Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/980e66-3631-4fde-8e2d-c849bc0f359b/1/dfGnY3RcJdrSj0qBFmiOgs4SAos.mft
File: dfGnY3RcJdrSj0qBFmiOgs4SAos.mft (raw, json)
Hash identifier: AWrw9qnF0j2ZOy/7MisydsKzoLeKTEzdgez3gHYRTEs=
Subject key identifier: 11:21:86:E2:D2:B9:AF:43:F2:B2:A6:DC:41:23:DD:5C:C2:0B:AF:7F
Authority key identifier: 75:F1:A7:63:74:5C:25:DA:D2:8F:4A:81:16:68:8E:82:CE:12:02:8B
Certificate issuer: /CN=75f1a763745c25dad28f4a8116688e82ce12028b
Certificate serial: 0197B6A1CA7614DEF35B0D87AA49A43D6D9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dfGnY3RcJdrSj0qBFmiOgs4SAos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/980e66-3631-4fde-8e2d-c849bc0f359b/1/dfGnY3RcJdrSj0qBFmiOgs4SAos.mft
Manifest number: 13DA
Signing time: Sat 28 Jun 2025 13:02:25 +0000
Manifest this update: Sat 28 Jun 2025 13:02:25 +0000
Manifest next update: Sun 29 Jun 2025 13:02:25 +0000
Files and hashes: 1: dfGnY3RcJdrSj0qBFmiOgs4SAos.crl (hash: NdGse4re6TFpS3HFXyp3m/f4VElIyEvAVLwEn/o5e0Y=)
2: ecFLrFSYazGNpMwtdUC2GTyB7Ls.roa (hash: 9V1D5AZ/eHVRt4YDKcmTOE8v9iNuXaOV/i0Ye/mdU9E=)
3: zeZfDF6FQVXfyXUfk9yRfeoJZIA.roa (hash: DtxqGawsrFVZx4HNzS+S5CsdD6flwYPGqAxKv36rkJ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/980e66-3631-4fde-8e2d-c849bc0f359b/1/dfGnY3RcJdrSj0qBFmiOgs4SAos.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/980e66-3631-4fde-8e2d-c849bc0f359b/1/dfGnY3RcJdrSj0qBFmiOgs4SAos.mft
rsync://rpki.ripe.net/repository/DEFAULT/dfGnY3RcJdrSj0qBFmiOgs4SAos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:ca:76:14:de:f3:5b:0d:87:aa:49:a4:3d:6d:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75f1a763745c25dad28f4a8116688e82ce12028b
Validity
Not Before: Jun 28 13:02:25 2025 GMT
Not After : Jun 29 13:02:25 2025 GMT
Subject: CN=112186e2d2b9af43f2b2a6dc4123dd5cc20baf7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:16:1f:c5:3a:6c:3f:c8:db:20:3c:85:1f:b7:
95:d3:77:90:f4:fb:b5:0f:31:fd:2b:f8:94:67:fd:
81:e5:53:dd:87:a8:52:1d:25:89:2b:89:91:41:cc:
43:09:84:21:ff:70:5f:22:99:ed:ad:6f:d1:9a:6a:
0d:eb:97:9f:ea:f5:bc:64:eb:37:d7:51:1c:b6:f8:
c0:8e:14:2d:56:d0:23:27:96:0b:90:33:9a:43:1e:
72:37:08:f7:3e:99:b9:7b:ef:79:0d:f7:51:90:44:
61:8c:1e:2a:1d:bb:3e:96:c9:e4:74:94:68:f0:08:
a6:15:de:84:9f:6c:4d:21:d8:5b:94:8d:7e:4d:bf:
b6:cd:d4:57:aa:7b:66:ed:e2:ca:b4:59:a5:f8:70:
3b:cd:17:68:bd:19:35:28:a3:76:cc:61:6a:c3:8e:
fb:72:f0:0c:37:e9:7f:95:aa:5d:34:49:f0:a1:fb:
9d:35:57:b6:2f:7d:19:6f:a5:fd:fb:2d:b9:4b:a7:
91:41:04:e7:61:61:41:5c:ee:33:71:2a:6f:42:28:
36:c7:b0:05:ac:4e:75:3c:05:6a:08:a9:f4:90:26:
63:ee:cc:d4:04:f6:f3:9d:bd:ef:cb:08:a5:72:c8:
a8:06:b0:28:ce:fe:c4:32:f6:5f:c9:97:c4:2f:7c:
1a:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:21:86:E2:D2:B9:AF:43:F2:B2:A6:DC:41:23:DD:5C:C2:0B:AF:7F
X509v3 Authority Key Identifier:
keyid:75:F1:A7:63:74:5C:25:DA:D2:8F:4A:81:16:68:8E:82:CE:12:02:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dfGnY3RcJdrSj0qBFmiOgs4SAos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/980e66-3631-4fde-8e2d-c849bc0f359b/1/dfGnY3RcJdrSj0qBFmiOgs4SAos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/980e66-3631-4fde-8e2d-c849bc0f359b/1/dfGnY3RcJdrSj0qBFmiOgs4SAos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:d6:9e:2e:ae:bb:92:b7:d6:94:e7:80:89:7d:ce:a4:4b:97:
77:08:77:2c:12:98:8d:9f:70:2f:cc:e6:e1:07:b6:51:c0:f6:
24:de:fa:0b:d4:ce:78:97:fe:06:c6:41:f8:db:8c:52:0f:3f:
e1:cc:03:b0:26:58:4b:62:82:bf:67:56:04:74:51:d5:bb:c4:
5c:7d:58:63:2c:25:10:51:32:7c:43:9e:fe:c5:36:dc:4c:1d:
91:e3:5b:c6:e8:ba:8f:ef:97:71:2f:58:de:9e:5a:7b:fa:fc:
90:f4:5f:f5:ca:42:61:57:0a:78:b4:a4:76:42:1a:c2:a7:f4:
9f:81:eb:b4:90:8b:a1:b5:f2:f6:e1:bd:62:2b:0f:ff:5a:0c:
54:7c:2c:33:23:9e:ac:c1:76:58:10:36:1b:6c:b2:bb:c6:e2:
b0:79:a3:f6:68:85:02:7f:92:e4:3f:4a:a3:1b:4f:5e:9c:bb:
9d:be:38:4a:e5:fe:9c:4f:aa:f9:89:de:5e:d0:b1:1c:2f:51:
2f:28:c5:71:54:93:73:94:e9:01:86:6d:c0:bf:b9:ed:7d:a4:
e7:88:03:37:59:fb:cb:a5:2b:ed:1d:df:47:cb:c7:2a:45:26:
2d:bf:07:0b:8c:fa:ba:ad:2c:74:1e:5a:de:10:1c:01:ba:45:
bc:03:ff:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:57:59 2025 by rpki-client