Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/eede38-92a2-462d-b252-c83b5fc26545/1/RDtnudTJnHJeNX2BdPt-AkoVAuI.mft
File: RDtnudTJnHJeNX2BdPt-AkoVAuI.mft (raw, json)
Hash identifier: YBro2ky5H4mB+BgXuE9CItZT4JYMY5T6SYICVuk3XQg=
Subject key identifier: A3:C8:19:70:02:03:7B:82:47:47:BA:34:B1:CD:51:E9:83:4B:52:F6
Authority key identifier: 44:3B:67:B9:D4:C9:9C:72:5E:35:7D:81:74:FB:7E:02:4A:15:02:E2
Certificate issuer: /CN=443b67b9d4c99c725e357d8174fb7e024a1502e2
Certificate serial: 0197B88FD3E2BEC8EA4D1A9B0A0A0D278B16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RDtnudTJnHJeNX2BdPt-AkoVAuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/eede38-92a2-462d-b252-c83b5fc26545/1/RDtnudTJnHJeNX2BdPt-AkoVAuI.mft
Manifest number: 0641
Signing time: Sat 28 Jun 2025 22:02:02 +0000
Manifest this update: Sat 28 Jun 2025 22:02:02 +0000
Manifest next update: Sun 29 Jun 2025 22:02:02 +0000
Files and hashes: 1: RDtnudTJnHJeNX2BdPt-AkoVAuI.crl (hash: VY7jlrYVfiMcMl8xevKd5v1T91UGlrt19s37zZBqtRE=)
2: ys9tkINh9OH6_Tn4SwpKbQKk59U.roa (hash: HKpYNrP2A2wFiOa+MzSBN+sOxWHoc3QcnpQXA9RSqDI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/eede38-92a2-462d-b252-c83b5fc26545/1/RDtnudTJnHJeNX2BdPt-AkoVAuI.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/eede38-92a2-462d-b252-c83b5fc26545/1/RDtnudTJnHJeNX2BdPt-AkoVAuI.mft
rsync://rpki.ripe.net/repository/DEFAULT/RDtnudTJnHJeNX2BdPt-AkoVAuI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:d3:e2:be:c8:ea:4d:1a:9b:0a:0a:0d:27:8b:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=443b67b9d4c99c725e357d8174fb7e024a1502e2
Validity
Not Before: Jun 28 22:02:02 2025 GMT
Not After : Jun 29 22:02:02 2025 GMT
Subject: CN=a3c8197002037b824747ba34b1cd51e9834b52f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:23:12:19:e1:5e:c2:62:79:29:f2:e5:6e:f9:
d9:ba:23:74:d8:97:05:4f:b4:53:60:34:a7:0b:64:
50:27:0e:15:de:38:2c:86:8b:35:f6:19:3a:45:9c:
a0:46:f0:d0:eb:bf:07:c0:f4:b2:0b:b4:2e:b0:ef:
d1:51:6b:47:ce:43:2d:81:49:95:fb:79:99:0e:a6:
1a:59:3a:ad:13:d0:18:dc:e0:47:31:6b:ca:5c:94:
35:68:d7:5e:e8:51:e0:7f:28:34:be:21:51:66:e7:
5a:4f:3c:32:ed:d7:d0:17:be:43:d3:6c:0d:26:38:
b7:86:41:d2:20:ac:06:9b:fa:86:49:ae:53:ef:0e:
a2:d4:a0:5c:a4:3e:b5:54:55:df:1c:16:dd:9f:40:
ad:0a:b1:f5:25:50:6d:e9:18:6b:cf:ee:60:cd:8e:
ad:6a:fc:67:3a:de:c5:7b:94:fd:71:85:2a:a1:19:
0a:77:1e:4a:1d:61:28:c1:bf:25:d4:c6:92:98:ed:
e2:78:bc:07:d1:94:b2:5a:2b:42:34:d2:60:3a:67:
b1:d7:8e:40:ee:40:d4:a7:bc:8c:c3:6c:31:f1:b4:
f8:59:c3:cb:85:41:a9:b7:d7:55:34:d6:80:34:23:
83:77:72:ff:db:6a:46:83:dd:c0:eb:29:0a:37:af:
fa:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:C8:19:70:02:03:7B:82:47:47:BA:34:B1:CD:51:E9:83:4B:52:F6
X509v3 Authority Key Identifier:
keyid:44:3B:67:B9:D4:C9:9C:72:5E:35:7D:81:74:FB:7E:02:4A:15:02:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RDtnudTJnHJeNX2BdPt-AkoVAuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/eede38-92a2-462d-b252-c83b5fc26545/1/RDtnudTJnHJeNX2BdPt-AkoVAuI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/eede38-92a2-462d-b252-c83b5fc26545/1/RDtnudTJnHJeNX2BdPt-AkoVAuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:a7:2a:6a:f1:b4:df:43:af:5a:56:37:6a:08:68:ed:dc:29:
c8:72:3d:15:8f:5a:c8:5c:99:dd:e6:41:06:ef:8a:59:1f:95:
a1:96:60:85:97:b4:a3:4b:d4:ef:2a:ab:8c:95:75:f7:63:bb:
46:68:d1:79:49:3e:15:86:8e:98:f5:fc:49:87:8f:ea:84:c2:
c9:be:85:1a:15:eb:f4:11:3b:b2:96:08:36:5d:f4:4e:66:3c:
68:5c:ae:10:0f:8b:f2:39:4e:50:2d:2a:61:5e:6b:93:2e:43:
80:9e:57:4d:05:dd:4b:5c:3c:0d:d6:af:ca:70:ce:5e:e2:0f:
27:b1:81:af:dc:0c:5d:d5:c6:ce:62:99:51:bb:c7:97:50:d5:
55:51:6c:0e:06:93:70:08:f6:e8:7a:28:c3:df:bb:49:9d:08:
ca:bc:10:b0:dd:21:71:e4:e6:6b:c8:24:69:38:1d:42:fa:1d:
f5:14:26:2b:cf:b2:e5:aa:90:d7:d1:64:36:15:65:5c:bd:b0:
b0:1d:fa:58:9c:8d:77:d2:85:36:c7:ac:71:42:3f:1a:94:18:
ed:48:f1:66:cb:ec:18:09:64:ee:53:ec:20:65:b9:94:ad:c1:
53:f1:7e:4d:67:51:d1:29:6a:15:bd:83:74:50:91:63:e8:c2:
c6:45:71:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:22:25 2025 by rpki-client