Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/b9dc4c-643a-41b8-a459-2b518acb78f3/1/dPk2nG4jwb8NvtMBx9ALSj_fDQQ.mft
File: dPk2nG4jwb8NvtMBx9ALSj_fDQQ.mft (raw, json)
Hash identifier: vIcCPqZa026iL4SGsYZ+d5cGCbPQ/C01PUg0WG3AQOM=
Subject key identifier: CA:89:17:56:B0:A7:92:BF:67:C4:97:17:63:CB:AA:BE:7F:F2:7F:68
Authority key identifier: 74:F9:36:9C:6E:23:C1:BF:0D:BE:D3:01:C7:D0:0B:4A:3F:DF:0D:04
Certificate issuer: /CN=74f9369c6e23c1bf0dbed301c7d00b4a3fdf0d04
Certificate serial: 0197B7EA96FB0066F098F1490B7058D8381D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dPk2nG4jwb8NvtMBx9ALSj_fDQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/b9dc4c-643a-41b8-a459-2b518acb78f3/1/dPk2nG4jwb8NvtMBx9ALSj_fDQQ.mft
Manifest number: 15B8
Signing time: Sat 28 Jun 2025 19:01:33 +0000
Manifest this update: Sat 28 Jun 2025 19:01:33 +0000
Manifest next update: Sun 29 Jun 2025 19:01:33 +0000
Files and hashes: 1: IVq_YZ1jGuMcDD4JRK3mmzzTW3o.roa (hash: sPByzBItFj1JqphVomCmYz50m1zlhsIta4Uhmwr6ALo=)
2: dPk2nG4jwb8NvtMBx9ALSj_fDQQ.crl (hash: iZAYkVUoQutUp8ZNdCww17N0BUcyGg39jzgiAkWSDsM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/b9dc4c-643a-41b8-a459-2b518acb78f3/1/dPk2nG4jwb8NvtMBx9ALSj_fDQQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/b9dc4c-643a-41b8-a459-2b518acb78f3/1/dPk2nG4jwb8NvtMBx9ALSj_fDQQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/dPk2nG4jwb8NvtMBx9ALSj_fDQQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:96:fb:00:66:f0:98:f1:49:0b:70:58:d8:38:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74f9369c6e23c1bf0dbed301c7d00b4a3fdf0d04
Validity
Not Before: Jun 28 19:01:33 2025 GMT
Not After : Jun 29 19:01:33 2025 GMT
Subject: CN=ca891756b0a792bf67c4971763cbaabe7ff27f68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:8d:f7:bf:fb:8c:b4:5f:90:0f:f1:0e:e7:b8:
c6:fd:44:62:14:07:4f:f4:1c:2a:90:4d:4f:31:ac:
ea:95:e6:fe:9d:02:b4:b2:cf:2e:95:2f:99:c6:36:
61:bd:3f:0d:43:1b:40:f3:c1:40:6d:04:5c:59:e3:
b5:da:19:75:35:22:9e:f8:ee:87:ef:0e:e4:f6:f1:
b7:26:f8:a7:b3:af:77:60:1b:2e:81:51:7a:e2:ce:
b6:b3:e4:90:a3:02:33:a2:2a:ed:17:7f:67:83:d2:
4d:c1:2a:5c:5d:e3:1b:33:2a:56:3a:77:9a:83:7a:
96:de:f4:c2:29:65:93:ef:02:76:a7:98:96:14:b2:
4e:19:fa:09:61:74:b8:9c:95:d9:30:04:a4:bf:b2:
ad:93:7d:8e:42:c9:d2:4f:24:bd:e2:92:65:a2:04:
a5:e3:59:11:59:b9:84:30:15:12:d5:69:39:28:4e:
a2:1f:6d:03:dc:0e:1d:9b:8f:4a:58:63:f1:c9:1b:
2f:46:dc:fb:e1:d1:27:60:69:50:32:28:cc:05:17:
5f:63:1e:8b:e7:fa:29:69:84:6d:c3:8e:23:5d:f3:
eb:e1:9c:47:a0:46:9c:9e:43:8a:7b:e2:39:66:bc:
3a:4f:43:a5:c1:1c:b9:ae:b0:76:d5:f3:3f:77:2b:
e0:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:89:17:56:B0:A7:92:BF:67:C4:97:17:63:CB:AA:BE:7F:F2:7F:68
X509v3 Authority Key Identifier:
keyid:74:F9:36:9C:6E:23:C1:BF:0D:BE:D3:01:C7:D0:0B:4A:3F:DF:0D:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dPk2nG4jwb8NvtMBx9ALSj_fDQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b9dc4c-643a-41b8-a459-2b518acb78f3/1/dPk2nG4jwb8NvtMBx9ALSj_fDQQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b9dc4c-643a-41b8-a459-2b518acb78f3/1/dPk2nG4jwb8NvtMBx9ALSj_fDQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:25:b6:d9:db:e2:8a:7c:7a:3d:ee:07:69:83:5e:9d:31:ae:
2a:22:7d:69:1d:2b:eb:a2:09:9e:d8:c9:55:fb:0b:95:c0:66:
76:07:da:cd:80:40:45:1b:dd:d1:24:4e:91:18:ef:29:30:6e:
72:ce:f1:db:76:24:7b:62:05:24:ce:35:d0:d8:63:04:12:f8:
63:fe:a5:13:fc:4e:e7:15:2b:fc:5d:8b:2d:2a:dd:56:e9:ec:
79:13:a3:f6:fa:af:53:7d:57:37:d9:0d:59:2c:7d:e4:da:bc:
f1:3f:bc:d4:ad:39:47:84:54:20:24:3f:67:21:fc:76:ec:35:
46:10:dc:be:3e:e3:b3:51:99:73:8f:20:d5:18:82:f3:74:77:
c7:0e:be:8f:1b:9f:4a:a2:93:bf:60:7f:2f:03:e4:25:6d:5d:
bc:82:2b:c8:24:71:68:ba:3b:cc:9c:7e:e6:b1:9c:53:78:5f:
4a:55:2d:58:8a:98:9b:33:9f:a4:12:80:27:74:d4:93:a9:31:
eb:7a:f0:dd:a7:d7:8c:13:3f:43:82:8e:13:3d:f5:26:1a:93:
c4:81:ae:41:3c:37:3f:6b:35:31:78:78:cd:71:5a:53:a3:bc:
89:ed:ed:af:e0:57:dc:ea:67:45:ad:9c:a8:53:bf:68:67:fb:
9f:d1:ad:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:20:19 2025 by rpki-client