Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/9d4bef-8ebd-4fdb-aaf0-e09bc4eae189/1/DzRHeqDwEjE4wEcvWzUo5NIZPmg.mft
File: DzRHeqDwEjE4wEcvWzUo5NIZPmg.mft (raw, json)
Hash identifier: Dla9R1VDw6t/7gX/qH6Cuj9eig8WEMN9trCGnsw4LG0=
Subject key identifier: 0D:33:FA:3E:36:48:54:FC:FA:33:C9:97:D7:A5:6D:E1:EA:3D:DF:AD
Authority key identifier: 0F:34:47:7A:A0:F0:12:31:38:C0:47:2F:5B:35:28:E4:D2:19:3E:68
Certificate issuer: /CN=0f34477aa0f0123138c0472f5b3528e4d2193e68
Certificate serial: 0197B5FC3127E6E22C70BB09BA25111A2AF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DzRHeqDwEjE4wEcvWzUo5NIZPmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/9d4bef-8ebd-4fdb-aaf0-e09bc4eae189/1/DzRHeqDwEjE4wEcvWzUo5NIZPmg.mft
Manifest number: 15B7
Signing time: Sat 28 Jun 2025 10:01:33 +0000
Manifest this update: Sat 28 Jun 2025 10:01:33 +0000
Manifest next update: Sun 29 Jun 2025 10:01:33 +0000
Files and hashes: 1: DzRHeqDwEjE4wEcvWzUo5NIZPmg.crl (hash: B09ZG2pUmcD5qmhpkhqvvyqrwNFBSCOUQ7LDcFHo844=)
2: oiZHTdtEDz6aP8WgUPcMGh6h5wQ.roa (hash: ewlicz9ndLYefeC/+lwNbWi0WIXINkEHOt0Ubc6GHQg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/9d4bef-8ebd-4fdb-aaf0-e09bc4eae189/1/DzRHeqDwEjE4wEcvWzUo5NIZPmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/9d4bef-8ebd-4fdb-aaf0-e09bc4eae189/1/DzRHeqDwEjE4wEcvWzUo5NIZPmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/DzRHeqDwEjE4wEcvWzUo5NIZPmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:fc:31:27:e6:e2:2c:70:bb:09:ba:25:11:1a:2a:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f34477aa0f0123138c0472f5b3528e4d2193e68
Validity
Not Before: Jun 28 10:01:33 2025 GMT
Not After : Jun 29 10:01:33 2025 GMT
Subject: CN=0d33fa3e364854fcfa33c997d7a56de1ea3ddfad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:61:4b:86:2f:47:20:8f:88:17:f6:b8:e8:02:
c1:3e:eb:5d:99:7a:5f:55:dc:f9:80:26:38:cb:b1:
46:93:c8:b4:d6:23:19:ac:b4:9b:ee:2e:ae:c5:74:
0d:44:30:0b:44:5a:8c:0f:ec:d7:f6:e0:eb:75:5a:
18:7d:f8:68:48:b0:fd:1d:19:ca:f1:b3:fe:0a:db:
6f:66:b5:28:78:89:7f:9b:f3:a7:cc:40:30:6e:d7:
1c:d4:c1:08:53:06:be:65:f0:0c:29:1a:93:24:e3:
76:64:2b:af:af:cf:3a:47:18:8b:ca:1a:ca:0f:07:
da:bd:00:6e:10:d4:58:6c:03:33:73:69:7e:09:12:
19:d5:bc:d5:c7:9f:53:98:b6:b7:89:43:ab:7a:83:
52:eb:0d:6e:92:bd:52:63:0d:4e:23:21:6d:90:34:
1e:91:4c:60:e0:25:7d:1b:fa:50:3a:35:fc:d1:00:
1d:58:6e:f0:89:6d:44:51:66:48:60:4e:31:34:4b:
0f:45:5d:08:f9:e0:37:a1:16:82:b3:84:a4:95:f9:
ba:45:56:fb:71:ae:2d:71:ca:af:f7:3e:52:20:14:
ec:1f:56:6f:61:da:c8:18:79:b1:d9:1e:63:21:f8:
cf:ed:de:bb:a5:78:7e:14:51:10:95:3e:28:76:42:
3d:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:33:FA:3E:36:48:54:FC:FA:33:C9:97:D7:A5:6D:E1:EA:3D:DF:AD
X509v3 Authority Key Identifier:
keyid:0F:34:47:7A:A0:F0:12:31:38:C0:47:2F:5B:35:28:E4:D2:19:3E:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DzRHeqDwEjE4wEcvWzUo5NIZPmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/9d4bef-8ebd-4fdb-aaf0-e09bc4eae189/1/DzRHeqDwEjE4wEcvWzUo5NIZPmg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/9d4bef-8ebd-4fdb-aaf0-e09bc4eae189/1/DzRHeqDwEjE4wEcvWzUo5NIZPmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:ac:0d:06:2b:ba:6b:90:37:ca:ea:8f:a6:23:a6:6e:e8:20:
a9:ba:ef:45:db:a4:d4:d5:02:05:59:25:9a:ad:98:60:36:86:
9e:8c:e5:f1:17:45:4b:02:1c:b0:ca:52:e6:46:d9:65:80:ac:
35:8d:09:a4:18:bc:65:51:3c:85:dc:64:c9:7b:b8:83:e7:52:
63:c9:a8:c5:66:87:d5:58:43:97:4d:c7:59:28:a5:b4:e4:6d:
d9:d5:aa:d8:09:3b:ff:53:20:51:1c:da:46:67:77:4f:98:9b:
f8:94:39:3b:e0:3b:2a:7a:a1:8b:af:e9:e1:f3:39:d2:2b:b1:
6c:25:f9:50:f0:fe:5a:7e:6e:80:0f:d6:68:34:3b:12:c8:0d:
18:eb:a5:69:f4:52:1d:af:27:6c:fd:e0:cc:0f:52:0b:a2:dc:
39:93:fe:8e:69:96:b7:32:a1:d3:01:d0:d7:3c:d3:a7:de:85:
1b:50:63:d5:5b:43:00:3f:4f:57:af:42:9a:d1:ab:f0:10:c4:
98:a8:12:c1:66:43:a6:ac:e6:0d:b1:19:a7:62:0d:99:9e:22:
c0:e3:bd:f3:21:e2:4a:fb:fc:94:c4:bc:90:3c:75:74:37:1e:
37:ec:2e:05:7f:7b:9f:17:24:3b:a4:2b:00:57:6d:42:e9:27:
76:27:34:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:16:12 2025 by rpki-client