eb:c1:45:f2:ea:86:1c:a5:
de:fb:da:19:a1:16:ad:86:00:69:06:df:8c:4f:24:1b:1b:d0:
3a:9f:6e:64:e1:60:c0:f8:6f:f0:b8:a1:b0:18:9f:c7:1f:65:
4b:db:aa:66:a0:6d:9d:22:63:43:a9:65:bb:91:b9:71:e3:09:
89:1d:98:0b:60:f1:9f:cc:e7:8b:56:76:1b:15:c6:ee:e8:a9:
73:6b:a4:79:53:e3:8d:7a:b9:68:1d:6d:4f:d3:e8:51:0e:45:
82:0f:7f:4d:0e:42:ea:b3:3d:db:bf:23:92:80:8d:7e:f1:5b:
6c:3b:53:f7:7b:fa:65:44:fc:e1:ac:b3:3b:a2:93:6f:b4:41:
d3:1d:85:03:40:15:b2:c2:2a:2f:6f:23:ce:11:cc:3e:a7:fa:
a3:ea:3c:8d:91:f9:02:e9:1a:41:37:7a:f8:ec:2a:23:f2:3b:
8c:ae:12:0a:91:8a:0e:2c:58:6f:9e:cc:c2:df:77:4f:0f:61:
ff:99:71:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 09:07:12 2025 by rpki-client