Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/29a422-a791-4dcf-90fb-2c9127ab48c3/1/dNAyUoux0Vl2bNed5HhtzZYqH7s.mft
File: dNAyUoux0Vl2bNed5HhtzZYqH7s.mft (raw, json)
Hash identifier: dmDdk0vny/ksS5Yy2Fi8aFCzwbREdeN3oCEPBlxRE7s=
Subject key identifier: 53:6A:B4:85:77:CC:76:15:60:32:2D:83:EB:00:4C:B3:DD:D7:CC:DF
Authority key identifier: 74:D0:32:52:8B:B1:D1:59:76:6C:D7:9D:E4:78:6D:CD:96:2A:1F:BB
Certificate issuer: /CN=74d032528bb1d159766cd79de4786dcd962a1fbb
Certificate serial: 0197B88F3021A0927D82AC1DFC4B3D5194CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dNAyUoux0Vl2bNed5HhtzZYqH7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/29a422-a791-4dcf-90fb-2c9127ab48c3/1/dNAyUoux0Vl2bNed5HhtzZYqH7s.mft
Manifest number: 1375
Signing time: Sat 28 Jun 2025 22:01:21 +0000
Manifest this update: Sat 28 Jun 2025 22:01:21 +0000
Manifest next update: Sun 29 Jun 2025 22:01:21 +0000
Files and hashes: 1: O2QrsRpu21AzPFWSKx6-icFIuDk.roa (hash: yYvXQaBaDt2Fw+c7tWeP9pRQ80CLvEe29rG4qx33m94=)
2: dNAyUoux0Vl2bNed5HhtzZYqH7s.crl (hash: oWjxbVeAdUmA0WcSQLqwwNH4PumXVqqw4mU5r+rZ7Ko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/29a422-a791-4dcf-90fb-2c9127ab48c3/1/dNAyUoux0Vl2bNed5HhtzZYqH7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/29a422-a791-4dcf-90fb-2c9127ab48c3/1/dNAyUoux0Vl2bNed5HhtzZYqH7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/dNAyUoux0Vl2bNed5HhtzZYqH7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 22:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:30:21:a0:92:7d:82:ac:1d:fc:4b:3d:51:94:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74d032528bb1d159766cd79de4786dcd962a1fbb
Validity
Not Before: Jun 28 22:01:21 2025 GMT
Not After : Jun 29 22:01:21 2025 GMT
Subject: CN=536ab48577cc761560322d83eb004cb3ddd7ccdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:0a:59:d3:f8:af:a4:d6:35:d2:56:59:50:22:
bb:7a:e1:8b:21:d5:10:02:35:d0:73:27:1c:3a:bf:
39:c3:cc:8d:da:d5:a6:ec:99:04:15:e1:e7:89:29:
80:e5:65:80:8d:6f:d2:d4:15:69:64:c4:d1:b6:7a:
26:d4:48:37:b4:24:30:93:10:5c:ed:80:ab:4f:81:
92:61:2c:05:2d:4b:3c:19:18:a8:c3:81:00:0d:06:
e6:18:4e:63:bb:d6:57:95:52:6a:5e:30:4a:cf:0d:
3a:d4:93:45:08:28:a2:bd:e8:06:f3:d3:49:e4:0b:
c4:36:bc:27:a7:be:68:19:bb:9a:fe:c2:49:c6:a4:
d3:0e:7d:8a:c5:89:9d:9d:26:c1:67:85:f8:1c:0c:
38:78:d8:5f:35:47:76:17:73:b7:23:b3:65:d8:f0:
19:78:8e:9a:be:4a:d0:80:bd:27:a9:d7:d1:78:c8:
87:63:12:65:76:81:d0:fe:9a:38:aa:ea:ee:d8:9d:
db:ab:3a:dd:7b:48:90:d9:85:1a:02:6c:1c:67:ca:
c8:8f:19:70:0b:d2:9c:eb:71:40:fa:b1:64:4e:f7:
53:c9:ec:04:78:11:dd:a2:55:26:8c:cf:0a:15:b1:
95:19:c6:d5:f2:f5:d4:97:63:c6:c2:ff:27:a8:84:
1b:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:6A:B4:85:77:CC:76:15:60:32:2D:83:EB:00:4C:B3:DD:D7:CC:DF
X509v3 Authority Key Identifier:
keyid:74:D0:32:52:8B:B1:D1:59:76:6C:D7:9D:E4:78:6D:CD:96:2A:1F:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dNAyUoux0Vl2bNed5HhtzZYqH7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/29a422-a791-4dcf-90fb-2c9127ab48c3/1/dNAyUoux0Vl2bNed5HhtzZYqH7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/29a422-a791-4dcf-90fb-2c9127ab48c3/1/dNAyUoux0Vl2bNed5HhtzZYqH7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ea:3a:44:1c:23:49:bd:08:2b:ea:f0:f8:52:ae:43:9d:f3:3c:
8a:bc:40:4f:43:5c:09:52:85:a7:5a:6c:af:50:ab:95:30:ac:
38:1b:64:69:52:db:47:d6:3e:22:56:8d:79:31:8f:e5:ef:a2:
76:e3:68:ac:24:ff:a2:0d:2f:a6:c8:aa:52:2e:35:50:e6:73:
31:bc:78:f8:ae:98:c3:a5:ee:05:60:94:dd:32:c0:ae:9f:98:
95:d4:0f:4e:4c:00:a1:f2:c9:9f:48:a1:33:0d:6c:b3:b3:5c:
93:a5:59:5c:76:01:18:f4:b3:64:20:e5:24:1f:f7:52:a1:93:
90:89:b6:7d:68:10:6a:5e:30:1e:00:e4:23:26:d7:65:6b:8c:
bc:5e:e1:a5:14:1a:73:31:f9:cd:e5:fa:48:f3:62:cf:32:f8:
16:69:95:68:6f:82:47:49:53:39:ad:b1:10:a2:55:6d:9a:9e:
a3:3a:78:14:c7:55:0c:4c:bb:ac:f9:4c:2a:38:69:cf:6b:0f:
d7:63:2b:7b:9e:4e:e7:aa:28:1a:ca:08:1f:be:83:ff:9b:ed:
de:a6:05:a3:a4:e7:ac:12:b2:9e:4c:f8:19:c1:5d:1c:a7:77:
d5:4a:a7:96:3a:fb:44:80:09:27:98:b9:90:61:cc:b4:46:c4:
9f:98:4f:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:01:39 2025 by rpki-client