Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/53741e-9392-4d19-99d2-ced29650a280/1/DaPL8eDoVupMU7WrroZZTsmTOYI.mft
File: DaPL8eDoVupMU7WrroZZTsmTOYI.mft (raw, json)
Hash identifier: 6Y4yiFGsKsHVlSKMHNxvYmdL9ltP+Gw4uEO5zI+Jfj4=
Subject key identifier: E2:65:A6:53:05:44:26:DF:CC:A6:B8:2B:58:CB:E4:02:47:CD:43:4C
Authority key identifier: 0D:A3:CB:F1:E0:E8:56:EA:4C:53:B5:AB:AE:86:59:4E:C9:93:39:82
Certificate issuer: /CN=0da3cbf1e0e856ea4c53b5abae86594ec9933982
Certificate serial: 0197B88F50D81285A81EC7600450960DC93C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DaPL8eDoVupMU7WrroZZTsmTOYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/53741e-9392-4d19-99d2-ced29650a280/1/DaPL8eDoVupMU7WrroZZTsmTOYI.mft
Manifest number: 0CE7
Signing time: Sat 28 Jun 2025 22:01:29 +0000
Manifest this update: Sat 28 Jun 2025 22:01:29 +0000
Manifest next update: Sun 29 Jun 2025 22:01:29 +0000
Files and hashes: 1: DaPL8eDoVupMU7WrroZZTsmTOYI.crl (hash: cBtEvoSBP4bXOnzWKCTNdp7XJ7y+bdUta2RYAbsqO7M=)
2: MNtx-M1QVv5z_3qcN6vxhaOotfc.roa (hash: px53xNqq/MugnV+199J7ZDHhE5FdBcLFsMKgKSEziic=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/53741e-9392-4d19-99d2-ced29650a280/1/DaPL8eDoVupMU7WrroZZTsmTOYI.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/53741e-9392-4d19-99d2-ced29650a280/1/DaPL8eDoVupMU7WrroZZTsmTOYI.mft
rsync://rpki.ripe.net/repository/DEFAULT/DaPL8eDoVupMU7WrroZZTsmTOYI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 22:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:50:d8:12:85:a8:1e:c7:60:04:50:96:0d:c9:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0da3cbf1e0e856ea4c53b5abae86594ec9933982
Validity
Not Before: Jun 28 22:01:29 2025 GMT
Not After : Jun 29 22:01:29 2025 GMT
Subject: CN=e265a653054426dfcca6b82b58cbe40247cd434c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:c2:b1:76:ab:a7:18:6d:9d:53:5e:31:71:bb:
0e:8b:a7:0e:2b:30:2b:c9:f9:1f:c0:bc:0c:b2:64:
d4:5b:59:d7:aa:84:ed:ab:aa:aa:29:e7:26:4e:00:
35:ac:8d:79:a5:cf:ac:c3:ae:4a:8f:b9:8d:53:5a:
c0:1e:aa:08:e8:3c:a4:f0:21:8d:7a:cc:12:5b:c4:
27:98:ba:a9:77:55:28:2c:43:20:dc:41:c4:bc:6e:
37:ce:a1:0e:43:04:6f:8a:4f:2c:08:c1:36:44:d0:
49:6c:d1:6c:d1:3b:80:ed:4f:20:3c:61:b4:87:70:
72:09:40:6c:2f:82:79:d0:c2:f8:f0:a4:1a:b7:91:
91:94:14:3f:ea:d6:6e:f0:ee:7f:de:24:77:fb:e5:
42:b7:19:a8:59:63:03:4c:03:fc:80:e6:83:8d:cd:
cd:51:d7:b5:d3:ee:a8:5e:7a:bc:0c:c6:3f:e8:1e:
04:97:ab:90:8d:47:6c:0d:ad:cb:29:0f:bd:9d:df:
d1:af:10:46:67:d6:6f:4a:d8:f9:c3:fd:92:7f:90:
6f:10:da:88:95:f9:9b:c7:16:eb:95:e7:0a:a8:da:
ad:07:88:a0:39:7d:93:3e:95:90:3d:ad:5b:9c:9c:
c4:e0:9d:cd:7b:4b:7a:a5:90:8e:18:6f:27:4b:2f:
3a:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:65:A6:53:05:44:26:DF:CC:A6:B8:2B:58:CB:E4:02:47:CD:43:4C
X509v3 Authority Key Identifier:
keyid:0D:A3:CB:F1:E0:E8:56:EA:4C:53:B5:AB:AE:86:59:4E:C9:93:39:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DaPL8eDoVupMU7WrroZZTsmTOYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/53741e-9392-4d19-99d2-ced29650a280/1/DaPL8eDoVupMU7WrroZZTsmTOYI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/53741e-9392-4d19-99d2-ced29650a280/1/DaPL8eDoVupMU7WrroZZTsmTOYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:42:5a:d6:51:ae:c8:93:2c:a1:8f:27:bb:35:a8:10:cc:35:
c5:db:28:90:4e:7a:7e:d7:80:cc:81:35:1d:e7:42:fd:61:b1:
1f:47:f5:7a:bf:de:75:22:0f:bc:70:1d:e8:99:19:ac:a6:7e:
04:f5:f2:1a:d5:82:4b:ff:3a:2a:c9:ed:b5:a7:47:e9:43:29:
8f:76:43:30:73:11:78:f3:ce:cb:c4:eb:c3:15:d8:1f:8e:27:
6b:d4:ff:fd:87:49:ca:89:ad:d9:d4:c3:a7:47:1c:98:7a:88:
0d:e5:d1:d2:4e:24:c1:69:79:15:b1:9f:60:e8:f2:d9:89:1b:
cb:45:60:48:64:d4:b1:9d:4a:7c:e0:49:85:a3:4b:a1:bb:cb:
c2:60:64:e5:ea:28:c8:fe:64:3b:46:04:20:60:67:75:b3:f2:
f9:26:bd:2d:aa:4f:b0:f5:27:e2:ea:fb:10:90:ee:58:ae:43:
d7:2b:8b:07:5a:ce:04:ed:51:51:e8:61:97:8e:94:16:4a:2e:
f8:36:6e:38:76:54:1e:07:ce:12:fa:c6:e4:a1:7c:c7:7d:49:
c1:f9:78:cf:cf:84:d9:32:e1:8c:36:38:19:ed:90:73:d1:f4:
0f:34:0e:5e:4f:2b:8d:05:57:93:76:9c:76:f2:b1:84:92:43:
e5:6e:18:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 08:10:55 2025 by rpki-client