Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/0fbf48-5db7-49fe-bf44-6a36705bba6f/1/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.mft
File: DAXKERwAk7VlFCFb5Ge1Fd2lbAY.mft (raw, json)
Hash identifier: Holl/4TNtiNUXCG/JU5G8Q44PscTUuJ3YGFcfPcgeUI=
Subject key identifier: D3:EB:2D:AB:DF:98:03:D7:2A:01:1C:74:30:36:9B:98:8F:3B:76:42
Authority key identifier: 0C:05:CA:11:1C:00:93:B5:65:14:21:5B:E4:67:B5:15:DD:A5:6C:06
Certificate issuer: /CN=0c05ca111c0093b56514215be467b515dda56c06
Certificate serial: 0197B74590DCBD7289CFAE5A7BF3ACDF6FC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/0fbf48-5db7-49fe-bf44-6a36705bba6f/1/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.mft
Manifest number: 0939
Signing time: Sat 28 Jun 2025 16:01:18 +0000
Manifest this update: Sat 28 Jun 2025 16:01:18 +0000
Manifest next update: Sun 29 Jun 2025 16:01:18 +0000
Files and hashes: 1: DAXKERwAk7VlFCFb5Ge1Fd2lbAY.crl (hash: LS2FL40PNpDXAEA3+IUbS53e5t6gR10FaPB6eqTuWwA=)
2: _2hrxKKbdmRyLOnHUiOQipQACXY.roa (hash: DxOyoU679BPpOs0ffrHVPaZuK8yvllJ+3WIdB3uJM5Y=)
3: t16GyUN0G0ERD6SmYA9i0r30zic.roa (hash: oKvu0HJILKuRj6gBGrcQg1IlSuH1C1Ay4XKjgYCj9is=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/0fbf48-5db7-49fe-bf44-6a36705bba6f/1/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/0fbf48-5db7-49fe-bf44-6a36705bba6f/1/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:90:dc:bd:72:89:cf:ae:5a:7b:f3:ac:df:6f:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c05ca111c0093b56514215be467b515dda56c06
Validity
Not Before: Jun 28 16:01:18 2025 GMT
Not After : Jun 29 16:01:18 2025 GMT
Subject: CN=d3eb2dabdf9803d72a011c7430369b988f3b7642
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:87:e6:e8:c8:65:91:f8:d3:18:41:4b:e8:2b:
88:11:88:8d:a6:c0:e6:09:b6:43:fb:7d:cf:fe:d9:
94:f8:90:bf:90:42:2d:a9:44:8d:52:3b:d7:fc:32:
00:78:41:10:03:41:c0:96:b9:ed:f3:45:d9:04:62:
c0:ff:4d:a1:33:f1:2a:44:0c:6b:46:0e:66:21:74:
56:43:69:4b:49:21:b5:38:53:bd:10:87:d1:8d:bf:
89:db:b2:73:04:5c:ab:d4:d9:f1:fc:29:d1:22:cf:
3d:dd:9a:65:42:ea:22:e8:c7:36:09:70:3d:c9:33:
a9:40:8e:bd:d1:27:d1:6d:12:54:d1:0c:0a:43:4d:
be:76:c8:c4:f2:ca:1f:ef:eb:9f:a1:06:dc:1a:d0:
d2:39:58:5a:cd:80:17:5d:f2:75:67:75:01:33:90:
fc:c0:7f:75:7d:74:92:cb:24:35:eb:67:1b:77:a6:
65:9e:c6:a1:68:2e:b6:68:12:4c:74:99:22:1f:10:
f8:29:21:c4:88:4c:e6:7e:9b:af:79:95:e1:86:7b:
31:24:74:a6:2e:6c:e4:f5:93:06:89:a2:08:5c:45:
c6:9a:23:a6:c7:50:5f:a7:14:88:be:2a:a6:e3:b5:
1e:8c:69:ae:97:b5:7e:53:84:26:88:ea:cf:df:76:
4c:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:EB:2D:AB:DF:98:03:D7:2A:01:1C:74:30:36:9B:98:8F:3B:76:42
X509v3 Authority Key Identifier:
keyid:0C:05:CA:11:1C:00:93:B5:65:14:21:5B:E4:67:B5:15:DD:A5:6C:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/0fbf48-5db7-49fe-bf44-6a36705bba6f/1/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/0fbf48-5db7-49fe-bf44-6a36705bba6f/1/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:5d:9d:7c:0f:36:ce:3e:35:30:b4:df:86:e2:40:3d:80:5b:
28:9e:e8:8c:09:ac:15:db:21:ab:6c:3f:31:ba:45:e8:12:4c:
c0:28:cd:bb:5a:2f:77:4b:58:f8:ac:1e:c6:14:c5:b0:57:6a:
03:03:cc:94:45:d5:59:70:98:51:80:05:01:eb:12:dc:51:95:
fa:cf:38:0e:ac:a8:5e:61:ea:a6:74:3d:97:04:00:61:60:5d:
e0:27:9d:85:60:ac:43:9f:c7:a3:72:c3:fb:a9:bd:16:5d:14:
5b:07:13:44:8c:86:9e:d5:4e:5e:6e:44:a8:c9:bd:b6:59:9d:
45:a1:83:c1:ed:7a:da:06:a3:1e:e0:63:d8:d7:60:87:c7:2c:
e7:fe:48:e4:cf:c6:bf:30:b7:f8:cd:ee:32:db:ff:1b:b9:a1:
82:17:12:f3:e1:36:78:5d:82:4a:09:4f:57:50:b1:99:3a:bf:
1b:63:5d:12:ca:23:96:60:0c:55:55:5e:67:b0:26:72:33:8d:
2c:8a:f8:ca:03:44:e2:4e:da:87:90:e0:a0:12:b6:18:58:a5:
68:a4:b1:89:e3:dd:56:f4:7a:d5:cd:ad:b8:3b:1c:fb:eb:52:
bb:b3:90:14:0a:83:6d:f9:6b:46:22:a0:76:d8:a8:57:3d:f7:
6f:6a:ab:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 00:21:45 2025 by rpki-client