Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/46916e-e86c-44a8-8ab9-53849baf1b45/1/DC18I46J3NUvb7IpbfpHWMYcl74.mft
File: DC18I46J3NUvb7IpbfpHWMYcl74.mft (raw, json)
Hash identifier: amWd2bU24JYUbRXsJtPP3T4Ujf8GBGP3mPEYWIIrg5E=
Subject key identifier: 72:BC:CE:F9:0E:9B:80:8B:2B:12:7C:25:9A:51:B9:28:AB:22:82:CA
Authority key identifier: 0C:2D:7C:23:8E:89:DC:D5:2F:6F:B2:29:6D:FA:47:58:C6:1C:97:BE
Certificate issuer: /CN=0c2d7c238e89dcd52f6fb2296dfa4758c61c97be
Certificate serial: 0197B7EA3FFA4B86273A05C94D7552A96CC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DC18I46J3NUvb7IpbfpHWMYcl74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/46916e-e86c-44a8-8ab9-53849baf1b45/1/DC18I46J3NUvb7IpbfpHWMYcl74.mft
Manifest number: 15B3
Signing time: Sat 28 Jun 2025 19:01:11 +0000
Manifest this update: Sat 28 Jun 2025 19:01:11 +0000
Manifest next update: Sun 29 Jun 2025 19:01:11 +0000
Files and hashes: 1: DC18I46J3NUvb7IpbfpHWMYcl74.crl (hash: wxPRcLRwtZx0yssuwSRfXRF/8izN5zzK0bvt/xhADDs=)
2: Fa4rtvztLobT1gePEYyc0DRCu2Y.roa (hash: C1CnICPh2LaUpEFyvXsX8GWWmclYO2wcMr6Jq76RYVQ=)
3: n5nqzvB4Fdb-BeoMgH_u_j1j4eM.roa (hash: M/0C5qRusrhAnj6tAMLK/NHBLWKiMm5trd2xt/8UodI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/46916e-e86c-44a8-8ab9-53849baf1b45/1/DC18I46J3NUvb7IpbfpHWMYcl74.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/46916e-e86c-44a8-8ab9-53849baf1b45/1/DC18I46J3NUvb7IpbfpHWMYcl74.mft
rsync://rpki.ripe.net/repository/DEFAULT/DC18I46J3NUvb7IpbfpHWMYcl74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:3f:fa:4b:86:27:3a:05:c9:4d:75:52:a9:6c:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c2d7c238e89dcd52f6fb2296dfa4758c61c97be
Validity
Not Before: Jun 28 19:01:11 2025 GMT
Not After : Jun 29 19:01:11 2025 GMT
Subject: CN=72bccef90e9b808b2b127c259a51b928ab2282ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f8:87:32:c2:a1:8c:af:4b:e5:a0:4c:96:3c:
c2:6a:23:a8:5e:01:30:68:3d:bc:fd:55:00:11:cc:
14:5b:f0:3a:a5:96:f7:94:2e:c6:80:25:70:81:0f:
c9:06:0f:0b:e0:2a:8f:37:9b:c1:ee:bc:eb:f4:a1:
f3:91:aa:72:20:88:c5:81:18:d1:a5:27:9a:94:7e:
d9:ee:17:b0:e3:22:09:34:91:37:fb:53:36:9e:e0:
76:69:b1:79:83:4c:21:32:72:93:78:e0:20:b8:f0:
8e:8a:2d:cc:37:29:6d:9c:8a:71:19:d8:a3:e5:cc:
03:33:64:f1:50:7c:9f:2b:c0:52:84:fb:36:59:03:
ca:7f:39:04:24:11:dd:51:2b:20:1e:20:ac:57:0e:
e2:87:2d:4e:b7:a5:6b:cd:41:2a:d0:8c:1b:ff:30:
0d:f4:0d:03:5f:f9:64:a7:73:b0:a4:be:fe:a9:46:
c0:a7:46:0e:49:b1:07:86:9d:a8:21:e0:15:8a:c9:
e1:0d:6a:eb:e8:69:de:6c:1d:af:77:a6:cf:8c:d8:
e6:c4:c7:98:7d:d1:80:59:60:fa:4e:04:27:ab:d2:
78:56:84:87:58:60:fe:53:1f:30:9f:90:dd:a7:4c:
26:86:12:aa:fa:58:5c:8e:47:36:95:d9:98:75:c6:
c0:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:BC:CE:F9:0E:9B:80:8B:2B:12:7C:25:9A:51:B9:28:AB:22:82:CA
X509v3 Authority Key Identifier:
keyid:0C:2D:7C:23:8E:89:DC:D5:2F:6F:B2:29:6D:FA:47:58:C6:1C:97:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DC18I46J3NUvb7IpbfpHWMYcl74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/46916e-e86c-44a8-8ab9-53849baf1b45/1/DC18I46J3NUvb7IpbfpHWMYcl74.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/46916e-e86c-44a8-8ab9-53849baf1b45/1/DC18I46J3NUvb7IpbfpHWMYcl74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:b6:1a:c5:cf:46:f9:fa:a2:c0:30:e9:ec:08:a9:7d:20:96:
4b:7e:7e:d0:55:9a:da:e5:d0:d2:a6:49:22:e2:6f:d2:23:aa:
48:c8:01:cf:7a:3d:8d:7f:2d:74:22:0d:7d:7a:00:28:52:1d:
e8:e7:80:cc:66:f6:14:1b:c4:e6:5a:2e:f8:60:de:84:90:ba:
6b:3e:5d:7c:99:fc:10:df:b5:d7:3e:c3:10:47:67:08:aa:29:
2a:ba:45:45:e5:e6:8e:ab:9d:1e:d7:03:f7:6a:d2:ff:9d:aa:
92:88:09:f6:ba:bd:69:d6:54:fc:36:bf:67:ac:33:eb:42:6c:
9c:8e:9e:f8:02:19:cd:79:a6:65:00:bf:2e:5f:90:bb:6d:c6:
74:87:bd:c4:f6:80:dc:6e:5e:ab:7b:8a:a7:0d:02:3b:c0:61:
cc:dc:0f:d6:34:c8:2f:54:ad:90:2e:b8:42:09:c0:55:b3:b2:
4d:af:79:33:9d:0f:c9:fe:c7:1b:5c:e4:32:92:75:73:b0:c1:
d0:42:ff:b8:cf:48:6e:23:cf:c5:8e:bd:a6:7f:5a:4c:91:bd:
dc:c8:ee:ac:5c:0d:f1:18:e2:4a:c0:96:1b:d1:91:c8:24:d8:
f1:68:6f:ee:8b:34:4c:81:0a:46:fd:65:ef:58:39:e3:8e:ff:
57:1f:a5:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:17:12 2025 by rpki-client