Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/0eb852-af34-4cb9-872e-4b5d5d5f8699/1/dNfaY5KZmWAzlYd0SM5QrG4CE6k.mft
File: dNfaY5KZmWAzlYd0SM5QrG4CE6k.mft (raw, json)
Hash identifier: SbDPdi+W9HZsaAt+/1nGAuN4iQGm133X4S/V1KTCtYU=
Subject key identifier: 48:3F:2C:4B:88:D5:52:30:85:36:62:9F:E3:CF:9D:A7:7D:10:20:86
Authority key identifier: 74:D7:DA:63:92:99:99:60:33:95:87:74:48:CE:50:AC:6E:02:13:A9
Certificate issuer: /CN=74d7da63929999603395877448ce50ac6e0213a9
Certificate serial: 0197B6A177725BC654A94EA70694F02AE928
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dNfaY5KZmWAzlYd0SM5QrG4CE6k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/0eb852-af34-4cb9-872e-4b5d5d5f8699/1/dNfaY5KZmWAzlYd0SM5QrG4CE6k.mft
Manifest number: 0E1C
Signing time: Sat 28 Jun 2025 13:02:04 +0000
Manifest this update: Sat 28 Jun 2025 13:02:04 +0000
Manifest next update: Sun 29 Jun 2025 13:02:04 +0000
Files and hashes: 1: dNfaY5KZmWAzlYd0SM5QrG4CE6k.crl (hash: 2iU6XIoBwMzC5j0KvLADqEadGgwEHLiaCq5fRhV1QsY=)
2: fU3MlRUECyf8Mob8gpdjGa0WFt0.roa (hash: 1bRjiSyIpRcT6gpZZI2DT+oOrLLRlf7RVwqkDF08rbw=)
3: fzU99qCGkV_CIT5aPe-FRXxnYbQ.roa (hash: vzw9SWyMsFCc6IE8QjYq1it7590sCq4Ux6IdTNIF19M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/0eb852-af34-4cb9-872e-4b5d5d5f8699/1/dNfaY5KZmWAzlYd0SM5QrG4CE6k.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/0eb852-af34-4cb9-872e-4b5d5d5f8699/1/dNfaY5KZmWAzlYd0SM5QrG4CE6k.mft
rsync://rpki.ripe.net/repository/DEFAULT/dNfaY5KZmWAzlYd0SM5QrG4CE6k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:77:72:5b:c6:54:a9:4e:a7:06:94:f0:2a:e9:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74d7da63929999603395877448ce50ac6e0213a9
Validity
Not Before: Jun 28 13:02:04 2025 GMT
Not After : Jun 29 13:02:04 2025 GMT
Subject: CN=483f2c4b88d552308536629fe3cf9da77d102086
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:65:7d:cc:a8:87:fa:fd:93:91:4e:27:79:49:
83:47:87:57:f3:69:c4:3f:ba:ab:03:7b:2c:05:e6:
87:31:63:a3:ca:e5:45:3e:8c:de:68:a8:59:4f:1d:
8f:b7:c9:da:f6:a7:8b:a0:20:79:95:2b:91:c6:0a:
16:e2:6d:70:99:3a:f8:f5:52:c1:e9:6b:e2:ee:df:
6b:0e:3a:78:78:b7:6e:6f:dd:68:0c:a3:19:3d:9b:
3b:47:cc:01:92:a8:55:ec:42:75:59:48:4c:8a:91:
fd:c7:46:a8:de:6d:a0:ac:1e:c3:9f:96:f0:51:83:
67:4a:3c:b5:3f:64:8d:ed:b1:89:1f:0c:f1:d0:0a:
12:a2:dc:70:70:c1:d7:a2:97:7f:95:85:71:78:bf:
35:aa:df:9e:10:9f:fe:78:b2:48:6d:7b:74:21:f8:
25:d1:27:da:25:a5:c4:b8:f6:05:e7:b1:d5:63:76:
71:b1:7e:ec:1d:3d:93:90:0a:2b:86:39:38:0f:b2:
dd:24:0c:fc:f3:7d:79:4e:2d:8e:29:44:a1:31:37:
d6:cf:15:83:7d:a5:1d:b5:18:e0:70:ae:72:9a:e4:
90:bf:05:cf:0f:f7:ec:6c:b9:35:53:bc:85:d3:57:
34:b1:4a:d5:2c:4d:58:98:91:0b:f2:f9:1b:f7:1d:
d7:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:3F:2C:4B:88:D5:52:30:85:36:62:9F:E3:CF:9D:A7:7D:10:20:86
X509v3 Authority Key Identifier:
keyid:74:D7:DA:63:92:99:99:60:33:95:87:74:48:CE:50:AC:6E:02:13:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dNfaY5KZmWAzlYd0SM5QrG4CE6k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/0eb852-af34-4cb9-872e-4b5d5d5f8699/1/dNfaY5KZmWAzlYd0SM5QrG4CE6k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/0eb852-af34-4cb9-872e-4b5d5d5f8699/1/dNfaY5KZmWAzlYd0SM5QrG4CE6k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:96:2d:36:ff:67:a9:cc:e0:14:3b:37:67:25:89:fd:5b:9a:
a9:39:a7:03:8e:59:00:1f:5c:63:6c:30:dc:83:9d:52:15:f5:
71:81:26:c5:c8:73:35:56:04:df:af:7b:76:1b:8f:22:81:18:
2a:f2:a8:8f:f3:00:27:8b:f7:81:ca:a2:82:32:f2:ca:f9:1e:
1d:ef:dc:27:6d:76:20:7f:a8:b5:26:56:73:fe:fb:7e:51:7c:
32:63:7e:9c:94:59:0c:a1:66:1a:41:42:d8:9c:00:38:e4:59:
f1:5c:e4:72:ef:29:cf:5c:e8:98:4f:83:f4:e9:84:60:34:ca:
fb:77:a2:15:eb:ef:a2:ed:b4:5b:86:45:69:9e:cd:d8:62:7a:
68:61:2a:32:98:b3:c5:fa:8c:aa:8c:85:10:26:11:1b:9a:e2:
84:ec:63:8a:0b:6d:b2:0c:b0:9c:aa:32:82:6f:70:fd:9a:31:
3e:06:e7:6e:fe:17:18:32:ec:c6:5f:74:84:a7:e6:ac:f0:ea:
78:d8:e0:48:5c:0a:ec:3a:50:6f:cd:0b:5d:09:52:09:43:ee:
8f:7c:2d:c2:6b:4d:f2:86:13:08:ff:8a:b8:1d:63:ea:e5:9e:
c2:51:ef:ec:5a:3d:c7:ca:b7:93:bc:5d:4c:91:93:47:33:c5:
98:1d:65:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:42:34 2025 by rpki-client