Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/b79777-4a04-4dab-a1dc-25374494ceee/1/DNLKvrHXJOekjdYemn4MUKTpv1A.mft
File: DNLKvrHXJOekjdYemn4MUKTpv1A.mft (raw, json)
Hash identifier: a3W/gl+8u+o+AiGdApI3cp8mHN6k8UN48YablsJvX2I=
Subject key identifier: DA:A0:D2:35:D7:34:0F:C4:52:4F:C8:A5:81:75:8E:15:C5:1D:9E:BF
Authority key identifier: 0C:D2:CA:BE:B1:D7:24:E7:A4:8D:D6:1E:9A:7E:0C:50:A4:E9:BF:50
Certificate issuer: /CN=0cd2cabeb1d724e7a48dd61e9a7e0c50a4e9bf50
Certificate serial: 0197B7457B1547D3CEFF8EC3C7E3CCCE0C87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DNLKvrHXJOekjdYemn4MUKTpv1A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/b79777-4a04-4dab-a1dc-25374494ceee/1/DNLKvrHXJOekjdYemn4MUKTpv1A.mft
Manifest number: 0685
Signing time: Sat 28 Jun 2025 16:01:13 +0000
Manifest this update: Sat 28 Jun 2025 16:01:13 +0000
Manifest next update: Sun 29 Jun 2025 16:01:13 +0000
Files and hashes: 1: DNLKvrHXJOekjdYemn4MUKTpv1A.crl (hash: wvBmCqJcKa/I2jPJw2xG2kX+E7h88i5pfe9TDAQx2Qg=)
2: gFGZ2BFs8uwMqzE5e-fa-6VVCNI.roa (hash: RsuEdz61HYwgHfhCVbH78Gqegx1PGZpeCp/nCDSO5do=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/b79777-4a04-4dab-a1dc-25374494ceee/1/DNLKvrHXJOekjdYemn4MUKTpv1A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/b79777-4a04-4dab-a1dc-25374494ceee/1/DNLKvrHXJOekjdYemn4MUKTpv1A.mft
rsync://rpki.ripe.net/repository/DEFAULT/DNLKvrHXJOekjdYemn4MUKTpv1A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:7b:15:47:d3:ce:ff:8e:c3:c7:e3:cc:ce:0c:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cd2cabeb1d724e7a48dd61e9a7e0c50a4e9bf50
Validity
Not Before: Jun 28 16:01:13 2025 GMT
Not After : Jun 29 16:01:13 2025 GMT
Subject: CN=daa0d235d7340fc4524fc8a581758e15c51d9ebf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:58:86:f6:65:5f:58:2c:1d:10:e8:8d:a5:a7:
89:fa:67:bf:77:42:d7:f8:5f:0a:db:74:27:aa:90:
15:48:d7:0b:24:f9:2d:47:81:a6:6e:fe:b3:24:6b:
f0:9c:46:8a:ec:28:14:3a:fb:88:7a:6f:6c:1e:95:
86:ac:25:ea:4e:2f:79:84:6c:97:b9:a0:6d:ee:38:
d1:8c:04:75:3d:73:5b:a5:47:fd:42:e8:f1:60:d7:
1a:62:1f:e7:75:86:03:81:94:18:12:b0:b0:0b:25:
cf:f0:86:4a:2b:4a:20:5b:5b:ba:2b:91:e6:4f:1e:
1f:f8:f6:2b:ca:20:46:f8:89:6a:d3:dc:4f:e0:43:
ba:ec:1b:54:2c:26:e8:ef:8e:f6:15:c4:28:61:32:
c4:99:0e:c4:3f:bf:a7:78:ed:b3:ea:0f:55:62:ff:
3c:6b:69:0c:36:4d:29:37:6c:59:0c:83:23:60:81:
fb:cf:56:cf:8f:aa:2b:60:03:68:c9:02:a3:60:0f:
f6:b7:c9:d5:10:66:13:6a:43:73:14:8f:15:87:58:
f0:c7:5a:d5:ac:9a:35:86:87:97:54:4c:2f:a7:95:
f4:62:4f:bc:44:6f:a9:a0:ce:7d:b5:3f:96:17:dd:
cf:3e:22:8a:a0:9d:81:a6:e7:9b:cc:b6:78:bd:6e:
72:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:A0:D2:35:D7:34:0F:C4:52:4F:C8:A5:81:75:8E:15:C5:1D:9E:BF
X509v3 Authority Key Identifier:
keyid:0C:D2:CA:BE:B1:D7:24:E7:A4:8D:D6:1E:9A:7E:0C:50:A4:E9:BF:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DNLKvrHXJOekjdYemn4MUKTpv1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b79777-4a04-4dab-a1dc-25374494ceee/1/DNLKvrHXJOekjdYemn4MUKTpv1A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b79777-4a04-4dab-a1dc-25374494ceee/1/DNLKvrHXJOekjdYemn4MUKTpv1A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:90:98:fe:8d:ac:bf:b5:bf:f7:e6:60:6b:22:00:10:f1:67:
ae:c1:74:ba:77:c4:cf:2d:1b:d4:b3:34:d5:dd:a2:ee:b2:fa:
28:91:d2:bc:25:8d:84:ee:f0:67:66:bb:61:c1:86:d6:fb:8e:
41:02:ed:8b:ac:65:70:52:9d:ae:07:11:96:bf:87:7d:d9:d7:
53:1d:79:82:aa:f0:29:4d:e2:de:d4:47:1b:ef:29:cc:c0:7e:
17:cf:ef:1d:3f:70:24:65:21:2a:38:fe:3c:5b:6a:56:af:b8:
ea:79:a9:0e:bd:b2:3a:bb:3f:27:c3:47:b6:39:c0:60:04:5e:
20:d4:5c:c6:0e:24:2c:4d:23:2e:ba:d8:22:f9:70:90:2d:6f:
26:99:cd:75:70:a0:d0:ed:df:b7:cb:40:28:7e:31:2a:2f:6b:
c8:e0:09:93:50:f5:c2:2c:00:1b:72:62:f4:2c:34:6d:2f:55:
f9:7e:8c:93:32:20:f3:e2:22:6e:ac:60:85:03:ef:97:e9:a0:
13:bc:ef:36:a0:41:7e:cf:e2:9a:2b:70:bf:70:ef:68:2b:5d:
f4:d0:63:d0:c3:67:ed:3a:bb:2f:b8:94:ef:f5:ff:b2:74:5b:
56:a5:65:df:20:6b:29:a3:88:85:f4:68:9f:85:c2:fa:23:9a:
01:a6:46:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:34:56 2025 by rpki-client