Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/794e80-e70a-4043-bb72-eca4545e178b/1/Dd5jFzEf5tU4V3wX_smCuC7qmr0.mft
File: Dd5jFzEf5tU4V3wX_smCuC7qmr0.mft (raw, json)
Hash identifier: ydF0TU6ENpuvHJXE8O0A8QzJyVzVSbbEfBxk+4gN3Ac=
Subject key identifier: 65:2D:66:DE:79:76:B5:77:F2:BF:8E:C3:BE:6E:25:0F:8C:A9:8C:17
Authority key identifier: 0D:DE:63:17:31:1F:E6:D5:38:57:7C:17:FE:C9:82:B8:2E:EA:9A:BD
Certificate issuer: /CN=0dde6317311fe6d538577c17fec982b82eea9abd
Certificate serial: 0197B632CAB1CC02D23F633D9EB751B93CD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dd5jFzEf5tU4V3wX_smCuC7qmr0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/794e80-e70a-4043-bb72-eca4545e178b/1/Dd5jFzEf5tU4V3wX_smCuC7qmr0.mft
Manifest number: 114A
Signing time: Sat 28 Jun 2025 11:01:11 +0000
Manifest this update: Sat 28 Jun 2025 11:01:11 +0000
Manifest next update: Sun 29 Jun 2025 11:01:11 +0000
Files and hashes: 1: CQ0HG1zWD48ox6-boezAROBkH6Q.roa (hash: zcrpqTakOim+S6H2s99YrSuzoN8a0ByVl/l7V7jze5I=)
2: Dd5jFzEf5tU4V3wX_smCuC7qmr0.crl (hash: g5arpeLvvVkKrlU2+SYWxh676eJmavCZZoemII7cz3A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/794e80-e70a-4043-bb72-eca4545e178b/1/Dd5jFzEf5tU4V3wX_smCuC7qmr0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/794e80-e70a-4043-bb72-eca4545e178b/1/Dd5jFzEf5tU4V3wX_smCuC7qmr0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dd5jFzEf5tU4V3wX_smCuC7qmr0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 11:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:32:ca:b1:cc:02:d2:3f:63:3d:9e:b7:51:b9:3c:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dde6317311fe6d538577c17fec982b82eea9abd
Validity
Not Before: Jun 28 11:01:11 2025 GMT
Not After : Jun 29 11:01:11 2025 GMT
Subject: CN=652d66de7976b577f2bf8ec3be6e250f8ca98c17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:3b:ae:8f:d9:ae:94:68:a1:ad:00:7b:da:58:
33:7c:43:aa:04:c5:b7:2b:23:1a:8d:61:13:c1:53:
96:ca:0f:45:12:8d:bd:ef:27:95:c0:09:7b:9d:4c:
00:d6:f2:5d:a7:e7:dd:6d:e3:d6:d5:0a:07:07:e9:
7c:7b:a6:95:8e:a5:8f:64:67:ab:fe:cd:8e:6f:d8:
62:e2:31:2c:f5:16:aa:8c:b2:ed:02:ba:dc:df:a4:
8a:3d:f8:43:71:e1:c1:ec:f1:7d:69:eb:47:f4:db:
2c:3b:8e:20:8b:40:ef:97:76:01:68:f5:12:de:2b:
c9:60:fe:04:3e:9f:cd:af:1d:63:5a:7b:76:ff:a2:
d9:10:c6:69:5e:1e:79:9d:31:e1:ef:07:26:fe:13:
77:3d:d7:2e:5a:c4:89:b3:6f:73:20:4b:81:4e:7c:
4c:2d:ad:ad:7d:cc:dc:3b:f3:21:e9:db:de:9a:8a:
b0:03:90:a9:ca:9a:22:62:2f:88:e1:78:5b:8a:1c:
7d:ba:d3:4c:90:96:76:55:8b:c7:5c:fa:1e:fe:fc:
9f:52:ea:9e:c7:c5:9d:18:e0:63:e4:10:1b:d9:b5:
3e:ca:e7:d4:15:c9:1d:73:02:98:df:c3:44:d7:b3:
eb:1b:4b:6f:01:f7:e7:84:a4:04:e8:34:1f:8d:98:
f0:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:2D:66:DE:79:76:B5:77:F2:BF:8E:C3:BE:6E:25:0F:8C:A9:8C:17
X509v3 Authority Key Identifier:
keyid:0D:DE:63:17:31:1F:E6:D5:38:57:7C:17:FE:C9:82:B8:2E:EA:9A:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dd5jFzEf5tU4V3wX_smCuC7qmr0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/794e80-e70a-4043-bb72-eca4545e178b/1/Dd5jFzEf5tU4V3wX_smCuC7qmr0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/794e80-e70a-4043-bb72-eca4545e178b/1/Dd5jFzEf5tU4V3wX_smCuC7qmr0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:1e:83:3b:72:03:4f:be:54:6e:af:66:49:1f:eb:ab:52:32:
ad:56:a6:b6:6d:78:ec:07:9b:a7:b4:f7:c8:7d:15:a7:40:e4:
dc:85:20:3d:aa:30:6c:1a:11:dd:ef:a0:a7:9c:44:bc:f2:79:
5d:c1:4e:37:18:5a:53:84:1a:10:55:0b:af:04:62:ab:9d:ab:
1d:f5:16:4f:9a:54:92:4e:e2:48:82:0d:fc:66:29:90:4b:d5:
51:a9:27:27:e7:3a:b3:10:20:bb:9d:f4:80:b1:2c:93:ff:68:
ba:57:1b:aa:4a:60:61:7b:12:44:33:07:87:a9:f0:48:9d:88:
8a:a7:41:8a:a7:8a:b3:65:da:a9:5d:7b:b4:98:be:ce:d5:de:
73:5e:63:15:3a:18:b7:8d:31:e1:dc:17:ce:24:b1:49:72:08:
95:2a:e6:4d:fa:9b:d3:c0:6e:8b:b3:17:28:c6:7f:aa:19:7f:
e1:58:28:73:f8:ba:2f:6d:a3:74:c5:94:5b:a7:40:96:a6:2c:
fa:38:2f:61:73:88:20:ec:90:1d:c7:53:6e:52:c2:4b:6d:cb:
ac:e0:89:b7:90:3a:0f:2d:56:1a:f6:89:90:c7:80:01:1e:15:
af:66:c0:e6:82:8c:32:ac:6a:45:9c:52:86:09:35:0b:a5:42:
d5:96:7a:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:44:40 2025 by rpki-client