Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/0c6111-58f7-4b75-bcab-90bc4624c7b2/1/dHDfwLtc4G2G3yT-PKpLTvNBePQ.mft
File: dHDfwLtc4G2G3yT-PKpLTvNBePQ.mft (raw, json)
Hash identifier: yD3P+xiNT+cinMypkef8R86co/nBUJBzaAqEn4VUCPU=
Subject key identifier: 96:BD:9C:C7:64:AF:A9:90:2C:77:1C:81:A2:40:61:68:67:E9:54:7F
Authority key identifier: 74:70:DF:C0:BB:5C:E0:6D:86:DF:24:FE:3C:AA:4B:4E:F3:41:78:F4
Certificate issuer: /CN=7470dfc0bb5ce06d86df24fe3caa4b4ef34178f4
Certificate serial: 0197B77CD2F35367124E82124D8DE8726307
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dHDfwLtc4G2G3yT-PKpLTvNBePQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/0c6111-58f7-4b75-bcab-90bc4624c7b2/1/dHDfwLtc4G2G3yT-PKpLTvNBePQ.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 17:01:40 +0000
Manifest this update: Sat 28 Jun 2025 17:01:40 +0000
Manifest next update: Sun 29 Jun 2025 17:01:40 +0000
Files and hashes: 1: NVfSq2DY4cD3_FemKxq3kFWdNbQ.roa (hash: FrMf82dKiOwRXnPTbOvJcW2xGJFytZk+POr0sPYgteE=)
2: dHDfwLtc4G2G3yT-PKpLTvNBePQ.crl (hash: 3f+HbHpdokuQmwLvW1Kmajr/JkJcp3Kzx2lSGA9ewuo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/0c6111-58f7-4b75-bcab-90bc4624c7b2/1/dHDfwLtc4G2G3yT-PKpLTvNBePQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/0c6111-58f7-4b75-bcab-90bc4624c7b2/1/dHDfwLtc4G2G3yT-PKpLTvNBePQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/dHDfwLtc4G2G3yT-PKpLTvNBePQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:d2:f3:53:67:12:4e:82:12:4d:8d:e8:72:63:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7470dfc0bb5ce06d86df24fe3caa4b4ef34178f4
Validity
Not Before: Jun 28 17:01:40 2025 GMT
Not After : Jun 29 17:01:40 2025 GMT
Subject: CN=96bd9cc764afa9902c771c81a240616867e9547f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:18:cd:31:1c:09:84:65:0f:a6:2a:b6:2a:8a:
cf:67:e9:37:59:ca:f1:c3:9a:6f:58:9e:93:53:71:
28:75:4c:cd:64:73:aa:82:15:30:13:ad:f5:5d:6c:
f2:c2:3f:66:2f:c8:dd:c2:46:1e:6b:43:84:97:a9:
b6:f4:7a:d8:35:94:90:22:4f:43:57:90:ed:07:56:
1c:a9:49:4f:8e:04:12:69:8c:de:dd:1a:a7:9d:0e:
c1:e2:e7:fc:b7:4c:ad:66:56:78:d5:d6:d8:3b:79:
43:70:67:df:19:dd:c6:d1:05:50:01:b3:96:3f:f9:
cd:f8:ab:f9:d6:00:da:cf:f6:89:8d:6a:e3:17:cf:
bf:f6:8d:df:c6:e7:6f:e5:71:fd:59:41:7e:ac:f0:
75:bf:9b:93:76:06:2d:75:67:e2:c8:17:b7:9e:00:
22:7b:8b:ab:28:b3:58:a1:2f:5e:53:77:86:2b:57:
68:16:71:6c:be:4f:0e:ac:86:27:b1:27:da:40:70:
78:ad:29:27:2b:57:d7:73:01:56:0f:2d:19:a4:e7:
a1:d0:45:bf:b3:2c:d2:d3:0e:d5:37:8f:ef:68:11:
71:08:ea:ff:76:5c:9f:3c:44:2e:f8:28:8b:2c:65:
ac:48:85:b6:83:c7:6b:8d:c8:bd:10:1c:9d:ee:70:
2d:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:BD:9C:C7:64:AF:A9:90:2C:77:1C:81:A2:40:61:68:67:E9:54:7F
X509v3 Authority Key Identifier:
keyid:74:70:DF:C0:BB:5C:E0:6D:86:DF:24:FE:3C:AA:4B:4E:F3:41:78:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dHDfwLtc4G2G3yT-PKpLTvNBePQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/0c6111-58f7-4b75-bcab-90bc4624c7b2/1/dHDfwLtc4G2G3yT-PKpLTvNBePQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/0c6111-58f7-4b75-bcab-90bc4624c7b2/1/dHDfwLtc4G2G3yT-PKpLTvNBePQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:f4:83:37:98:ff:d2:3c:cc:7b:6a:65:e3:49:85:31:6e:6f:
4a:1a:6e:24:ce:6b:01:9d:bc:2e:e1:bc:3f:db:78:ab:eb:35:
f0:c7:2b:42:ec:18:1a:d0:08:77:80:d1:fa:92:62:4b:4e:ed:
a8:48:be:9b:1f:4b:eb:71:7b:23:d2:b1:a5:38:17:4d:fc:1d:
88:ca:78:97:93:32:b0:11:ab:2e:c4:04:49:86:3e:30:48:23:
c4:11:06:e9:c9:91:a9:96:39:a2:df:56:c3:6a:29:9a:42:8d:
31:85:7f:6d:9c:de:9c:41:0f:98:3b:12:76:ef:17:dc:b8:08:
c3:45:e2:27:cf:08:ce:7c:ff:2f:2e:17:19:61:e5:c4:33:d9:
84:e6:9e:db:fa:b7:d7:a8:04:9a:50:2b:1a:34:02:ae:0f:ee:
a3:46:94:2e:da:63:f1:5d:86:2f:7b:85:d7:d5:64:53:78:26:
45:66:b5:ab:a3:a0:40:df:cf:9b:b1:d4:b8:76:ed:3e:74:a8:
41:c7:f6:e1:4f:d7:a4:93:06:c5:cf:d5:6f:ef:87:7b:6d:df:
25:c1:d1:0b:46:e9:f6:2b:cb:d6:78:df:a5:d9:3e:10:5a:07:
d2:c1:fa:7a:df:ce:84:3c:53:c5:0f:3f:1e:1e:f3:01:34:5b:
d0:48:45:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:51:19 2025 by rpki-client