Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/a1ef63-16a7-4a94-b114-5f175b5ae038/1/dim08aCQrAe-F2LewzjmoP412X4.mft
File: dim08aCQrAe-F2LewzjmoP412X4.mft (raw, json)
Hash identifier: jB7Zc4fv0q8ZRqiq1w1lX/Zmi+DHGOVW90LzHLgUxR8=
Subject key identifier: 0C:81:9B:0B:7C:0C:0C:D8:8D:DB:B9:09:F7:48:F8:8B:FA:8F:95:BC
Authority key identifier: 76:29:B4:F1:A0:90:AC:07:BE:17:62:DE:C3:38:E6:A0:FE:35:D9:7E
Certificate issuer: /CN=7629b4f1a090ac07be1762dec338e6a0fe35d97e
Certificate serial: 0197B890824B8E725B1880EFB2BF3ACE68F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dim08aCQrAe-F2LewzjmoP412X4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/a1ef63-16a7-4a94-b114-5f175b5ae038/1/dim08aCQrAe-F2LewzjmoP412X4.mft
Manifest number: 0589
Signing time: Sat 28 Jun 2025 22:02:47 +0000
Manifest this update: Sat 28 Jun 2025 22:02:47 +0000
Manifest next update: Sun 29 Jun 2025 22:02:47 +0000
Files and hashes: 1: 5YMm7iUmf7YXCbeTMsZ2gbUF8Mc.roa (hash: IgoqrrmJPuGzGpT+UcpwCttOwj7BjxbDg3tOXCDKJe8=)
2: dim08aCQrAe-F2LewzjmoP412X4.crl (hash: 19razErEeDlk8jxjClhHrM2d+qy8StwzTYfaluyTdVQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/a1ef63-16a7-4a94-b114-5f175b5ae038/1/dim08aCQrAe-F2LewzjmoP412X4.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/a1ef63-16a7-4a94-b114-5f175b5ae038/1/dim08aCQrAe-F2LewzjmoP412X4.mft
rsync://rpki.ripe.net/repository/DEFAULT/dim08aCQrAe-F2LewzjmoP412X4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:90:82:4b:8e:72:5b:18:80:ef:b2:bf:3a:ce:68:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7629b4f1a090ac07be1762dec338e6a0fe35d97e
Validity
Not Before: Jun 28 22:02:47 2025 GMT
Not After : Jun 29 22:02:47 2025 GMT
Subject: CN=0c819b0b7c0c0cd88ddbb909f748f88bfa8f95bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d6:79:c7:25:59:a1:e2:24:2a:fe:c9:e1:14:
7a:36:9d:0d:5f:98:3b:1f:4a:2d:70:18:31:5d:36:
51:1d:e9:22:a5:71:2d:8c:27:a7:b0:ae:47:bc:cb:
96:48:86:cc:d4:51:91:41:9d:03:24:ee:b9:a5:d1:
3d:50:78:24:b8:28:28:9c:22:33:b5:63:9e:9c:fe:
bc:0e:b8:af:b7:6c:33:f9:6a:11:de:24:8e:0a:50:
90:16:6b:ff:b6:fb:18:65:c9:4a:a2:71:68:c0:8c:
e9:f9:0d:a0:3e:1d:bf:e3:75:26:68:1d:61:45:5c:
34:46:d2:d3:2e:4d:9b:16:9f:bc:a0:c2:ba:9b:bf:
c3:f8:eb:86:d5:2a:88:de:cd:60:0e:6e:2a:d6:a3:
27:2e:8c:5f:dc:94:1b:23:e2:39:12:28:16:e7:73:
04:4a:b2:5e:6d:be:51:bb:62:64:54:f8:c4:75:fb:
cd:b7:ce:79:a1:b0:9b:f2:23:45:1f:7e:f3:e9:7c:
e9:ac:2e:bc:e6:56:56:70:fd:34:05:d4:7b:cd:74:
cb:46:e0:34:a7:3c:91:9c:1d:54:07:18:c4:ce:20:
47:cd:eb:c0:e8:9b:83:c6:af:e9:3d:9f:31:8b:1a:
5e:d9:5f:0f:3a:3b:e1:02:20:aa:83:4e:57:38:27:
e3:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:81:9B:0B:7C:0C:0C:D8:8D:DB:B9:09:F7:48:F8:8B:FA:8F:95:BC
X509v3 Authority Key Identifier:
keyid:76:29:B4:F1:A0:90:AC:07:BE:17:62:DE:C3:38:E6:A0:FE:35:D9:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dim08aCQrAe-F2LewzjmoP412X4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/a1ef63-16a7-4a94-b114-5f175b5ae038/1/dim08aCQrAe-F2LewzjmoP412X4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/a1ef63-16a7-4a94-b114-5f175b5ae038/1/dim08aCQrAe-F2LewzjmoP412X4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:a5:ff:a7:31:f1:de:67:b3:f1:37:cb:26:b8:3c:b0:e6:23:
09:db:7e:f0:01:0b:74:45:ce:87:29:1d:5b:1a:43:96:f7:f6:
c4:a9:e7:45:ac:34:6b:e9:7a:32:a0:15:de:41:c1:48:d1:ce:
36:0d:f5:44:62:d1:0d:52:90:09:a4:56:dc:f0:92:62:42:62:
2e:ce:89:44:5a:61:ad:76:b7:e3:22:b8:3c:90:0b:54:3c:9f:
a1:eb:47:59:7d:b5:41:d3:7e:ef:85:44:51:9b:d2:50:db:2c:
6f:97:cc:6f:5f:cb:70:a9:a3:47:97:4a:eb:f2:f5:92:b2:83:
d1:9e:7f:ec:3d:d9:74:4e:d5:f1:20:bf:8f:ab:f1:d3:2b:07:
19:ee:68:b6:47:ad:20:f2:98:3e:bf:1e:62:3c:f8:c3:31:28:
ab:97:ad:76:2e:b1:ba:50:43:3b:99:75:21:4e:19:dc:ff:6f:
4d:f6:de:9a:fc:18:60:d3:ef:92:18:7b:4b:90:fd:fa:38:1a:
a9:7f:8b:74:89:a5:ab:c0:a6:8b:76:7a:81:d9:1c:7b:77:46:
f0:64:c3:59:18:20:68:47:1f:ac:f3:be:de:05:f1:88:56:4f:
e7:de:ff:fa:c4:31:7e:05:e6:bd:56:e3:23:9e:84:22:e5:73:
b8:99:56:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:15:30 2025 by rpki-client