Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/b314cb-62b5-4fa6-b445-cbfba459d8f7/1/dBc29lciH8E0MWMjsHQFhanBsgw.mft
File: dBc29lciH8E0MWMjsHQFhanBsgw.mft (raw, json)
Hash identifier: WS3rcTebg+IA5TIG7+sTAfK6lBL/K6m9GZfvMsLLp8Y=
Subject key identifier: 56:B9:A8:3B:11:41:04:9F:EC:DE:03:67:0A:D8:22:C6:6F:5C:2D:2C
Authority key identifier: 74:17:36:F6:57:22:1F:C1:34:31:63:23:B0:74:05:85:A9:C1:B2:0C
Certificate issuer: /CN=741736f657221fc134316323b0740585a9c1b20c
Certificate serial: 0197C75DAA47B68113C553810963B318776F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dBc29lciH8E0MWMjsHQFhanBsgw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/b314cb-62b5-4fa6-b445-cbfba459d8f7/1/dBc29lciH8E0MWMjsHQFhanBsgw.mft
Manifest number: 15BE
Signing time: Tue 01 Jul 2025 19:01:33 +0000
Manifest this update: Tue 01 Jul 2025 19:01:33 +0000
Manifest next update: Wed 02 Jul 2025 19:01:33 +0000
Files and hashes: 1: c_4VrUZIMtuPlYj4DhW8ouhaRQw.roa (hash: 3ElLAVX1FXo1T4VYhDu+QaMztPbJUQVgeIUdwTADFRI=)
2: dBc29lciH8E0MWMjsHQFhanBsgw.crl (hash: 99qNQlJ/cw03UVOPV7vr0eOH//3UUcmqHxaqsv6C8A4=)
3: r_WAi-eWzHC7Psr81UVNU3kzOJw.roa (hash: ZETLofVAHwa7kjk2pEcSj1ALX1XE9n9Z4taPD31cXSg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/b314cb-62b5-4fa6-b445-cbfba459d8f7/1/dBc29lciH8E0MWMjsHQFhanBsgw.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/b314cb-62b5-4fa6-b445-cbfba459d8f7/1/dBc29lciH8E0MWMjsHQFhanBsgw.mft
rsync://rpki.ripe.net/repository/DEFAULT/dBc29lciH8E0MWMjsHQFhanBsgw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 16:57:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c7:5d:aa:47:b6:81:13:c5:53:81:09:63:b3:18:77:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=741736f657221fc134316323b0740585a9c1b20c
Validity
Not Before: Jul 1 19:01:33 2025 GMT
Not After : Jul 2 19:01:33 2025 GMT
Subject: CN=56b9a83b1141049fecde03670ad822c66f5c2d2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:70:8f:ae:44:8e:2d:01:fb:e0:ec:e4:c1:b4:
80:6b:7e:7e:6f:b1:d6:6e:32:a0:fd:08:e5:86:3e:
17:f3:1d:54:5c:01:38:d9:c2:19:2f:90:b3:d5:2e:
14:51:3d:cf:37:7b:10:cc:2b:8a:ed:d5:b0:46:cd:
8c:c5:71:ed:90:ce:f1:24:b8:89:17:90:9d:09:21:
56:a8:ed:72:7d:ca:07:fa:73:17:fe:03:af:d2:1e:
45:e0:fd:7c:96:33:45:f8:c1:fa:dc:c3:7b:ac:87:
23:f5:5c:72:45:f2:3a:ad:5d:d0:1f:45:4e:2c:30:
1e:6b:5d:49:01:8f:0f:48:04:a4:c2:7e:e1:94:6f:
e4:85:b0:c4:57:9a:43:84:6c:74:1b:02:a5:30:39:
a9:ac:87:f0:07:25:0d:34:97:e7:45:47:79:a3:7d:
1d:7b:fb:8e:17:e1:4b:f0:af:34:13:db:01:02:d2:
0b:f5:cf:b7:75:d0:7e:27:c4:01:0d:b6:5b:06:bb:
f9:32:a8:77:99:c4:92:09:84:7a:09:72:c4:34:e1:
a2:2a:f4:17:e5:5b:4d:94:05:6c:c7:2d:17:b3:6b:
fb:d2:73:90:8e:8c:eb:8c:f3:0d:c2:b9:96:55:6f:
10:3d:2b:5d:26:9f:bc:b8:80:1a:22:f3:b9:c1:3a:
37:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:B9:A8:3B:11:41:04:9F:EC:DE:03:67:0A:D8:22:C6:6F:5C:2D:2C
X509v3 Authority Key Identifier:
keyid:74:17:36:F6:57:22:1F:C1:34:31:63:23:B0:74:05:85:A9:C1:B2:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dBc29lciH8E0MWMjsHQFhanBsgw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/b314cb-62b5-4fa6-b445-cbfba459d8f7/1/dBc29lciH8E0MWMjsHQFhanBsgw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/b314cb-62b5-4fa6-b445-cbfba459d8f7/1/dBc29lciH8E0MWMjsHQFhanBsgw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:5f:ff:a8:02:25:bd:c3:82:8e:ac:9a:03:bb:df:98:12:e0:
5f:d1:9e:6b:23:13:77:0a:54:b1:39:3d:72:a7:ae:dc:2c:38:
c4:72:ab:d8:79:fc:d0:f3:14:a5:87:1f:48:2c:ae:ec:1f:af:
c9:a2:89:19:01:ee:60:ad:6d:f8:2f:a5:68:66:10:b6:f5:a4:
11:53:a2:92:f3:6a:33:f9:f0:19:1b:3d:01:9c:d3:84:7b:25:
0a:72:0f:7e:38:9c:1a:e9:cb:ec:ec:1c:c4:59:d1:8d:76:be:
3c:88:26:ed:2f:7a:66:c8:f7:2f:a2:85:3a:d3:9d:7f:46:a9:
96:3b:64:be:5f:7e:ac:a6:14:1b:1b:46:77:10:91:43:08:32:
f2:53:b5:9b:ce:31:3a:12:87:8b:60:54:ce:54:b5:9c:58:31:
60:a4:03:66:c7:92:9f:68:3e:0a:67:5e:9e:ab:98:53:3c:5a:
78:40:5c:55:35:94:82:05:86:79:2d:34:8f:0c:0e:f8:16:70:
45:71:74:92:a9:b9:84:d3:87:fa:ba:49:bc:d0:0f:b1:c9:8a:
3a:d7:5a:bf:a4:a6:3b:e7:d8:cd:4c:c8:c8:e1:38:fe:81:6d:
a1:02:4c:f0:fa:5d:8e:29:cc:59:96:db:9a:84:83:39:08:69:
f7:b6:42:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 22:51:32 2025 by rpki-client