Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f7d0f0-a571-457c-9154-8e8675cb092f/1/DXj57XHKOklrjVS5fxR5GNrbnFQ.mft
File: DXj57XHKOklrjVS5fxR5GNrbnFQ.mft (raw, json)
Hash identifier: ApjsyyMWFQ800cCH5eQi/ljNyvEAay14AYFHiGiEJHs=
Subject key identifier: EC:F0:A0:C5:B8:0F:59:9F:59:AE:B3:B4:EF:75:18:5B:D2:6D:0F:3F
Authority key identifier: 0D:78:F9:ED:71:CA:3A:49:6B:8D:54:B9:7F:14:79:18:DA:DB:9C:54
Certificate issuer: /CN=0d78f9ed71ca3a496b8d54b97f147918dadb9c54
Certificate serial: 0197B77C48178715285A8F99B6DC1FAF55D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXj57XHKOklrjVS5fxR5GNrbnFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f7d0f0-a571-457c-9154-8e8675cb092f/1/DXj57XHKOklrjVS5fxR5GNrbnFQ.mft
Manifest number: 014D
Signing time: Sat 28 Jun 2025 17:01:04 +0000
Manifest this update: Sat 28 Jun 2025 17:01:04 +0000
Manifest next update: Sun 29 Jun 2025 17:01:04 +0000
Files and hashes: 1: DXj57XHKOklrjVS5fxR5GNrbnFQ.crl (hash: i2qnSQ3MF2gUuFwhdeRBaJBFyRNFs1QpjkATlIlioC8=)
2: _Lwar98mX_HPuZ6I_iBOIoPweAU.roa (hash: Q4wLDgz1BPTM2gYviJRrmaBtuFqzTEu5NxXR8pya5BA=)
3: uLyoln8iUo21XJeVRG0IGUytncA.roa (hash: rExu+xv1UDsqwxWWN3KFhMpN7PoTmi5ksePI6jLVE7I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/f7d0f0-a571-457c-9154-8e8675cb092f/1/DXj57XHKOklrjVS5fxR5GNrbnFQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/f7d0f0-a571-457c-9154-8e8675cb092f/1/DXj57XHKOklrjVS5fxR5GNrbnFQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/DXj57XHKOklrjVS5fxR5GNrbnFQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:48:17:87:15:28:5a:8f:99:b6:dc:1f:af:55:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d78f9ed71ca3a496b8d54b97f147918dadb9c54
Validity
Not Before: Jun 28 17:01:04 2025 GMT
Not After : Jun 29 17:01:04 2025 GMT
Subject: CN=ecf0a0c5b80f599f59aeb3b4ef75185bd26d0f3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:36:73:dd:f2:e9:d3:ce:d2:9d:b2:cd:0c:5f:
e1:96:e4:cd:2b:80:42:f4:be:19:dc:78:40:6f:50:
76:35:50:8d:38:11:e3:e0:6c:f3:d7:8a:a3:06:ed:
e2:d9:6c:30:62:5b:b9:3e:7c:ee:6f:8f:ef:c0:30:
f2:a6:92:f9:36:3f:73:b5:8d:35:95:59:ab:57:49:
a3:88:10:fd:63:43:f8:87:78:b8:e2:21:79:22:ae:
7b:86:1a:72:f7:27:cf:36:81:04:b8:c2:4d:d9:4e:
50:d4:c3:2d:a5:eb:e1:a0:3d:b7:fa:cf:5f:0b:1f:
f3:44:05:92:fb:92:44:9e:dd:31:6a:03:2f:1c:03:
04:4d:1a:f2:0d:cb:d5:c7:1a:99:7f:7e:dd:c9:e3:
87:35:c1:90:47:a0:80:ed:71:8c:8c:5b:cf:26:84:
00:3d:cc:53:b9:66:dc:e1:55:93:40:51:11:88:95:
1c:a5:91:1c:5e:ae:3d:de:9d:18:bb:05:d9:95:1c:
42:de:88:79:7c:6e:f5:7e:44:4b:b2:5b:27:73:7f:
4c:e8:51:b9:58:5a:64:a9:ce:e4:3a:f9:5a:b2:d2:
ca:96:8b:44:66:63:fb:36:3b:e5:ec:2c:e4:f8:d4:
b0:bb:8b:99:4b:ac:56:38:21:8d:a8:a4:01:83:bc:
6d:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:F0:A0:C5:B8:0F:59:9F:59:AE:B3:B4:EF:75:18:5B:D2:6D:0F:3F
X509v3 Authority Key Identifier:
keyid:0D:78:F9:ED:71:CA:3A:49:6B:8D:54:B9:7F:14:79:18:DA:DB:9C:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXj57XHKOklrjVS5fxR5GNrbnFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f7d0f0-a571-457c-9154-8e8675cb092f/1/DXj57XHKOklrjVS5fxR5GNrbnFQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f7d0f0-a571-457c-9154-8e8675cb092f/1/DXj57XHKOklrjVS5fxR5GNrbnFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:72:52:dc:39:19:29:4a:b5:20:5c:b1:65:ed:c9:88:06:18:
e4:bb:7c:c4:20:45:44:0e:87:6e:1a:b4:0b:d6:37:e1:c8:a0:
3c:ce:3a:26:ef:bb:d7:05:d4:6b:31:50:d2:cc:5a:5c:6a:c3:
79:79:9a:88:2a:01:a3:7e:45:1e:9c:44:b7:11:c9:56:be:8c:
15:07:35:fe:34:26:a4:53:1d:03:ed:5b:65:fc:a2:74:94:79:
d9:c9:ee:3c:0b:11:06:50:87:5f:30:f9:68:c3:04:70:45:ef:
d0:19:42:2c:a5:a1:35:1e:82:cc:1b:f1:4d:62:24:18:05:eb:
d8:05:51:df:c9:47:d4:b0:d4:7e:77:b6:fb:f0:01:36:75:bb:
6a:ca:f3:94:62:ae:cd:65:4f:e5:cd:81:69:9c:07:46:4b:94:
ff:30:bf:99:92:10:f2:08:12:44:fb:35:cd:6d:6c:bb:fa:55:
f0:f0:fc:0f:6f:47:2c:c8:a6:d2:b8:7b:da:a2:f6:26:a3:6c:
22:aa:ac:e0:70:a6:fe:f6:7e:d3:04:d4:ba:11:46:60:ee:98:
c4:ae:3e:1a:ad:01:f8:3c:13:19:93:2b:7c:07:ef:95:70:a6:
35:45:38:59:8b:b5:33:8a:04:48:45:3b:ff:fb:5b:9e:84:6b:
a9:59:50:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:45:20 2025 by rpki-client