Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/84750f-76c4-41ee-8517-e0adab7f1112/1/DiKD5uavmRQidDcR96cjE3aA5p4.mft
File: DiKD5uavmRQidDcR96cjE3aA5p4.mft (raw, json)
Hash identifier: J9LtcThN5ySZYzqX6qnaGecWUUReT6Fv+FfYGZc2CF8=
Subject key identifier: 16:84:AB:E3:30:5D:C6:A0:CE:DA:EE:BE:51:04:D6:E5:FA:D9:1A:34
Authority key identifier: 0E:22:83:E6:E6:AF:99:14:22:74:37:11:F7:A7:23:13:76:80:E6:9E
Certificate issuer: /CN=0e2283e6e6af991422743711f7a723137680e69e
Certificate serial: 0197B77C8DEFDA3EAF667BB9FABF2A6F3B3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiKD5uavmRQidDcR96cjE3aA5p4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/84750f-76c4-41ee-8517-e0adab7f1112/1/DiKD5uavmRQidDcR96cjE3aA5p4.mft
Manifest number: 03D0
Signing time: Sat 28 Jun 2025 17:01:22 +0000
Manifest this update: Sat 28 Jun 2025 17:01:22 +0000
Manifest next update: Sun 29 Jun 2025 17:01:22 +0000
Files and hashes: 1: DiKD5uavmRQidDcR96cjE3aA5p4.crl (hash: J2vbY64sO0+CjUZqRG8G+wAO3pJ41VljYabxlgjIHX0=)
2: H09sImQpPd7oxswyyMfYCrHeDVg.roa (hash: F88ZTfKzhXNpAdlmJ7zmMSZP6dr7sViXeL2PLZiWpvA=)
3: Xy-GvzWZoQ4DZimCZXffSq7urSs.roa (hash: ueXh7ktY0jc26A3LbRVHrwaonrcTqoMtDjp0hV9hqJU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/84750f-76c4-41ee-8517-e0adab7f1112/1/DiKD5uavmRQidDcR96cjE3aA5p4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/84750f-76c4-41ee-8517-e0adab7f1112/1/DiKD5uavmRQidDcR96cjE3aA5p4.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiKD5uavmRQidDcR96cjE3aA5p4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:8d:ef:da:3e:af:66:7b:b9:fa:bf:2a:6f:3b:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e2283e6e6af991422743711f7a723137680e69e
Validity
Not Before: Jun 28 17:01:22 2025 GMT
Not After : Jun 29 17:01:22 2025 GMT
Subject: CN=1684abe3305dc6a0cedaeebe5104d6e5fad91a34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:69:51:25:db:af:68:83:8b:be:be:07:9c:65:
d8:89:ff:91:39:46:ad:05:c4:fd:af:6e:60:9b:5c:
b4:a7:9c:8d:b0:7e:74:d2:3d:14:2e:8a:2e:22:47:
55:fe:e7:00:ee:c0:4a:6b:4f:2e:8f:a3:3d:ac:7d:
14:d2:2a:56:99:39:a7:31:e8:22:8f:db:51:fb:16:
67:18:e7:fd:af:4a:5d:5a:a3:fc:7a:96:45:d0:cd:
4d:a1:3b:0f:d5:72:38:8e:65:56:51:91:5d:e0:84:
d1:54:db:0c:fe:87:d7:00:22:d8:23:bd:58:61:4d:
89:66:a6:8d:16:56:d4:c9:4e:b3:55:7d:22:bc:54:
ab:12:49:59:38:8e:33:7f:5c:2a:c1:d1:e5:48:35:
a2:a8:6d:e2:81:6b:8d:7e:6a:88:7f:fc:a0:c2:2f:
c6:89:08:20:6c:41:86:94:b3:9f:fb:55:c4:cf:4c:
e4:bd:b7:b8:be:b8:cb:da:e3:7e:ee:a0:ec:72:1a:
1f:3c:41:7f:de:ac:69:e0:dd:1a:7e:bc:60:5f:73:
8e:12:73:8b:09:1f:9f:54:51:50:87:6a:21:f3:d6:
15:71:ca:3f:51:45:ac:b3:8d:d9:70:08:2e:8b:54:
2e:22:1d:cd:01:ee:8c:0b:ed:41:07:bb:61:73:e7:
20:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:84:AB:E3:30:5D:C6:A0:CE:DA:EE:BE:51:04:D6:E5:FA:D9:1A:34
X509v3 Authority Key Identifier:
keyid:0E:22:83:E6:E6:AF:99:14:22:74:37:11:F7:A7:23:13:76:80:E6:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiKD5uavmRQidDcR96cjE3aA5p4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/84750f-76c4-41ee-8517-e0adab7f1112/1/DiKD5uavmRQidDcR96cjE3aA5p4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/84750f-76c4-41ee-8517-e0adab7f1112/1/DiKD5uavmRQidDcR96cjE3aA5p4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:5d:84:63:52:43:7c:0b:f9:bc:8f:01:f0:24:f1:43:48:d7:
af:62:f8:a4:1f:17:16:c7:79:de:50:eb:3a:39:22:9a:a9:16:
56:49:55:33:9a:17:bd:83:05:1c:04:b4:72:c8:98:60:16:d8:
ec:9d:47:d2:5e:9d:39:14:94:31:eb:94:6a:b2:49:48:0c:77:
24:16:a8:0e:89:40:7c:73:07:69:85:bd:75:63:6d:ac:10:b5:
22:95:a0:50:14:ca:fb:b1:36:fd:ca:2a:18:9b:86:52:b2:2d:
a3:ef:e9:e3:7b:8c:02:ef:f0:94:34:5c:8f:50:34:f5:0b:01:
4d:48:2c:dd:fc:ec:a1:73:07:c9:0d:0f:a7:ee:8e:1b:f8:5e:
7a:d7:a2:78:c4:40:c9:aa:ce:df:13:4f:10:63:6a:ed:63:bf:
d5:ee:d3:68:1e:95:b7:c5:95:f3:aa:b5:7a:a4:d8:21:d3:39:
85:81:11:7a:aa:5c:cd:58:1b:40:e2:ae:ff:34:86:cb:1f:70:
59:26:07:f9:10:d2:1e:fe:ad:e5:19:be:c0:d4:3f:ef:68:d3:
76:e8:50:01:76:09:28:7e:77:63:5b:78:a9:d5:06:42:ce:5c:
df:0e:35:98:2b:99:d8:c7:b4:09:ed:10:c0:66:77:69:4e:66:
95:72:1d:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:15:10 2025 by rpki-client