Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/059d1a-ef94-4729-bf6d-42ae75b7957d/1/DXqRJWm3h9kuU1X_-u1YH-UKKcA.mft
File: DXqRJWm3h9kuU1X_-u1YH-UKKcA.mft (raw, json)
Hash identifier: yvJ7TLcvV8LjBas8YB81DLV0PVWfw5zOdRw7PziSL/I=
Subject key identifier: CA:98:4F:5E:58:A7:31:49:8B:72:BB:B7:C6:C3:4F:A1:71:DF:7E:5C
Authority key identifier: 0D:7A:91:25:69:B7:87:D9:2E:53:55:FF:FA:ED:58:1F:E5:0A:29:C0
Certificate issuer: /CN=0d7a912569b787d92e5355fffaed581fe50a29c0
Certificate serial: 0197B70F46A52AC6D3964C2C3BD7670B461A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXqRJWm3h9kuU1X_-u1YH-UKKcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/059d1a-ef94-4729-bf6d-42ae75b7957d/1/DXqRJWm3h9kuU1X_-u1YH-UKKcA.mft
Manifest number: 0BBF
Signing time: Sat 28 Jun 2025 15:02:00 +0000
Manifest this update: Sat 28 Jun 2025 15:02:00 +0000
Manifest next update: Sun 29 Jun 2025 15:02:00 +0000
Files and hashes: 1: 1-KvMzZmip20mq_6TE6zao4jxRAY.roa (hash: +e++mFx5okLj8UNvWINUv13IrPw1m2hTZhWWjifAWCI=)
2: DXqRJWm3h9kuU1X_-u1YH-UKKcA.crl (hash: AzpMpnM4HMhuDPlb6NyBkGUvawp4HfqOaXyKVNeIunY=)
3: o-s15NWoSVwgSNMQIfsWarrXXGg.roa (hash: 6NGLeGFSgaPGE1dmOJNyifUaOXRJYE04QVot2QOuL9c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/059d1a-ef94-4729-bf6d-42ae75b7957d/1/DXqRJWm3h9kuU1X_-u1YH-UKKcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/059d1a-ef94-4729-bf6d-42ae75b7957d/1/DXqRJWm3h9kuU1X_-u1YH-UKKcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/DXqRJWm3h9kuU1X_-u1YH-UKKcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:46:a5:2a:c6:d3:96:4c:2c:3b:d7:67:0b:46:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d7a912569b787d92e5355fffaed581fe50a29c0
Validity
Not Before: Jun 28 15:02:00 2025 GMT
Not After : Jun 29 15:02:00 2025 GMT
Subject: CN=ca984f5e58a731498b72bbb7c6c34fa171df7e5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:16:8f:0f:ba:8f:69:2f:a9:c5:75:f6:bc:da:
07:4f:22:6d:2a:36:36:fb:65:52:d4:88:07:3f:cd:
8e:4d:3e:8f:f8:a5:f9:f2:51:9d:63:94:93:2c:d0:
c6:e6:2a:20:e4:a0:90:56:0b:32:d9:bd:d9:d3:e1:
81:95:6f:d2:cf:61:94:0f:83:f0:7d:11:fa:08:84:
e1:3d:61:11:bc:a4:3f:2b:8f:ff:61:c0:de:43:f9:
06:ce:5f:b2:f9:7c:e5:56:eb:be:56:82:4f:71:78:
51:03:ca:c0:44:c8:92:57:d1:e0:9a:24:12:fb:a0:
1c:f6:fe:f5:eb:37:4a:be:2f:52:01:d5:38:08:4a:
3a:5c:14:ae:00:ea:63:29:30:5b:b4:a6:30:a2:f0:
3e:ea:1b:28:1b:e7:cd:37:4c:9d:cf:35:d6:a4:59:
bc:ff:02:b0:6e:3c:fd:b6:97:23:a6:17:32:5c:cb:
4e:65:26:30:51:46:3d:75:f7:f2:30:d0:ab:96:61:
a0:d1:fa:fd:77:ea:5b:cf:b9:18:f5:d7:27:70:ba:
72:31:a0:45:c4:72:22:bb:a1:65:01:ac:da:90:1e:
0c:04:1f:57:ac:e9:51:3d:fb:ab:62:37:aa:0a:85:
32:87:88:59:0d:0f:65:d2:3f:2f:31:2d:71:e0:6d:
bc:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:98:4F:5E:58:A7:31:49:8B:72:BB:B7:C6:C3:4F:A1:71:DF:7E:5C
X509v3 Authority Key Identifier:
keyid:0D:7A:91:25:69:B7:87:D9:2E:53:55:FF:FA:ED:58:1F:E5:0A:29:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXqRJWm3h9kuU1X_-u1YH-UKKcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/059d1a-ef94-4729-bf6d-42ae75b7957d/1/DXqRJWm3h9kuU1X_-u1YH-UKKcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/059d1a-ef94-4729-bf6d-42ae75b7957d/1/DXqRJWm3h9kuU1X_-u1YH-UKKcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:16:f7:11:0c:22:bf:5d:35:19:a1:02:14:4e:89:1a:b3:27:
c2:d8:f7:56:0a:24:1c:3a:eb:d8:3f:55:40:a2:3b:7e:e0:24:
ea:19:3b:40:ba:93:1e:fb:7f:23:a1:b4:4f:b8:2b:91:58:33:
06:cd:e4:56:6c:2e:ae:b8:07:0b:b5:3e:ca:39:90:28:6c:f9:
5e:20:60:03:f2:e5:4f:dd:44:75:96:72:2a:3d:c9:68:74:f8:
5b:fb:af:9c:0c:7d:da:aa:d1:b1:1e:eb:4c:ce:a6:ec:d9:3d:
e5:b2:15:48:b3:5c:a1:36:54:9b:7a:27:86:19:49:9d:9d:cd:
25:10:16:e9:f2:fb:21:d1:3a:8b:ef:2f:9a:c7:16:46:5f:b0:
59:1f:12:45:af:ce:6d:05:bc:3d:2c:d2:fb:e6:68:d7:f3:26:
fb:d4:3a:d8:bd:58:8b:b9:3c:0e:24:b8:1d:77:dc:e5:90:fa:
e2:f3:44:3f:fb:10:78:2a:7f:c6:df:be:61:8e:c4:0e:8a:bd:
39:9b:00:e9:2c:54:f6:74:99:77:6e:a0:8a:d8:f2:fa:b4:a9:
8b:59:1d:71:0e:4b:ec:24:27:ca:05:15:ed:a6:16:a9:e3:8f:
a6:54:e6:e9:d3:4a:bf:14:aa:c3:c4:c7:26:1f:42:15:3a:71:
a1:26:59:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:21:12 2025 by rpki-client