Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/9de767-3a28-49ab-ae28-2348ba6fb4c3/1/DcIGFAWVaZPMY6YNsPljUl01dzE.mft
File: DcIGFAWVaZPMY6YNsPljUl01dzE.mft (raw, json)
Hash identifier: EoiEbkOGSg5Axi7Y8eu0hrRnia+YZ7u1sU8MyOrlcC8=
Subject key identifier: 40:45:63:49:D2:95:34:5A:E2:D7:7D:B9:12:D4:B5:FD:68:62:F3:32
Authority key identifier: 0D:C2:06:14:05:95:69:93:CC:63:A6:0D:B0:F9:63:52:5D:35:77:31
Certificate issuer: /CN=0dc2061405956993cc63a60db0f963525d357731
Certificate serial: 0197B77CB0D0CB79E20E7F4838F3B295619E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DcIGFAWVaZPMY6YNsPljUl01dzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/9de767-3a28-49ab-ae28-2348ba6fb4c3/1/DcIGFAWVaZPMY6YNsPljUl01dzE.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 17:01:31 +0000
Manifest this update: Sat 28 Jun 2025 17:01:31 +0000
Manifest next update: Sun 29 Jun 2025 17:01:31 +0000
Files and hashes: 1: DcIGFAWVaZPMY6YNsPljUl01dzE.crl (hash: 6NpYX9rx72hrAaaCsQ5i9dUpwhRfJMTcx+gJxv9z090=)
2: Spijy9s0dl5Zj39GdhMa_kS4bpQ.roa (hash: yNGOiWMyz1u0T1szDPmkVxet3IhLc4ljiBf05yJrLuA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/9de767-3a28-49ab-ae28-2348ba6fb4c3/1/DcIGFAWVaZPMY6YNsPljUl01dzE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/9de767-3a28-49ab-ae28-2348ba6fb4c3/1/DcIGFAWVaZPMY6YNsPljUl01dzE.mft
rsync://rpki.ripe.net/repository/DEFAULT/DcIGFAWVaZPMY6YNsPljUl01dzE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:b0:d0:cb:79:e2:0e:7f:48:38:f3:b2:95:61:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dc2061405956993cc63a60db0f963525d357731
Validity
Not Before: Jun 28 17:01:31 2025 GMT
Not After : Jun 29 17:01:31 2025 GMT
Subject: CN=40456349d295345ae2d77db912d4b5fd6862f332
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:88:dc:a4:7e:ca:8f:13:17:01:d5:aa:a8:d2:
90:c2:87:2a:bf:54:39:87:77:c0:c2:bd:ad:51:6c:
78:37:a4:34:84:85:5a:f4:d1:06:2c:b2:80:9a:02:
0d:ab:c9:c4:24:31:33:75:07:cc:2d:2c:2a:bb:56:
bf:a8:d2:ff:15:7a:d6:e5:4a:8e:8f:15:ad:f5:ec:
0d:dc:1e:ed:5c:78:4c:d4:91:90:ea:ca:a5:4c:dc:
87:ab:fe:75:65:1d:a1:59:d3:39:b6:e6:41:9c:a1:
a6:37:ee:47:9a:24:1b:aa:6b:dc:ed:cd:f6:b6:98:
88:88:60:b5:19:1e:3b:73:b5:ff:d3:45:f3:f4:ee:
c8:0a:3d:1f:96:98:43:bf:4a:13:3d:21:26:ac:fe:
ae:80:77:74:89:49:fe:ac:b5:5d:c4:28:58:c0:bf:
05:84:e9:1f:4c:a7:20:0e:e2:c6:d7:d2:01:bd:c2:
80:28:e7:3d:7b:95:fd:84:68:aa:27:5a:c9:ec:7c:
eb:f3:ca:5b:76:54:29:10:39:6a:2f:e1:83:e8:13:
1e:33:80:0e:d9:c0:84:0a:6e:c4:c6:1d:31:06:fa:
9d:ac:df:53:fb:6e:ad:09:56:76:b2:d3:a9:53:af:
94:f9:68:e6:8a:2e:42:cd:8b:8b:5c:57:ad:b6:1e:
e1:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:45:63:49:D2:95:34:5A:E2:D7:7D:B9:12:D4:B5:FD:68:62:F3:32
X509v3 Authority Key Identifier:
keyid:0D:C2:06:14:05:95:69:93:CC:63:A6:0D:B0:F9:63:52:5D:35:77:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DcIGFAWVaZPMY6YNsPljUl01dzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/9de767-3a28-49ab-ae28-2348ba6fb4c3/1/DcIGFAWVaZPMY6YNsPljUl01dzE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/9de767-3a28-49ab-ae28-2348ba6fb4c3/1/DcIGFAWVaZPMY6YNsPljUl01dzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:6c:b1:0e:2f:2b:7b:55:e3:4a:1a:db:c9:60:da:8e:f8:be:
d9:15:a8:25:5d:da:56:02:26:b7:ec:3c:07:68:e0:d0:b5:15:
69:d6:21:19:dc:64:d2:37:0a:c7:81:bf:14:42:0e:40:71:ca:
85:51:52:c3:e4:e7:78:5a:75:db:22:24:29:f6:08:cd:10:a5:
cf:40:aa:83:e8:d4:38:d6:07:03:01:f3:37:50:ec:64:17:1c:
02:ae:8e:9b:ba:ec:e1:fa:a0:0b:df:b9:f4:26:95:d4:04:44:
2d:b0:9e:7b:75:32:ba:fb:6d:9c:ef:87:ec:a1:d3:32:59:8c:
2b:db:72:9d:67:7e:ec:e4:39:b8:81:55:93:e8:ac:63:be:6d:
60:68:83:aa:0a:8d:02:a4:12:56:f2:fd:59:8d:2d:a0:59:d1:
df:81:64:2e:ed:f1:1b:9f:4f:e6:62:ab:7e:cd:bc:0d:5e:93:
79:34:ab:7c:a6:e1:0f:97:1b:58:30:1d:1e:c1:76:8a:55:f3:
33:f6:d1:6d:13:01:68:19:c5:f6:32:e1:d1:b2:39:d8:ca:a0:
1b:bd:61:9e:cb:d6:59:89:cb:30:3d:ad:87:35:65:9b:27:f0:
6d:e5:9c:c7:4a:e0:4c:8a:5b:83:54:53:8d:1b:c9:16:e6:1a:
97:c5:8b:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:43:22 2025 by rpki-client