Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/4d7a96-0574-4a09-850d-75137b12842b/1/DM1NST05HKRGjmEs6RtH8cgoM2I.mft
File: DM1NST05HKRGjmEs6RtH8cgoM2I.mft (raw, json)
Hash identifier: lXt2+zb3nCGyCU0CiMV4tjkmRY15BGjM8R2SMyhgxcU=
Subject key identifier: 16:59:31:D7:5D:04:48:52:28:68:F7:32:B2:B8:40:FA:36:09:6A:20
Authority key identifier: 0C:CD:4D:49:3D:39:1C:A4:46:8E:61:2C:E9:1B:47:F1:C8:28:33:62
Certificate issuer: /CN=0ccd4d493d391ca4468e612ce91b47f1c8283362
Certificate serial: 0197B7EA5B2F6ED11EE1A14B487E83A6E8BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DM1NST05HKRGjmEs6RtH8cgoM2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/4d7a96-0574-4a09-850d-75137b12842b/1/DM1NST05HKRGjmEs6RtH8cgoM2I.mft
Manifest number: 2B
Signing time: Sat 28 Jun 2025 19:01:18 +0000
Manifest this update: Sat 28 Jun 2025 19:01:18 +0000
Manifest next update: Sun 29 Jun 2025 19:01:18 +0000
Files and hashes: 1: DM1NST05HKRGjmEs6RtH8cgoM2I.crl (hash: i5/mvBYEq6iTvNxzTABkt6wyMcUVNKWP99b0hry677I=)
2: UCbP0uMxwI1Dtwy_MSnoOs0srFA.roa (hash: FXCOZ3RR1v7GAOBmOczwXx+7sehvCfZ7oMWfxcGZPmk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/4d7a96-0574-4a09-850d-75137b12842b/1/DM1NST05HKRGjmEs6RtH8cgoM2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/4d7a96-0574-4a09-850d-75137b12842b/1/DM1NST05HKRGjmEs6RtH8cgoM2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/DM1NST05HKRGjmEs6RtH8cgoM2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:5b:2f:6e:d1:1e:e1:a1:4b:48:7e:83:a6:e8:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ccd4d493d391ca4468e612ce91b47f1c8283362
Validity
Not Before: Jun 28 19:01:18 2025 GMT
Not After : Jun 29 19:01:18 2025 GMT
Subject: CN=165931d75d0448522868f732b2b840fa36096a20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:fc:7d:94:58:45:b3:d3:97:fd:2c:0a:76:66:
bf:f2:05:b0:97:a7:2a:e0:e6:e0:db:80:cb:ec:2f:
ca:c8:46:1d:7d:3f:eb:90:9a:a0:f8:28:2d:6d:39:
db:f2:25:3f:7b:9a:1b:88:a0:c7:ec:69:a1:dd:33:
d4:6b:57:f8:46:52:18:dc:d1:d2:93:06:08:94:f7:
89:e3:71:20:21:08:30:03:13:0a:4b:9c:b4:95:56:
99:40:18:32:22:ab:2b:3e:d6:e1:eb:ce:ef:d6:69:
9d:2c:e4:e5:33:1a:bf:5c:c1:e4:a0:ba:b8:de:ab:
61:cb:26:20:68:1c:a4:fc:2a:f8:aa:48:0c:79:2b:
21:1c:83:99:e3:57:cf:41:05:d1:44:0f:f0:0a:ac:
c0:c2:b4:ae:9f:bf:49:89:8d:8a:87:78:f7:e3:39:
87:7b:7f:84:cc:e9:85:a6:81:74:44:d9:31:af:b6:
88:eb:7f:23:b0:c0:f6:34:e8:45:50:30:e7:ee:b1:
f1:4a:72:dd:d4:1a:33:8c:20:a2:32:e9:f8:fc:58:
37:5a:79:d1:ed:8a:39:c5:37:07:c3:00:7b:a9:a3:
e9:6b:dd:12:01:7a:2b:a6:47:d6:e2:9d:a3:1c:e7:
3a:0b:97:b7:7f:19:45:46:c5:22:d9:1b:b1:fb:2c:
10:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:59:31:D7:5D:04:48:52:28:68:F7:32:B2:B8:40:FA:36:09:6A:20
X509v3 Authority Key Identifier:
keyid:0C:CD:4D:49:3D:39:1C:A4:46:8E:61:2C:E9:1B:47:F1:C8:28:33:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DM1NST05HKRGjmEs6RtH8cgoM2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/4d7a96-0574-4a09-850d-75137b12842b/1/DM1NST05HKRGjmEs6RtH8cgoM2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/4d7a96-0574-4a09-850d-75137b12842b/1/DM1NST05HKRGjmEs6RtH8cgoM2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:25:b2:0a:42:07:74:53:28:fd:45:c8:4e:26:17:37:f3:dd:
98:a5:70:86:ba:74:0a:df:aa:ed:19:f0:1d:d6:35:45:07:aa:
db:7a:8b:6f:b8:60:9d:09:2c:c5:0d:70:25:70:ce:49:9a:41:
e4:22:e5:62:61:45:a8:c3:bf:40:78:64:ca:63:fe:12:e9:09:
2d:08:33:31:5c:20:3f:73:ab:18:0e:6b:bb:89:04:1c:6e:9b:
90:7f:fe:48:bd:45:4f:55:f1:c2:94:84:11:e8:8b:46:ca:a5:
56:93:4c:c3:4b:81:8a:1a:9e:83:ef:c3:dd:94:23:9b:e2:1f:
82:8b:a9:a7:c8:74:79:9c:0e:38:08:c3:9b:15:5b:73:76:ab:
e7:c9:7d:55:1a:f5:d9:ba:75:dc:e8:93:6d:3c:65:ec:3b:d4:
27:a7:82:4f:8f:bf:4a:18:3d:cf:ca:e3:2d:7d:b5:19:65:a7:
43:aa:05:dd:be:9c:3c:80:a8:02:17:10:9c:77:84:b9:a7:8d:
ae:a8:a7:f9:5f:14:28:99:22:e0:f5:62:62:54:23:05:f4:40:
d0:d2:db:b5:31:be:33:aa:46:bf:ac:e3:20:60:ea:6c:76:b6:
af:a3:98:d7:cf:e4:49:1e:88:f3:f7:a0:dc:74:95:92:9f:34:
dd:42:f0:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:43:22 2025 by rpki-client