Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/b2d604-ddfb-4eff-b49a-df5ce56e7b4b/1/DMgdB0NX3l0y-KZc2e56WFvz7G8.mft
File: DMgdB0NX3l0y-KZc2e56WFvz7G8.mft (raw, json)
Hash identifier: L1tg2RlbC74Kc62v4Yb3YXI4qOQJgR82H+7unaMDWCE=
Subject key identifier: 8E:61:2A:1F:37:DD:E7:7A:6E:08:27:C5:46:DE:F8:8D:22:22:8C:48
Authority key identifier: 0C:C8:1D:07:43:57:DE:5D:32:F8:A6:5C:D9:EE:7A:58:5B:F3:EC:6F
Certificate issuer: /CN=0cc81d074357de5d32f8a65cd9ee7a585bf3ec6f
Certificate serial: 0197B70ECBFA9F8CBB0AB2B09227AE7FEF53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DMgdB0NX3l0y-KZc2e56WFvz7G8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/b2d604-ddfb-4eff-b49a-df5ce56e7b4b/1/DMgdB0NX3l0y-KZc2e56WFvz7G8.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 15:01:29 +0000
Manifest this update: Sat 28 Jun 2025 15:01:29 +0000
Manifest next update: Sun 29 Jun 2025 15:01:29 +0000
Files and hashes: 1: DMgdB0NX3l0y-KZc2e56WFvz7G8.crl (hash: k5ZvaSDamLjD1naBgQXKJL2N6GVxiwXyfkAMCQtAh1c=)
2: SUwSO2Fs2FjhvtnhOTiiq1oGzWM.roa (hash: olDxnIOko1Itz17Pa+h1ZPnFbbCInWHBCOkMHLf/KiI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/b2d604-ddfb-4eff-b49a-df5ce56e7b4b/1/DMgdB0NX3l0y-KZc2e56WFvz7G8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/b2d604-ddfb-4eff-b49a-df5ce56e7b4b/1/DMgdB0NX3l0y-KZc2e56WFvz7G8.mft
rsync://rpki.ripe.net/repository/DEFAULT/DMgdB0NX3l0y-KZc2e56WFvz7G8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:cb:fa:9f:8c:bb:0a:b2:b0:92:27:ae:7f:ef:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cc81d074357de5d32f8a65cd9ee7a585bf3ec6f
Validity
Not Before: Jun 28 15:01:29 2025 GMT
Not After : Jun 29 15:01:29 2025 GMT
Subject: CN=8e612a1f37dde77a6e0827c546def88d22228c48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:58:26:91:e8:6c:d1:91:86:99:16:93:ed:60:
3a:0e:07:d5:3a:f7:de:1a:ff:85:2a:7d:d6:7e:f9:
13:f5:25:e1:2d:2f:ef:2d:4c:3f:91:89:b5:58:8a:
7b:16:f1:bd:5f:c4:e1:4e:56:36:fd:5e:c6:2d:6e:
a0:cd:2b:4e:f2:5b:e1:79:6b:41:4b:58:32:7d:8b:
66:e8:9d:90:39:c9:33:73:ea:e0:de:bb:c0:f4:df:
47:07:2c:52:52:34:79:78:f0:c2:7e:61:d9:83:67:
24:38:5f:6b:58:2c:a2:f9:38:d0:59:f1:b4:ba:24:
06:9c:0a:10:a7:c8:be:03:db:be:56:f3:32:ba:54:
de:e4:ce:db:96:d9:cd:fc:dc:90:0c:c2:c6:b0:43:
41:84:d0:28:95:02:d2:0f:c0:10:85:91:bd:7f:5a:
f8:87:1f:96:28:ca:72:ae:8d:5e:7c:da:f6:5a:da:
c8:72:5c:dc:93:5a:53:78:2e:7e:6e:bd:38:ec:9b:
29:e1:2e:58:76:ff:63:c3:ab:bf:34:ab:ac:b7:73:
70:a8:73:b7:6b:b6:ed:36:44:af:02:ef:1b:a2:46:
3a:52:70:da:a9:34:bf:b5:e0:72:00:db:b5:f4:30:
ac:67:2e:07:de:e4:2a:86:f2:20:73:f2:d8:a8:c9:
4b:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:61:2A:1F:37:DD:E7:7A:6E:08:27:C5:46:DE:F8:8D:22:22:8C:48
X509v3 Authority Key Identifier:
keyid:0C:C8:1D:07:43:57:DE:5D:32:F8:A6:5C:D9:EE:7A:58:5B:F3:EC:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DMgdB0NX3l0y-KZc2e56WFvz7G8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/b2d604-ddfb-4eff-b49a-df5ce56e7b4b/1/DMgdB0NX3l0y-KZc2e56WFvz7G8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/b2d604-ddfb-4eff-b49a-df5ce56e7b4b/1/DMgdB0NX3l0y-KZc2e56WFvz7G8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:f2:c9:db:f8:99:30:87:93:ec:58:55:c4:d4:c7:0d:20:33:
ec:03:fc:de:a4:98:7e:85:ab:b6:2d:37:2f:0d:32:31:47:da:
8e:98:b7:ce:e5:05:e0:21:d9:ea:d1:9e:96:fe:e8:16:27:1f:
61:ec:d1:f1:7b:61:07:1b:30:83:dd:c9:ec:34:06:20:bb:74:
ce:c8:61:3a:b6:dc:55:a6:63:eb:68:28:7b:38:05:ab:77:c6:
e7:d9:8b:26:cf:ab:f0:8f:f4:9e:24:0f:cd:d0:99:24:1f:1e:
21:03:89:6c:c3:23:e6:60:ec:88:a7:bd:66:44:c6:3a:80:fb:
e0:80:05:54:61:ee:1c:6d:d6:90:a1:67:07:6f:43:aa:01:2a:
f2:1d:24:99:a3:1d:c8:db:ba:62:1a:7e:71:11:ef:75:15:97:
09:4e:7a:c9:f4:e7:45:bd:7f:e4:3b:d8:dc:0b:87:f1:bc:b0:
89:68:dd:b7:67:af:cb:8f:86:20:ad:ca:10:ad:cd:20:f8:0a:
0c:fa:39:1a:b8:ce:db:bc:53:71:8d:be:fe:5f:c6:f5:0d:5d:
65:f1:ac:91:79:da:cc:eb:1d:b2:8a:41:9a:ec:a9:d9:6d:91:
7d:ec:e9:40:8b:3d:65:2a:05:e8:58:03:d2:fc:a6:f9:85:f0:
18:24:11:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 18:58:27 2025 by rpki-client