Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/0fbf48-5db7-49fe-bf44-6a36705bba6f/1/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.mft
File: DAXKERwAk7VlFCFb5Ge1Fd2lbAY.mft (raw, json)
Hash identifier: 3ifIt4mNMEWHnHsD0RhlFD+InkDYKg/RYDwYUZcfs2Y=
Subject key identifier: CC:C3:48:1A:BC:35:44:08:1D:9B:86:2F:D4:2A:53:BF:41:5F:4E:D8
Authority key identifier: 0C:05:CA:11:1C:00:93:B5:65:14:21:5B:E4:67:B5:15:DD:A5:6C:06
Certificate issuer: /CN=0c05ca111c0093b56514215be467b515dda56c06
Certificate serial: 0197BD10BC17CC82FAB9E69719D8E12E4DE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/0fbf48-5db7-49fe-bf44-6a36705bba6f/1/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.mft
Manifest number: 093C
Signing time: Sun 29 Jun 2025 19:01:19 +0000
Manifest this update: Sun 29 Jun 2025 19:01:19 +0000
Manifest next update: Mon 30 Jun 2025 19:01:19 +0000
Files and hashes: 1: DAXKERwAk7VlFCFb5Ge1Fd2lbAY.crl (hash: c/lrQcqVUUD5G7YaaJ1+sRBZYDj77SUR1JPEeS71xjA=)
2: _2hrxKKbdmRyLOnHUiOQipQACXY.roa (hash: DxOyoU679BPpOs0ffrHVPaZuK8yvllJ+3WIdB3uJM5Y=)
3: t16GyUN0G0ERD6SmYA9i0r30zic.roa (hash: oKvu0HJILKuRj6gBGrcQg1IlSuH1C1Ay4XKjgYCj9is=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/0fbf48-5db7-49fe-bf44-6a36705bba6f/1/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/0fbf48-5db7-49fe-bf44-6a36705bba6f/1/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 13:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:bd:10:bc:17:cc:82:fa:b9:e6:97:19:d8:e1:2e:4d:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c05ca111c0093b56514215be467b515dda56c06
Validity
Not Before: Jun 29 19:01:19 2025 GMT
Not After : Jun 30 19:01:19 2025 GMT
Subject: CN=ccc3481abc3544081d9b862fd42a53bf415f4ed8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:7a:13:72:2a:aa:e7:ca:d3:57:c7:d0:12:12:
dc:07:de:a3:99:62:74:d9:65:07:d6:d6:8e:cc:37:
08:9a:3b:e0:cf:03:93:cf:d1:11:f3:f1:ed:31:9c:
9f:12:6b:cd:63:6b:43:d3:1e:dd:9c:ac:c1:fe:57:
13:06:d1:64:5f:e6:94:f4:01:0a:76:5a:a7:b4:8d:
eb:90:bd:66:d2:1b:7a:ce:ea:de:27:ab:6e:99:00:
3e:81:a2:a8:03:ce:07:3e:c9:af:12:98:bf:58:f8:
d2:85:68:85:de:91:b4:00:ac:44:90:5e:a1:60:82:
35:98:05:14:37:c7:4a:d7:28:e3:a4:8e:d7:8d:fc:
86:a7:97:59:74:28:a4:e0:4b:09:39:ee:c1:bc:4c:
22:72:2d:36:d1:e0:26:73:a2:4b:53:ab:dc:74:9f:
52:02:0c:11:65:82:1d:d0:5a:44:88:49:8f:8c:d0:
8e:b6:af:32:64:71:41:da:8c:b7:b6:3f:a1:c7:13:
2f:57:8b:b1:a7:24:c0:58:ac:1c:87:4a:32:a8:29:
5f:55:93:4a:d6:41:e3:82:71:d6:40:b2:81:65:2e:
cd:5e:9f:ed:a1:9b:e8:a2:37:70:31:16:a1:ea:91:
11:01:95:0c:32:1c:c3:0c:07:77:7c:f7:2d:5f:6c:
ca:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:C3:48:1A:BC:35:44:08:1D:9B:86:2F:D4:2A:53:BF:41:5F:4E:D8
X509v3 Authority Key Identifier:
keyid:0C:05:CA:11:1C:00:93:B5:65:14:21:5B:E4:67:B5:15:DD:A5:6C:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/0fbf48-5db7-49fe-bf44-6a36705bba6f/1/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/0fbf48-5db7-49fe-bf44-6a36705bba6f/1/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:1d:4a:51:5a:f3:3a:58:c6:95:39:8c:c4:d1:88:2d:23:a2:
a2:85:21:8c:a9:08:78:ce:bb:48:89:ac:30:ac:06:84:8c:68:
80:2d:5b:a4:2a:c8:eb:fb:c0:91:63:2c:b5:cd:ba:5f:f3:1d:
ad:d2:aa:0d:9a:63:78:bc:07:33:a6:7e:dd:a2:44:80:2a:ca:
fb:a5:d0:a3:55:30:04:fc:19:22:ee:dc:1a:53:6b:84:c9:bf:
df:a4:c7:f2:eb:a6:48:a7:47:45:e6:45:83:47:91:7a:26:8e:
c4:61:be:f2:0c:75:90:c4:33:0e:1d:bb:f3:33:0f:b7:06:b3:
0b:f5:af:c4:92:35:4d:b3:37:86:aa:55:7c:ff:5a:d1:cf:5e:
45:7e:fc:66:1a:b7:ca:96:66:ba:f2:4a:4b:57:7c:eb:c1:f8:
23:b0:23:ec:3c:d5:dc:07:06:6f:0e:72:f6:a5:12:96:a5:12:
ab:d7:b1:1c:16:18:07:cf:db:5c:c5:ee:cf:4e:29:f6:01:6a:
8d:b6:32:b1:dd:87:8e:f4:7f:97:05:be:af:cd:25:90:2f:5e:
ac:5e:69:32:91:c7:db:b1:16:cf:49:96:aa:d0:77:ef:8e:f9:
82:88:a2:c4:e0:1b:c8:d1:f6:32:dc:98:b0:67:63:42:3e:3c:
53:da:2b:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 23:10:29 2025 by rpki-client