Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/699704-8004-4614-b44c-2ca492f6d7a8/1/dKTzwLZqTJPoD_X22JrYZz6UPF8.mft
File: dKTzwLZqTJPoD_X22JrYZz6UPF8.mft (raw, json)
Hash identifier: 2DwjqM9Vw8XtJSZ5s59Nujz/+PH1KYCm5jISIJv8t3k=
Subject key identifier: 9A:0B:B5:97:8E:A8:37:5D:EC:54:61:ED:0A:93:4D:4F:A8:79:47:4A
Authority key identifier: 74:A4:F3:C0:B6:6A:4C:93:E8:0F:F5:F6:D8:9A:D8:67:3E:94:3C:5F
Certificate issuer: /CN=74a4f3c0b66a4c93e80ff5f6d89ad8673e943c5f
Certificate serial: 0197BF6C9D3BA026721C1FEA8526D637D708
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dKTzwLZqTJPoD_X22JrYZz6UPF8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/699704-8004-4614-b44c-2ca492f6d7a8/1/dKTzwLZqTJPoD_X22JrYZz6UPF8.mft
Manifest number: 15B9
Signing time: Mon 30 Jun 2025 06:00:55 +0000
Manifest this update: Mon 30 Jun 2025 06:00:55 +0000
Manifest next update: Tue 01 Jul 2025 06:00:55 +0000
Files and hashes: 1: 1-MmN0tsEmoim2sae335BAlf2iMY.roa (hash: BOjGK2JKa11z5em/Dgc+q3/nSr0kFU/3HDEjsSjRF+k=)
2: dKTzwLZqTJPoD_X22JrYZz6UPF8.crl (hash: uphrJikBfIykm5U+cbfJCbs7+I0DfPSi/h3YwnvYcTg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/699704-8004-4614-b44c-2ca492f6d7a8/1/dKTzwLZqTJPoD_X22JrYZz6UPF8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/699704-8004-4614-b44c-2ca492f6d7a8/1/dKTzwLZqTJPoD_X22JrYZz6UPF8.mft
rsync://rpki.ripe.net/repository/DEFAULT/dKTzwLZqTJPoD_X22JrYZz6UPF8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 06:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:bf:6c:9d:3b:a0:26:72:1c:1f:ea:85:26:d6:37:d7:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74a4f3c0b66a4c93e80ff5f6d89ad8673e943c5f
Validity
Not Before: Jun 30 06:00:55 2025 GMT
Not After : Jul 1 06:00:55 2025 GMT
Subject: CN=9a0bb5978ea8375dec5461ed0a934d4fa879474a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:ab:14:02:ba:ac:f9:80:66:56:74:7d:a9:72:
9a:1b:b1:78:e6:5f:c0:16:e2:d8:56:ec:d6:4f:35:
71:5c:13:26:b9:d4:a4:03:f5:59:e6:07:13:09:88:
03:5c:28:91:5d:79:f8:61:4e:b7:86:b9:d5:e5:63:
e5:43:20:8c:80:b4:72:2c:5e:b8:85:5a:81:2e:96:
d3:40:f1:f6:2a:c4:8e:bb:7c:5c:46:cf:48:4e:11:
22:70:96:97:71:fa:9f:f4:ff:3d:b5:e9:1b:35:0e:
3e:50:9f:59:15:4e:bd:44:78:f5:aa:59:17:36:57:
71:16:74:e9:10:ab:a4:7f:c5:de:63:5e:ae:bb:17:
86:85:5c:a3:ae:60:4f:ca:6a:bf:a8:4e:e7:0a:80:
1c:05:41:47:e1:90:4f:be:f9:c7:34:38:2c:f4:e2:
32:11:fa:be:5e:c5:93:28:17:da:d6:92:5f:c5:ac:
1f:a9:6f:92:3e:40:52:a3:82:00:e7:6a:6f:8e:94:
17:38:85:0f:0f:54:65:84:3c:f0:0e:fe:99:fc:6b:
d0:e8:00:7c:87:57:39:54:58:d3:e5:f8:a7:ae:57:
b6:26:35:aa:ce:d4:68:72:1e:ca:e0:01:3d:53:a3:
cb:94:61:c6:3a:0d:d7:07:c4:f8:fd:d7:8c:b1:d7:
af:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:0B:B5:97:8E:A8:37:5D:EC:54:61:ED:0A:93:4D:4F:A8:79:47:4A
X509v3 Authority Key Identifier:
keyid:74:A4:F3:C0:B6:6A:4C:93:E8:0F:F5:F6:D8:9A:D8:67:3E:94:3C:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dKTzwLZqTJPoD_X22JrYZz6UPF8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/699704-8004-4614-b44c-2ca492f6d7a8/1/dKTzwLZqTJPoD_X22JrYZz6UPF8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/699704-8004-4614-b44c-2ca492f6d7a8/1/dKTzwLZqTJPoD_X22JrYZz6UPF8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:7c:f9:74:bb:09:1e:46:66:74:d8:4c:b2:7a:6a:2b:83:dd:
57:d0:60:84:71:4e:2b:fe:0e:9a:04:6e:89:30:ed:c8:f5:21:
6a:99:03:3d:72:a8:c0:b0:7e:36:85:6e:49:1d:49:46:a2:0a:
6e:67:b7:43:b7:a4:70:0b:a2:68:20:92:29:d7:36:c5:f7:28:
be:44:0d:45:2b:5f:14:5f:bf:53:ac:92:60:2a:ff:ce:fa:ad:
54:a1:65:28:d9:cb:c1:e9:f3:b8:ab:d6:ac:26:a9:f2:b3:42:
75:6a:d0:72:c1:49:a7:93:a8:54:2f:cf:63:ed:95:5e:e2:cf:
e4:0c:f1:73:e5:d6:b1:37:9b:5c:11:57:7b:e7:f9:09:f2:68:
a6:68:cc:36:d8:67:97:f1:76:e1:b1:9e:fb:56:c7:b3:dc:f3:
ed:96:a2:b7:fe:98:4d:54:79:a6:0b:8a:6e:de:d5:0b:6b:e2:
78:c8:69:5a:d4:de:f2:ed:a0:c1:93:bd:9a:3e:91:99:32:6a:
52:c4:cc:8e:e8:61:f0:24:3c:87:fd:6d:14:86:4f:e6:9e:95:
34:18:94:c3:0e:6b:c8:25:34:5e:84:89:48:84:88:38:c7:50:
5b:34:07:4c:7b:67:88:06:73:ba:39:1c:ea:28:70:65:bd:6e:
a1:b6:b8:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 16:12:34 2025 by rpki-client