Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/66e51a-fe82-4b5d-9884-b533f4941afe/1/duBenuWUd-AVX8HtwKGDByl2bog.mft
File: duBenuWUd-AVX8HtwKGDByl2bog.mft (raw, json)
Hash identifier: EFw2t/HG5csEsfD361GI3q+glRRtCtc8t3MjG+rLpeU=
Subject key identifier: 1E:A1:B5:53:DB:27:F2:E5:AB:E4:07:3C:3E:2B:4B:76:BB:96:53:7B
Authority key identifier: 76:E0:5E:9E:E5:94:77:E0:15:5F:C1:ED:C0:A1:83:07:29:76:6E:88
Certificate issuer: /CN=76e05e9ee59477e0155fc1edc0a1830729766e88
Certificate serial: 0197B77BF25062717471E85BBAF40609E21F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/duBenuWUd-AVX8HtwKGDByl2bog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/66e51a-fe82-4b5d-9884-b533f4941afe/1/duBenuWUd-AVX8HtwKGDByl2bog.mft
Manifest number: 1544
Signing time: Sat 28 Jun 2025 17:00:42 +0000
Manifest this update: Sat 28 Jun 2025 17:00:42 +0000
Manifest next update: Sun 29 Jun 2025 17:00:42 +0000
Files and hashes: 1: 1-eNfPNgGjJz34a_6zifXZRNCWXw.roa (hash: BrqTM2h6iG7WyfhfDjhQFT8qhh74OvrPhMC05Ggy8tQ=)
2: duBenuWUd-AVX8HtwKGDByl2bog.crl (hash: P3dHJhsAipsms1CviyzFLWp2R/SBZew8fHsGfbzOEHg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/66e51a-fe82-4b5d-9884-b533f4941afe/1/duBenuWUd-AVX8HtwKGDByl2bog.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/66e51a-fe82-4b5d-9884-b533f4941afe/1/duBenuWUd-AVX8HtwKGDByl2bog.mft
rsync://rpki.ripe.net/repository/DEFAULT/duBenuWUd-AVX8HtwKGDByl2bog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7b:f2:50:62:71:74:71:e8:5b:ba:f4:06:09:e2:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76e05e9ee59477e0155fc1edc0a1830729766e88
Validity
Not Before: Jun 28 17:00:42 2025 GMT
Not After : Jun 29 17:00:42 2025 GMT
Subject: CN=1ea1b553db27f2e5abe4073c3e2b4b76bb96537b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ef:f0:ce:41:06:68:b1:10:f2:49:f6:85:d3:
a4:8f:f9:a1:ee:2f:fc:20:7b:c6:75:71:2c:02:a9:
ea:aa:28:c0:68:68:5e:ba:a0:5f:2c:56:85:b6:59:
c4:ce:c8:c3:2e:8d:02:4b:90:b4:11:9a:bb:f9:6a:
1b:3c:ad:8a:11:00:c3:50:cf:88:10:56:01:cc:33:
4f:4b:69:87:0a:6d:41:9b:d0:5f:e5:04:ee:b7:82:
f2:0e:7f:4b:df:95:92:6a:3c:79:36:fd:6a:7c:c5:
35:39:66:a4:7f:98:b0:e8:3d:47:05:f0:4c:44:b9:
d2:b0:ae:d3:d6:3f:84:dd:15:73:62:87:66:fc:d8:
b3:c6:d5:d2:38:f5:6c:ed:84:fc:8c:7d:93:e9:97:
97:69:01:0f:bf:ed:9c:48:04:97:8b:4b:c2:63:be:
f7:31:03:a3:2a:66:e8:34:a9:0a:3a:a2:0f:f5:ec:
8f:b8:ae:e5:a5:62:74:eb:fe:e1:96:13:f7:23:33:
25:a4:07:e6:b5:86:3d:aa:a6:d3:74:32:39:8c:9a:
0c:a2:e6:42:7b:93:2a:3f:79:28:84:27:8e:99:74:
ce:61:18:1c:c2:62:c0:4e:6a:6a:84:e0:3c:51:e5:
41:4f:03:5e:2b:a9:31:dc:d7:ed:b1:61:99:5f:c0:
ec:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:A1:B5:53:DB:27:F2:E5:AB:E4:07:3C:3E:2B:4B:76:BB:96:53:7B
X509v3 Authority Key Identifier:
keyid:76:E0:5E:9E:E5:94:77:E0:15:5F:C1:ED:C0:A1:83:07:29:76:6E:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/duBenuWUd-AVX8HtwKGDByl2bog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/66e51a-fe82-4b5d-9884-b533f4941afe/1/duBenuWUd-AVX8HtwKGDByl2bog.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/66e51a-fe82-4b5d-9884-b533f4941afe/1/duBenuWUd-AVX8HtwKGDByl2bog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:b6:44:a6:21:76:ae:02:cb:00:00:c9:9b:c1:4c:67:3d:2b:
64:da:8a:9b:03:75:10:f2:8f:45:4d:40:ab:d3:0e:5e:55:97:
64:28:13:e2:ad:8e:d2:0f:39:1c:56:eb:45:42:01:c5:e9:ec:
fd:fe:f0:d6:46:ea:68:4f:13:17:7e:56:93:cf:18:70:04:a0:
cb:76:23:3a:33:0d:7a:33:61:cb:f3:96:54:5d:3f:42:18:11:
01:d5:02:a8:9c:a7:fb:74:9f:3a:13:33:51:bf:96:4d:bb:b7:
5a:d8:b6:99:ed:59:02:60:2e:ef:19:d6:ce:a1:5a:cc:8d:fd:
56:58:68:a3:f0:c3:ba:a5:90:ac:74:e7:73:37:92:be:69:a3:
66:6c:a2:db:c1:68:ab:07:26:45:29:b0:0c:f1:f6:7f:34:07:
90:6a:29:86:60:76:89:02:4d:6b:3e:57:89:c7:e6:39:46:8d:
1f:33:ba:59:cf:0c:40:2c:f9:b3:7e:4f:57:0e:82:43:75:71:
d5:04:5c:ed:37:86:3d:d7:5b:32:37:f8:70:45:73:08:3a:4a:
62:a6:5c:ed:37:24:9d:c3:02:df:e0:1e:0d:d5:0e:c9:e5:ac:
c5:28:f6:f5:f9:3f:4b:31:a8:76:fb:87:51:53:91:77:07:1d:
ce:15:ed:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:37:51 2025 by rpki-client