Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/6c0e22-fb61-49db-b065-993cd8388fd5/1/DG8YKAS1blCKo3LAPM63PvjCxos.mft
File: DG8YKAS1blCKo3LAPM63PvjCxos.mft (raw, json)
Hash identifier: d3qrN1Y+qh3Kbt3yuEWrnK/xPV7ig2k/Nt/tABrPjTM=
Subject key identifier: 59:A4:20:C5:0A:7E:2A:07:41:D3:9C:0E:AA:E6:39:11:60:C5:38:9B
Authority key identifier: 0C:6F:18:28:04:B5:6E:50:8A:A3:72:C0:3C:CE:B7:3E:F8:C2:C6:8B
Certificate issuer: /CN=0c6f182804b56e508aa372c03cceb73ef8c2c68b
Certificate serial: 0197B77C954531A677361121BFFDCA0936B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DG8YKAS1blCKo3LAPM63PvjCxos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/6c0e22-fb61-49db-b065-993cd8388fd5/1/DG8YKAS1blCKo3LAPM63PvjCxos.mft
Manifest number: 15BD
Signing time: Sat 28 Jun 2025 17:01:24 +0000
Manifest this update: Sat 28 Jun 2025 17:01:24 +0000
Manifest next update: Sun 29 Jun 2025 17:01:24 +0000
Files and hashes: 1: CboN5GI28SiyUWI4MOyyBBarnSE.roa (hash: IuQeN17ie/CZAm40U/UBsK+jP36giHzi+QWUvQDTrTI=)
2: DG8YKAS1blCKo3LAPM63PvjCxos.crl (hash: ZEVAvdUAltPV7Oq6LCnc9Ky2DKxTkYe8m6Ma4zwrvAQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/6c0e22-fb61-49db-b065-993cd8388fd5/1/DG8YKAS1blCKo3LAPM63PvjCxos.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/6c0e22-fb61-49db-b065-993cd8388fd5/1/DG8YKAS1blCKo3LAPM63PvjCxos.mft
rsync://rpki.ripe.net/repository/DEFAULT/DG8YKAS1blCKo3LAPM63PvjCxos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:95:45:31:a6:77:36:11:21:bf:fd:ca:09:36:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c6f182804b56e508aa372c03cceb73ef8c2c68b
Validity
Not Before: Jun 28 17:01:24 2025 GMT
Not After : Jun 29 17:01:24 2025 GMT
Subject: CN=59a420c50a7e2a0741d39c0eaae6391160c5389b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e7:3c:a7:0a:9f:3a:ed:e3:ab:04:2f:2f:1a:
2e:d2:f3:a4:35:7f:69:17:0a:51:c8:8e:3c:fb:8d:
8f:4f:9a:49:38:5c:bd:9b:48:9e:a5:dd:b6:6a:03:
d4:40:f4:40:c3:f4:b5:52:d5:25:1b:e6:13:69:b5:
e6:77:e6:d3:c5:22:17:0b:40:9b:5e:9f:b5:0f:5d:
20:88:59:45:f5:ff:a6:86:a9:ce:f8:b0:43:87:1e:
1b:fe:cc:6d:8f:01:01:a4:0a:d1:65:3d:24:d3:52:
ff:53:03:95:f9:66:ea:eb:8f:98:ee:66:3e:85:5f:
44:bf:f8:0f:a8:7d:93:77:49:1b:95:b0:52:51:73:
59:d8:db:59:98:81:3c:85:81:a8:de:74:e2:9a:0d:
1a:2a:70:9e:af:c8:da:ca:0a:fc:76:b5:dd:fe:f4:
6b:5d:ff:d8:eb:f4:db:2c:4d:d7:5a:f5:36:d8:7d:
1a:a9:e1:58:1a:33:36:c8:f3:08:53:d8:e6:91:a1:
6d:44:38:ef:cf:23:ff:62:e1:44:3b:db:01:8a:53:
70:d5:20:d3:66:38:8e:5b:52:f9:6e:66:4f:9a:69:
12:e6:47:24:44:5c:9b:9d:82:59:87:ff:d9:c1:06:
a9:d6:79:15:6c:41:64:9c:85:e4:8e:86:ae:e9:28:
88:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:A4:20:C5:0A:7E:2A:07:41:D3:9C:0E:AA:E6:39:11:60:C5:38:9B
X509v3 Authority Key Identifier:
keyid:0C:6F:18:28:04:B5:6E:50:8A:A3:72:C0:3C:CE:B7:3E:F8:C2:C6:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DG8YKAS1blCKo3LAPM63PvjCxos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/6c0e22-fb61-49db-b065-993cd8388fd5/1/DG8YKAS1blCKo3LAPM63PvjCxos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/6c0e22-fb61-49db-b065-993cd8388fd5/1/DG8YKAS1blCKo3LAPM63PvjCxos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:e7:1b:26:b6:3c:10:49:cd:19:fa:dc:aa:5a:8e:3b:73:73:
da:4f:8a:48:20:f7:0e:88:b1:97:05:ca:c4:c5:80:66:3b:fb:
6b:fa:27:11:01:75:28:0b:d1:42:3c:36:06:2f:63:5f:58:55:
88:38:a5:f0:bf:d6:99:a7:fb:37:d8:12:dd:50:70:d4:bf:b2:
8d:c6:f6:dc:dd:97:0c:ec:e0:1c:6e:59:18:36:84:9c:b3:37:
d9:a2:f2:85:b8:e5:73:7e:b2:55:fc:07:ea:04:18:26:ad:03:
5c:00:ab:65:fa:1b:9f:e8:62:12:7b:db:b2:ca:36:c7:30:99:
01:dd:b2:a9:6e:61:ff:d4:18:0a:31:f6:f6:16:d9:ba:2f:df:
27:ba:3f:92:ee:73:94:81:e6:54:8d:31:51:e8:27:23:1f:27:
87:7c:4c:cd:f6:fe:a0:19:06:ea:99:18:63:bb:a6:b0:67:cd:
d4:a6:d1:2b:be:52:12:9f:70:e0:ab:1e:50:b0:75:76:89:1d:
1e:e9:f0:e5:80:b9:a7:66:f8:bf:d5:4f:1b:60:f1:85:7d:72:
ad:ee:98:82:72:ac:28:c2:1c:9c:3c:8d:e7:56:ef:5d:7f:e5:
03:3e:24:e0:a3:fb:1b:ea:74:0d:b2:16:1b:c1:72:48:ea:79:
a1:7c:1b:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:17:19 2025 by rpki-client