Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/26d193-40c2-417b-bd52-5c10bdb866e0/1/06v49M34ljoYLaDN-QjDhEf6egk.mft
File: 06v49M34ljoYLaDN-QjDhEf6egk.mft (raw, json)
Hash identifier: lEpfmqtBwQbBjGpEZrf8Ic9yas8WPG8Y/JpQL2e8xUg=
Subject key identifier: DE:92:B0:B2:6A:02:E3:80:A4:C9:65:2F:B5:47:D1:D0:9C:5E:07:AE
Authority key identifier: D3:AB:F8:F4:CD:F8:96:3A:18:2D:A0:CD:F9:08:C3:84:47:FA:7A:09
Certificate issuer: /CN=d3abf8f4cdf8963a182da0cdf908c38447fa7a09
Certificate serial: 0197B820E7A4FABA9EBC73069A1C6D5368D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/06v49M34ljoYLaDN-QjDhEf6egk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/26d193-40c2-417b-bd52-5c10bdb866e0/1/06v49M34ljoYLaDN-QjDhEf6egk.mft
Manifest number: 03A4
Signing time: Sat 28 Jun 2025 20:00:53 +0000
Manifest this update: Sat 28 Jun 2025 20:00:53 +0000
Manifest next update: Sun 29 Jun 2025 20:00:53 +0000
Files and hashes: 1: 06v49M34ljoYLaDN-QjDhEf6egk.crl (hash: yKIYSs57GiVgSY2vd/wqCd5RMmVpX+Gw88HnTujASzo=)
2: oT2LDF85PY5HdbBLwhoxl8tjz8s.roa (hash: 1EymL80SjeM7RupyG8pGED+B/g9jGLElUsA1V765L5Y=)
3: vGKjbeI63RzXbx2moMgZ88gkL0o.roa (hash: 78K41RNch9PgQsEO5vrAtY0Bw9PWHwlD6lBB0OVTon8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/26d193-40c2-417b-bd52-5c10bdb866e0/1/06v49M34ljoYLaDN-QjDhEf6egk.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/26d193-40c2-417b-bd52-5c10bdb866e0/1/06v49M34ljoYLaDN-QjDhEf6egk.mft
rsync://rpki.ripe.net/repository/DEFAULT/06v49M34ljoYLaDN-QjDhEf6egk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:20:e7:a4:fa:ba:9e:bc:73:06:9a:1c:6d:53:68:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3abf8f4cdf8963a182da0cdf908c38447fa7a09
Validity
Not Before: Jun 28 20:00:53 2025 GMT
Not After : Jun 29 20:00:53 2025 GMT
Subject: CN=de92b0b26a02e380a4c9652fb547d1d09c5e07ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:3c:be:28:af:55:bd:4b:14:fd:73:db:3f:a3:
34:3b:70:45:b5:33:c8:a9:e3:2b:ae:ab:fe:10:ec:
20:c5:01:33:02:0c:eb:2a:4b:2b:f2:06:d3:7e:e7:
13:3a:43:46:f6:8c:2e:d6:90:cb:ca:f3:28:70:69:
6a:f9:49:53:47:1b:a1:d8:c4:66:79:c0:d4:a5:b9:
5d:bf:4d:f1:6f:3a:b8:a2:d7:01:9c:f2:44:08:43:
38:0a:14:df:64:88:96:42:dd:8f:f8:4d:e0:f2:81:
83:92:a7:f6:93:e8:7b:f4:f1:28:27:ce:fa:0a:d1:
22:f0:13:fb:91:b7:cb:cc:fc:96:fd:a0:f2:77:51:
e6:84:35:e6:f0:df:e8:8e:32:33:b4:6c:25:c4:40:
62:bb:71:54:f4:4f:4e:7f:d4:5e:85:b0:ef:76:80:
30:f3:c7:f6:55:67:12:09:54:ff:37:e4:b4:43:72:
ed:5d:eb:fa:20:5c:1d:d7:bb:42:2c:8c:46:bf:95:
af:28:94:34:8d:9b:b6:78:3f:5a:31:fd:f9:d8:3b:
03:d2:4c:15:f3:98:fd:37:fb:7a:c0:f9:04:9d:43:
00:6b:b6:f0:4c:b8:1c:b7:9c:60:51:63:68:1e:51:
72:db:c0:c1:ba:70:66:23:83:58:e2:eb:7a:0c:ae:
da:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:92:B0:B2:6A:02:E3:80:A4:C9:65:2F:B5:47:D1:D0:9C:5E:07:AE
X509v3 Authority Key Identifier:
keyid:D3:AB:F8:F4:CD:F8:96:3A:18:2D:A0:CD:F9:08:C3:84:47:FA:7A:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/06v49M34ljoYLaDN-QjDhEf6egk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/26d193-40c2-417b-bd52-5c10bdb866e0/1/06v49M34ljoYLaDN-QjDhEf6egk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/26d193-40c2-417b-bd52-5c10bdb866e0/1/06v49M34ljoYLaDN-QjDhEf6egk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:91:fd:c2:55:8f:c5:45:06:f8:0a:a3:a8:b0:58:57:b6:dd:
5b:31:5e:1a:2a:90:03:b1:27:08:5b:0e:76:90:76:86:55:da:
e8:cf:02:03:de:51:70:90:88:d4:27:6d:83:d0:b6:18:b1:45:
51:51:65:83:3b:53:58:ec:3f:14:80:a2:80:7d:ee:e2:11:e1:
31:0b:d6:72:fe:a3:eb:3a:40:e0:e5:ea:ff:1d:43:f6:da:c8:
c9:da:f8:7f:d7:54:60:dc:f9:e3:38:5b:74:03:15:d6:9f:55:
91:b6:c3:dc:21:8b:4f:fb:a6:c0:9b:8d:fb:bf:6d:82:38:7d:
5d:f0:70:6e:32:2a:2f:fb:00:72:89:f7:bd:e9:92:46:dc:56:
26:70:70:c4:8b:e4:a4:06:c9:95:e8:3f:54:d5:4b:a3:b4:a3:
d2:6e:1a:27:5f:79:06:7a:ac:58:7d:58:a9:5f:b5:69:3d:9c:
f5:c9:f6:25:be:a0:bb:0e:81:7c:71:91:20:9e:3c:36:52:8b:
2a:5c:9b:e0:7c:ca:b4:cc:ce:e9:c0:55:28:05:15:9e:fa:87:
2e:40:99:21:f8:de:c5:ea:c5:d7:ff:8a:a5:0c:77:e1:26:0c:
e8:4b:28:9f:5c:55:50:89:0c:b9:8f:36:06:d1:11:79:be:cb:
61:be:ef:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:34:53 2025 by rpki-client