Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/81d94d-2e40-4546-8b89-804f17ec245e/1/DBfa4ER22xAWyqQ-Ptm8a9afOXU.mft
File: DBfa4ER22xAWyqQ-Ptm8a9afOXU.mft (raw, json)
Hash identifier: 9oIHK5S2QGG6E+IcB1mblo3NCv9slIlv42Y5d8vTUTo=
Subject key identifier: 8F:14:19:C6:7F:4B:22:FF:39:BC:6F:CF:3A:51:EB:70:87:D3:92:DD
Authority key identifier: 0C:17:DA:E0:44:76:DB:10:16:CA:A4:3E:3E:D9:BC:6B:D6:9F:39:75
Certificate issuer: /CN=0c17dae04476db1016caa43e3ed9bc6bd69f3975
Certificate serial: 0197B6A0E808E7BDBC31728B03C4F46A7F68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DBfa4ER22xAWyqQ-Ptm8a9afOXU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/81d94d-2e40-4546-8b89-804f17ec245e/1/DBfa4ER22xAWyqQ-Ptm8a9afOXU.mft
Manifest number: 0C4D
Signing time: Sat 28 Jun 2025 13:01:27 +0000
Manifest this update: Sat 28 Jun 2025 13:01:27 +0000
Manifest next update: Sun 29 Jun 2025 13:01:27 +0000
Files and hashes: 1: DBfa4ER22xAWyqQ-Ptm8a9afOXU.crl (hash: YK4vYxwSQ7H/pYdRnTwqaNnqRIqLnxJ6bvbl5zXSogw=)
2: JSDk17ahgjuw722aAK05JMcAXY0.roa (hash: /NFnbJGiq89G5CeYaHNRHk4PJoghq/D0jyLC3XejUq4=)
3: ziX8_hpTF8ziYiuxKjrOFhfqeQo.roa (hash: HyWFcNCrTB5jYAeqdAfWDrR8oFNvkYOvB8sslFQIfBQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/81d94d-2e40-4546-8b89-804f17ec245e/1/DBfa4ER22xAWyqQ-Ptm8a9afOXU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/81d94d-2e40-4546-8b89-804f17ec245e/1/DBfa4ER22xAWyqQ-Ptm8a9afOXU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DBfa4ER22xAWyqQ-Ptm8a9afOXU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:e8:08:e7:bd:bc:31:72:8b:03:c4:f4:6a:7f:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c17dae04476db1016caa43e3ed9bc6bd69f3975
Validity
Not Before: Jun 28 13:01:27 2025 GMT
Not After : Jun 29 13:01:27 2025 GMT
Subject: CN=8f1419c67f4b22ff39bc6fcf3a51eb7087d392dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:22:4a:56:bf:5e:87:6a:40:e7:db:74:94:5a:
88:a5:c9:d6:a0:6b:6d:bc:9d:b3:17:b7:a1:c1:00:
23:45:d9:a5:01:60:b6:ec:06:dd:80:48:f3:19:22:
ab:2e:37:5a:0b:83:eb:bc:27:51:09:a8:2c:69:b0:
85:2f:67:02:30:30:32:aa:58:64:61:f2:09:21:3d:
fa:28:25:9a:85:24:64:9a:a0:ed:a5:da:a4:f6:18:
74:8c:e4:21:62:d2:43:9c:b2:a4:d1:78:84:07:c6:
90:9d:e5:aa:51:22:50:20:6c:e6:6f:7e:63:67:11:
0a:71:6d:fa:9d:bd:5f:2d:2a:08:d8:b7:3d:f0:97:
71:d4:43:bd:23:60:8c:d7:94:d5:73:4a:56:82:78:
5a:41:e1:7f:2d:3d:bf:73:a9:7e:27:ef:10:fb:37:
06:b5:31:b1:ed:99:dd:59:50:a4:3c:fe:c0:29:dd:
c5:f0:b2:2a:59:d4:5c:55:aa:ff:e5:7e:83:57:20:
7b:03:5c:f0:11:67:4f:48:8a:f3:21:23:37:98:65:
16:5b:82:02:07:4d:51:03:54:cf:f6:b6:78:c4:be:
d9:cd:0e:d5:ea:10:6c:27:34:4c:c9:27:d1:98:dc:
f2:c2:e9:4a:ef:21:5a:e2:29:45:31:66:cb:32:98:
2b:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:14:19:C6:7F:4B:22:FF:39:BC:6F:CF:3A:51:EB:70:87:D3:92:DD
X509v3 Authority Key Identifier:
keyid:0C:17:DA:E0:44:76:DB:10:16:CA:A4:3E:3E:D9:BC:6B:D6:9F:39:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DBfa4ER22xAWyqQ-Ptm8a9afOXU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/81d94d-2e40-4546-8b89-804f17ec245e/1/DBfa4ER22xAWyqQ-Ptm8a9afOXU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/81d94d-2e40-4546-8b89-804f17ec245e/1/DBfa4ER22xAWyqQ-Ptm8a9afOXU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:84:5e:ff:87:b5:9d:9d:ab:5b:2d:f1:89:c9:9c:a2:ad:fa:
38:39:9f:7b:c1:63:72:be:0e:ce:f3:2b:1e:0b:fe:cb:ea:04:
a8:60:48:6b:71:a0:c0:e5:08:16:b7:fc:af:55:8d:d8:26:50:
c6:38:d8:3d:59:c1:f8:a9:84:ff:99:26:cc:78:1b:d1:1d:04:
e2:1f:67:a1:b5:b7:0e:46:10:eb:6a:a9:15:20:d4:9f:a5:8e:
42:2a:e1:68:5b:de:de:b5:04:c7:e2:f0:1a:0f:c7:04:98:ec:
ef:88:27:6f:2a:79:b8:6d:d1:af:17:20:ce:9b:fc:22:b8:4b:
84:2f:6c:fd:ea:0b:ca:45:ad:e0:ad:cc:82:93:d8:f9:36:63:
70:c1:2d:cf:32:26:9b:c0:78:0a:aa:2f:18:bb:3e:43:60:73:
51:fb:d3:c8:a6:00:6e:cc:ae:44:57:37:66:d0:74:15:49:fd:
34:fd:0f:fd:cc:39:82:7c:97:94:f5:87:7b:e2:da:08:4e:6e:
af:8b:7c:89:6e:ff:19:e1:79:08:1f:ce:01:f5:f5:18:6a:66:
6e:ef:34:93:0e:32:8e:ef:c3:1d:bb:71:ff:da:b4:9c:e4:f4:
bd:7a:b9:3f:82:1e:8c:a0:69:58:83:92:68:42:46:55:77:11:
62:34:f0:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:28:42 2025 by rpki-client