Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/921df1-fa7d-4307-b9c3-7ce8c9704cf0/1/DP4QWKMePBiUvPBkx-g3C7ps-OQ.mft
File: DP4QWKMePBiUvPBkx-g3C7ps-OQ.mft (raw, json)
Hash identifier: jjxpH9rjA6wf6cpjboeA/hfn/t6Fhdx32QFR+7yScJA=
Subject key identifier: 11:71:0B:5F:28:6A:C4:B2:2C:B2:CC:D4:49:18:0D:1B:B8:CC:38:1C
Authority key identifier: 0C:FE:10:58:A3:1E:3C:18:94:BC:F0:64:C7:E8:37:0B:BA:6C:F8:E4
Certificate issuer: /CN=0cfe1058a31e3c1894bcf064c7e8370bba6cf8e4
Certificate serial: 0197B89033079DABAEB6417A091E36B91DCF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DP4QWKMePBiUvPBkx-g3C7ps-OQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/921df1-fa7d-4307-b9c3-7ce8c9704cf0/1/DP4QWKMePBiUvPBkx-g3C7ps-OQ.mft
Manifest number: 0C9B
Signing time: Sat 28 Jun 2025 22:02:27 +0000
Manifest this update: Sat 28 Jun 2025 22:02:27 +0000
Manifest next update: Sun 29 Jun 2025 22:02:27 +0000
Files and hashes: 1: DP4QWKMePBiUvPBkx-g3C7ps-OQ.crl (hash: SpC1J/C1GGFxoVFqkUKOKAAfaBgHkleRfc/MafLjgh8=)
2: UKqORdLzZXdOrDEcMxzidP1Tf04.roa (hash: 993OGeNZfndwd7HXQtjHB4WsdW/h/7CpCQberKrZGUc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/921df1-fa7d-4307-b9c3-7ce8c9704cf0/1/DP4QWKMePBiUvPBkx-g3C7ps-OQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/921df1-fa7d-4307-b9c3-7ce8c9704cf0/1/DP4QWKMePBiUvPBkx-g3C7ps-OQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/DP4QWKMePBiUvPBkx-g3C7ps-OQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 22:02:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:90:33:07:9d:ab:ae:b6:41:7a:09:1e:36:b9:1d:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cfe1058a31e3c1894bcf064c7e8370bba6cf8e4
Validity
Not Before: Jun 28 22:02:27 2025 GMT
Not After : Jun 29 22:02:27 2025 GMT
Subject: CN=11710b5f286ac4b22cb2ccd449180d1bb8cc381c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:7b:d3:44:41:95:36:18:f6:2e:75:11:e4:8c:
2d:01:f1:be:95:12:8f:6b:a8:5e:e0:c4:35:1f:ee:
b3:ff:b2:e0:6b:6c:cc:90:69:1e:9b:63:dc:cd:71:
60:94:53:65:1a:94:ac:4b:28:77:f8:ef:7b:af:23:
43:f2:7c:95:03:23:1b:51:bb:5b:41:05:39:48:80:
8e:e2:32:30:e0:ff:01:18:b6:32:40:bd:8c:d9:0b:
32:8e:03:da:73:fe:60:44:ce:ef:6a:e2:4a:2c:5c:
b8:ed:0c:23:8d:4d:28:49:15:d7:62:7a:d3:a4:ee:
4e:bc:f7:1e:94:c8:82:0b:c9:37:11:77:eb:8c:dd:
49:5d:98:cd:c3:e8:f9:32:8e:a5:16:55:55:81:e5:
69:90:53:79:ff:72:c3:a1:4b:da:80:fb:de:01:1d:
ed:44:26:05:0e:58:e0:54:4e:bf:a3:d3:a3:f9:b6:
6c:7c:1e:de:bd:dc:c7:55:d1:4f:de:5a:6e:05:80:
25:02:f2:3d:48:80:f3:18:23:a1:60:3a:95:2c:3a:
c9:75:11:05:b7:25:e6:e6:3b:9a:cf:60:c8:f9:62:
f5:63:ed:f7:a9:5f:f2:3c:ea:1f:73:d3:f4:c7:52:
4c:36:48:d4:69:3f:9b:17:0c:34:9b:de:f9:be:83:
1f:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:71:0B:5F:28:6A:C4:B2:2C:B2:CC:D4:49:18:0D:1B:B8:CC:38:1C
X509v3 Authority Key Identifier:
keyid:0C:FE:10:58:A3:1E:3C:18:94:BC:F0:64:C7:E8:37:0B:BA:6C:F8:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DP4QWKMePBiUvPBkx-g3C7ps-OQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/921df1-fa7d-4307-b9c3-7ce8c9704cf0/1/DP4QWKMePBiUvPBkx-g3C7ps-OQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/921df1-fa7d-4307-b9c3-7ce8c9704cf0/1/DP4QWKMePBiUvPBkx-g3C7ps-OQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:cf:6b:38:ab:05:2a:03:6e:ff:0f:80:db:88:b0:f7:83:df:
3c:df:26:97:e9:60:06:0c:66:b5:27:20:fc:80:c3:e5:13:3b:
92:53:00:d0:38:17:d3:9b:f9:42:02:a1:00:d2:36:f6:0b:09:
58:30:b4:c1:72:a0:49:08:a9:0c:53:9d:fe:2b:1c:2c:0f:4c:
f6:ba:db:ff:a0:0e:82:40:94:fd:33:bf:fb:36:2a:8e:c3:8a:
36:13:d8:fc:a9:1d:2b:e8:b6:64:6f:3f:23:94:d7:01:a6:ac:
52:d9:28:52:95:fe:48:78:73:d6:62:58:05:fc:5f:ab:3f:c4:
11:d6:50:cc:98:7d:3a:5e:6c:20:d9:ac:0a:8f:a5:87:f4:ef:
72:e1:75:2b:8e:41:3d:e4:13:b1:45:9f:a4:57:f1:10:d1:c4:
d2:6d:97:b2:76:5e:c4:02:ed:12:82:a0:af:dd:33:7a:9a:5d:
06:9f:6f:6c:49:8a:92:c0:59:f5:9a:a4:bc:31:f2:66:1c:8a:
dc:e9:96:10:f8:3a:ff:d9:a1:9a:5d:36:4e:6f:a5:92:ed:44:
b3:fa:bd:73:6b:5f:61:c1:b2:bd:ca:46:8c:2d:42:c8:ae:2a:
d9:c9:3c:ec:f8:40:e3:dc:1e:f0:46:30:24:46:6f:7b:57:32:
58:56:7b:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:00:40 2025 by rpki-client