Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8f35e8-ac2e-4e15-a0b4-b2ec6117ce9e/1/dGMyObqiEDEGpiYN39fni4CUNVw.mft
File: dGMyObqiEDEGpiYN39fni4CUNVw.mft (raw, json)
Hash identifier: 81Rxj0vLarbwXVVd1i3AmtwGhfTL1WwKFCOMhjXp+O4=
Subject key identifier: 74:E1:19:FE:65:4C:FD:29:CE:B0:40:67:1B:37:9E:A3:95:C3:19:9D
Authority key identifier: 74:63:32:39:BA:A2:10:31:06:A6:26:0D:DF:D7:E7:8B:80:94:35:5C
Certificate issuer: /CN=74633239baa2103106a6260ddfd7e78b8094355c
Certificate serial: 0197B7EABC4396E28CD8C7DB2D17FDF69DDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dGMyObqiEDEGpiYN39fni4CUNVw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8f35e8-ac2e-4e15-a0b4-b2ec6117ce9e/1/dGMyObqiEDEGpiYN39fni4CUNVw.mft
Manifest number: 0C8A
Signing time: Sat 28 Jun 2025 19:01:43 +0000
Manifest this update: Sat 28 Jun 2025 19:01:43 +0000
Manifest next update: Sun 29 Jun 2025 19:01:43 +0000
Files and hashes: 1: GndNIt9G7qZhnR5IIBXP3kbyL_4.roa (hash: SBp7dhTz+pfIJxl9syItY+Kj164I5JLZ7F2dz4iFPso=)
2: dGMyObqiEDEGpiYN39fni4CUNVw.crl (hash: z0/Uu4UcnOyjb4yWoB9rhEOllVhGKjSkTvwnbulGEhA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/8f35e8-ac2e-4e15-a0b4-b2ec6117ce9e/1/dGMyObqiEDEGpiYN39fni4CUNVw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/8f35e8-ac2e-4e15-a0b4-b2ec6117ce9e/1/dGMyObqiEDEGpiYN39fni4CUNVw.mft
rsync://rpki.ripe.net/repository/DEFAULT/dGMyObqiEDEGpiYN39fni4CUNVw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:bc:43:96:e2:8c:d8:c7:db:2d:17:fd:f6:9d:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74633239baa2103106a6260ddfd7e78b8094355c
Validity
Not Before: Jun 28 19:01:43 2025 GMT
Not After : Jun 29 19:01:43 2025 GMT
Subject: CN=74e119fe654cfd29ceb040671b379ea395c3199d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:3d:2d:42:40:60:ac:50:10:0c:51:c9:7a:52:
68:45:61:a5:80:d9:e6:db:35:66:45:d0:68:6f:eb:
29:42:6c:6b:bf:79:bf:6b:48:1c:1c:84:a2:2a:f9:
9f:d8:0b:97:eb:5c:e4:80:58:fa:9b:26:ba:44:24:
d0:bd:a0:1c:38:cc:1b:1b:a7:52:34:a7:4c:33:01:
02:32:16:a0:ba:84:f2:ac:d4:17:f8:99:17:da:71:
e8:e0:3d:25:28:46:e5:0e:99:60:5e:b6:1b:15:7f:
d9:d4:2c:3d:88:c5:3e:dd:dc:8a:99:41:9f:d8:0c:
be:bb:e0:bc:4e:01:3b:60:3e:df:37:cc:5e:24:e0:
35:ac:de:14:98:e8:47:ae:45:4d:02:eb:cf:b8:a0:
91:52:56:f8:0c:b4:ad:7f:ec:a7:f8:16:c9:8d:ad:
00:9d:88:d2:92:ec:0c:ab:8c:25:2d:ee:97:61:14:
14:d9:f3:56:76:67:2e:35:9b:25:14:a9:c6:e6:31:
aa:51:de:2a:5d:68:0f:38:26:77:ca:9b:fc:c5:66:
50:3a:72:ca:0c:b0:8c:8e:c6:bc:10:e0:5f:1a:01:
85:b2:e1:1a:87:83:06:d0:25:9f:f0:1c:fe:55:42:
86:9d:e4:6d:2f:4c:3f:ce:54:aa:32:f2:c2:21:ad:
f6:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:E1:19:FE:65:4C:FD:29:CE:B0:40:67:1B:37:9E:A3:95:C3:19:9D
X509v3 Authority Key Identifier:
keyid:74:63:32:39:BA:A2:10:31:06:A6:26:0D:DF:D7:E7:8B:80:94:35:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGMyObqiEDEGpiYN39fni4CUNVw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8f35e8-ac2e-4e15-a0b4-b2ec6117ce9e/1/dGMyObqiEDEGpiYN39fni4CUNVw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8f35e8-ac2e-4e15-a0b4-b2ec6117ce9e/1/dGMyObqiEDEGpiYN39fni4CUNVw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:b1:91:21:42:0f:b0:fb:e2:d3:a7:61:8a:d5:f5:1e:c1:05:
b8:b5:7c:83:a1:24:8b:e6:42:1c:48:d0:32:f7:2a:06:34:15:
89:0a:e3:ec:91:e8:44:18:af:05:ee:cc:38:fd:73:90:fd:56:
79:63:fe:a3:05:a6:ac:5d:49:34:43:15:79:f8:a1:c7:3b:a6:
e2:b6:e7:f7:90:6a:fa:97:92:fa:90:b1:e6:c8:52:d5:a8:a6:
29:ee:95:45:f0:38:71:c7:b5:64:be:be:0f:66:25:bc:b7:fb:
a4:d3:6e:aa:12:16:86:fa:ff:6c:e8:b3:55:3d:27:1b:0a:4c:
3e:60:0c:a1:e7:9a:8a:88:f2:16:2e:82:fb:90:a7:5a:27:44:
5e:6b:63:37:9f:c7:24:17:fa:3e:57:e5:b7:ab:fe:0b:d2:64:
d0:ce:78:6f:88:06:b5:c2:8c:57:9e:4c:d9:97:f4:75:9a:98:
70:39:7f:6d:43:ee:56:bf:86:46:18:a8:f6:02:8b:3c:84:40:
f6:c8:36:be:82:17:ed:10:76:68:13:34:77:f2:80:4d:91:b4:
df:11:bb:00:0b:63:b9:f9:03:0d:39:36:44:ea:1b:61:b2:e3:
67:25:92:83:9e:f2:82:f8:c0:cb:e7:c5:5f:b4:49:c3:13:ab:
39:f7:d8:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:21:25 2025 by rpki-client