Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/e4bb51-b963-4b46-aa27-26bf8ccd7b74/1/Dt4XuMrwJGG_VMCWTtOKJZAGL5Q.mft
File: Dt4XuMrwJGG_VMCWTtOKJZAGL5Q.mft (raw, json)
Hash identifier: zfODbwfc6IGptyrpHKgcCNJqa+B5coZY9PgAIefJEIY=
Subject key identifier: A7:74:78:46:28:81:67:92:A7:83:74:4A:52:57:8C:39:45:F5:9D:AB
Authority key identifier: 0E:DE:17:B8:CA:F0:24:61:BF:54:C0:96:4E:D3:8A:25:90:06:2F:94
Certificate issuer: /CN=0ede17b8caf02461bf54c0964ed38a2590062f94
Certificate serial: 0197B7454A22BC19C483B50ECFF8D6AF36CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dt4XuMrwJGG_VMCWTtOKJZAGL5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/e4bb51-b963-4b46-aa27-26bf8ccd7b74/1/Dt4XuMrwJGG_VMCWTtOKJZAGL5Q.mft
Manifest number: 154C
Signing time: Sat 28 Jun 2025 16:01:00 +0000
Manifest this update: Sat 28 Jun 2025 16:01:00 +0000
Manifest next update: Sun 29 Jun 2025 16:01:00 +0000
Files and hashes: 1: Dt4XuMrwJGG_VMCWTtOKJZAGL5Q.crl (hash: cMjWPejvqJuHMxqcPoI305hHutW9qbGM2cjokonm4TA=)
2: egtmxNDK9FDAgrarU-Xyuo-QkfI.roa (hash: e278lOu7Zhdc/1PtGLzkkZXNU5WcrL6PKLI2BzSWdWQ=)
3: qYoYfUlCCn9zP-yDwbrlHyj3qyU.roa (hash: AiZ+gWtLdz0jof3tMOVdLJ+BBsLKxSxUlK2q0zbs/tg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/e4bb51-b963-4b46-aa27-26bf8ccd7b74/1/Dt4XuMrwJGG_VMCWTtOKJZAGL5Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/e4bb51-b963-4b46-aa27-26bf8ccd7b74/1/Dt4XuMrwJGG_VMCWTtOKJZAGL5Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dt4XuMrwJGG_VMCWTtOKJZAGL5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:4a:22:bc:19:c4:83:b5:0e:cf:f8:d6:af:36:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ede17b8caf02461bf54c0964ed38a2590062f94
Validity
Not Before: Jun 28 16:01:00 2025 GMT
Not After : Jun 29 16:01:00 2025 GMT
Subject: CN=a774784628816792a783744a52578c3945f59dab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:90:53:b2:d6:3f:a0:ad:ed:6a:fe:40:29:36:
4f:c4:52:66:eb:d9:f9:66:3e:f6:5e:ba:eb:e0:b2:
fa:bb:19:da:e2:a6:68:e8:11:82:dd:73:a0:12:ab:
47:16:2b:d4:a4:56:16:ae:f3:bf:00:1a:15:e4:db:
9b:75:11:0b:66:c3:ae:c2:52:f7:20:85:50:eb:ca:
98:1f:b4:f4:94:02:56:6b:1f:3a:c9:4c:ef:06:dc:
67:5a:d5:6a:ab:57:10:dc:c5:85:d9:fe:37:a7:fa:
78:aa:97:aa:9d:bc:d3:8c:33:95:78:20:0c:03:29:
b9:f7:5a:cb:f8:72:22:ff:7b:7b:3b:2f:f8:96:40:
eb:cf:c3:98:27:49:e1:4d:39:c5:e6:cc:fc:61:bc:
9e:53:7c:f8:bc:01:cf:a7:4f:11:c1:f2:8e:b7:b4:
b5:bf:0f:de:cc:9d:ee:53:c9:b5:a8:11:16:61:ee:
fa:f0:bf:21:ce:28:47:b6:cd:1a:ba:5d:31:ed:ce:
3f:ba:8a:f7:d9:09:63:74:3b:58:11:f9:95:63:43:
04:a7:a1:6b:19:c3:b4:97:f4:58:17:4b:8c:af:f4:
f7:4d:8f:9f:2e:47:7b:a4:17:75:4c:b7:7e:90:4b:
f2:23:2a:a6:6e:a6:60:27:06:79:72:5e:59:35:35:
66:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:74:78:46:28:81:67:92:A7:83:74:4A:52:57:8C:39:45:F5:9D:AB
X509v3 Authority Key Identifier:
keyid:0E:DE:17:B8:CA:F0:24:61:BF:54:C0:96:4E:D3:8A:25:90:06:2F:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dt4XuMrwJGG_VMCWTtOKJZAGL5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/e4bb51-b963-4b46-aa27-26bf8ccd7b74/1/Dt4XuMrwJGG_VMCWTtOKJZAGL5Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/e4bb51-b963-4b46-aa27-26bf8ccd7b74/1/Dt4XuMrwJGG_VMCWTtOKJZAGL5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:92:71:da:a5:85:ce:ad:12:75:0a:04:09:0b:d2:47:92:d1:
3d:68:3f:65:11:54:e2:3f:d8:88:7b:7c:7f:d9:74:3e:fd:06:
fc:58:08:63:f8:a3:8a:1a:be:b3:30:80:a0:37:37:ce:89:4d:
bc:7c:0a:d4:a4:fc:52:1a:f0:ac:d4:89:b8:37:ad:8b:91:23:
38:00:a7:14:69:0b:29:ba:29:88:09:fc:9a:d1:33:da:16:33:
35:ac:9c:da:28:0b:7b:2d:d5:37:16:aa:6f:b1:fa:76:d8:aa:
7d:d5:ee:c2:f7:e7:e0:cf:2a:bf:31:1a:b9:31:69:84:72:d8:
9f:56:64:32:eb:d1:b6:00:1c:fa:1f:cd:78:3a:9c:b5:a2:e2:
6d:2b:74:2c:47:52:a9:56:7c:44:0c:c5:1c:3c:c1:6c:b6:f5:
91:8c:f8:a8:ed:28:8e:f2:96:09:55:7d:04:99:ff:60:cc:20:
a8:f3:f0:d9:42:c3:f6:a6:8c:63:bb:ab:dd:1e:02:b1:24:7c:
f4:bd:18:90:e5:74:3a:29:0f:1f:43:b0:48:77:f1:04:8a:40:
78:1c:70:c0:ae:cb:3f:00:14:0f:fa:90:cf:e6:4f:5a:1a:af:
7b:29:08:49:8c:28:52:ef:15:48:c4:b7:57:9c:f2:9c:1e:0f:
89:14:b8:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:54:29 2025 by rpki-client