Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/777c0a-ca44-43ec-ab79-5e0afec136b1/1/DM6IMtApSYAfEZjp0TuxjtWDLQw.mft
File: DM6IMtApSYAfEZjp0TuxjtWDLQw.mft (raw, json)
Hash identifier: T6zBbJGHnD7rTQcf/RzzOYcCo3QD+yL3L+oJ79qclkA=
Subject key identifier: 93:22:F5:96:28:58:38:DC:D4:39:8E:6E:7D:CC:2C:53:BB:60:9A:89
Authority key identifier: 0C:CE:88:32:D0:29:49:80:1F:11:98:E9:D1:3B:B1:8E:D5:83:2D:0C
Certificate issuer: /CN=0cce8832d02949801f1198e9d13bb18ed5832d0c
Certificate serial: 0197B77C9150E4544BEBEE3A6EB170D1B69D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DM6IMtApSYAfEZjp0TuxjtWDLQw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/777c0a-ca44-43ec-ab79-5e0afec136b1/1/DM6IMtApSYAfEZjp0TuxjtWDLQw.mft
Manifest number: 15BA
Signing time: Sat 28 Jun 2025 17:01:23 +0000
Manifest this update: Sat 28 Jun 2025 17:01:23 +0000
Manifest next update: Sun 29 Jun 2025 17:01:23 +0000
Files and hashes: 1: DM6IMtApSYAfEZjp0TuxjtWDLQw.crl (hash: LnjO7eHW/oNVIAB86JiazDQo05yd02zx1YvkKEkQacI=)
2: Vj26lr7hbbX_fCXK7w3hESEooM0.roa (hash: gGIWp8lV6uKwDTfCg2XsPsepLLQekr1mHTq2CjmnAag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/777c0a-ca44-43ec-ab79-5e0afec136b1/1/DM6IMtApSYAfEZjp0TuxjtWDLQw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/777c0a-ca44-43ec-ab79-5e0afec136b1/1/DM6IMtApSYAfEZjp0TuxjtWDLQw.mft
rsync://rpki.ripe.net/repository/DEFAULT/DM6IMtApSYAfEZjp0TuxjtWDLQw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:91:50:e4:54:4b:eb:ee:3a:6e:b1:70:d1:b6:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cce8832d02949801f1198e9d13bb18ed5832d0c
Validity
Not Before: Jun 28 17:01:23 2025 GMT
Not After : Jun 29 17:01:23 2025 GMT
Subject: CN=9322f596285838dcd4398e6e7dcc2c53bb609a89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:f1:d1:59:7e:1b:96:5b:fc:f4:68:e9:54:f5:
53:8b:4f:62:a5:56:47:20:4c:33:74:5a:74:71:3e:
54:f2:67:a2:b5:ab:15:96:2c:0e:ec:d9:d2:0e:d3:
6e:de:43:bf:6a:a5:27:cf:4e:e1:6f:67:ac:2c:4f:
04:09:9c:42:27:15:ee:fe:56:b1:9d:67:64:86:4a:
a0:4d:a5:04:69:2d:8c:b2:a7:ca:0e:c6:6c:01:a7:
89:ff:b1:10:eb:06:c8:f1:3a:77:c3:de:8d:ce:25:
4f:71:5d:4e:44:b9:a5:27:9e:5f:2a:44:c5:43:cc:
18:08:86:cf:ef:88:6f:5b:8a:fc:6a:d9:82:44:7c:
f3:3b:cf:87:17:4c:05:a6:04:7c:db:ab:c3:38:ae:
98:7b:eb:08:96:15:05:5f:d6:df:c1:ee:50:e1:96:
c2:77:40:53:96:ff:cb:a2:19:4d:18:b6:a0:2a:b9:
31:b2:0b:67:84:6f:12:df:66:47:56:ff:86:c3:a3:
b6:8e:22:b5:3e:e2:b3:de:e5:33:2b:ca:5b:ab:10:
67:78:3c:b0:0d:ac:64:5c:bb:64:c2:41:bb:e3:24:
83:d5:2d:a1:50:84:d9:b4:34:d4:e6:b7:80:63:57:
89:cf:63:95:84:69:0a:3a:06:bf:e8:c4:54:50:b7:
52:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:22:F5:96:28:58:38:DC:D4:39:8E:6E:7D:CC:2C:53:BB:60:9A:89
X509v3 Authority Key Identifier:
keyid:0C:CE:88:32:D0:29:49:80:1F:11:98:E9:D1:3B:B1:8E:D5:83:2D:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DM6IMtApSYAfEZjp0TuxjtWDLQw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/777c0a-ca44-43ec-ab79-5e0afec136b1/1/DM6IMtApSYAfEZjp0TuxjtWDLQw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/777c0a-ca44-43ec-ab79-5e0afec136b1/1/DM6IMtApSYAfEZjp0TuxjtWDLQw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:a5:2c:54:3a:9d:91:44:75:00:66:8c:1b:cf:9a:28:61:7a:
5a:ae:df:8f:56:19:2c:a9:52:c7:89:a2:ae:c4:c7:75:f6:94:
3c:d8:4b:e8:3d:22:ee:a6:fa:cd:54:22:a2:90:43:34:f9:16:
ea:72:1d:87:d5:32:67:2c:4a:34:0c:16:28:e3:e1:04:ec:ca:
f2:b8:ad:c2:59:cb:73:4f:ec:45:48:57:13:27:7b:ba:80:e0:
a3:8b:22:0e:9a:db:32:7d:0e:06:09:f3:b0:bf:63:9e:ff:e1:
6f:65:50:83:5e:76:af:f6:80:af:2d:e5:d1:2f:16:1f:be:be:
da:bc:dc:5f:06:90:a6:17:ec:72:f9:88:7f:c8:8d:ef:a5:3c:
4a:61:ce:26:e8:99:5a:0e:90:1a:43:da:e5:c3:63:c1:cc:37:
b9:8b:97:6f:08:73:78:31:9d:0c:39:76:6a:38:03:69:a1:c6:
79:06:49:2f:a1:94:10:5c:30:68:06:1e:05:90:58:24:6b:e1:
e4:73:80:24:3a:24:4e:a4:82:80:0e:d7:6f:23:db:f1:06:55:
b6:14:62:84:a4:3e:67:22:63:1a:b4:06:bb:87:88:db:a5:d9:
13:c7:8d:e2:e5:ae:da:62:bd:42:69:5f:ea:67:ee:8a:2a:96:
7c:3b:27:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:43:23 2025 by rpki-client