Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/a821df-6b49-4489-8a77-d1246cc2c34e/1/DgE0-vunLgYznK3FXV8TuuSCsS0.mft
File: DgE0-vunLgYznK3FXV8TuuSCsS0.mft (raw, json)
Hash identifier: tyxgCNLVe2JXwqCl9spCejiKV18S03+BHWrzJb/vf8Q=
Subject key identifier: BD:07:58:11:85:D2:EC:3E:B6:EA:BF:D1:7A:60:47:05:97:63:35:86
Authority key identifier: 0E:01:34:FA:FB:A7:2E:06:33:9C:AD:C5:5D:5F:13:BA:E4:82:B1:2D
Certificate issuer: /CN=0e0134fafba72e06339cadc55d5f13bae482b12d
Certificate serial: 0197B6D76A40612A408ADF6E66A1EA58868B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DgE0-vunLgYznK3FXV8TuuSCsS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/a821df-6b49-4489-8a77-d1246cc2c34e/1/DgE0-vunLgYznK3FXV8TuuSCsS0.mft
Manifest number: 15B7
Signing time: Sat 28 Jun 2025 14:01:00 +0000
Manifest this update: Sat 28 Jun 2025 14:01:00 +0000
Manifest next update: Sun 29 Jun 2025 14:01:00 +0000
Files and hashes: 1: DgE0-vunLgYznK3FXV8TuuSCsS0.crl (hash: a99jE+c8s0QtI2bw73jn633hTdnBXEd3tODtjhWvjYY=)
2: PGpk2qjaEHATBO5WJqpwQvvo-t4.roa (hash: sxUY6k6RZnsEb5wstWgn4/zoH8gCs5vVrsT2wup6jP0=)
3: flUmY1UuhQ4umekHZTdOQbHf_3c.roa (hash: +LH2doQCe/pHrWkfv/54Ur54xmP0ZJEt0aBXtrY/eUQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/a821df-6b49-4489-8a77-d1246cc2c34e/1/DgE0-vunLgYznK3FXV8TuuSCsS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/a821df-6b49-4489-8a77-d1246cc2c34e/1/DgE0-vunLgYznK3FXV8TuuSCsS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/DgE0-vunLgYznK3FXV8TuuSCsS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:6a:40:61:2a:40:8a:df:6e:66:a1:ea:58:86:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e0134fafba72e06339cadc55d5f13bae482b12d
Validity
Not Before: Jun 28 14:01:00 2025 GMT
Not After : Jun 29 14:01:00 2025 GMT
Subject: CN=bd07581185d2ec3eb6eabfd17a60470597633586
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:4e:a7:ce:73:fe:be:c0:a2:14:f7:70:96:64:
ec:75:93:29:02:f3:4a:ef:05:50:10:2d:dd:35:ad:
73:36:08:29:10:f5:c7:ae:ec:92:34:49:3a:81:fa:
5c:36:b6:88:0f:df:d1:83:26:29:d0:b4:a6:cb:75:
d2:14:8a:c0:38:73:bb:ef:f9:4a:7c:f6:af:d9:ef:
ff:7c:11:a4:5f:8a:fa:95:43:89:44:1d:66:77:73:
77:1b:45:8c:43:10:21:41:c1:94:00:a7:68:3d:11:
52:fd:0a:4b:b7:8a:09:75:d7:58:4c:03:24:8b:6b:
70:4f:78:69:92:24:35:6c:e1:45:bb:71:39:33:62:
da:86:cb:61:48:e6:b0:7a:3b:68:71:d1:5c:52:b2:
61:81:03:a0:dc:e4:9b:cc:26:56:bf:a4:85:f7:cb:
8f:40:7b:a1:68:86:b6:be:16:08:be:e0:34:e4:3c:
8a:20:5c:db:57:44:48:a9:56:fc:74:4c:29:94:37:
5d:e6:ef:71:56:21:9d:71:8d:06:76:9a:fd:d4:8d:
d3:75:c5:1c:93:39:14:c6:ce:af:98:ae:f5:5d:63:
59:be:1d:36:bb:a9:2f:3d:3c:69:47:68:7e:36:f3:
19:dd:67:49:be:46:7c:99:db:fa:26:fe:b0:42:af:
7d:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:07:58:11:85:D2:EC:3E:B6:EA:BF:D1:7A:60:47:05:97:63:35:86
X509v3 Authority Key Identifier:
keyid:0E:01:34:FA:FB:A7:2E:06:33:9C:AD:C5:5D:5F:13:BA:E4:82:B1:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DgE0-vunLgYznK3FXV8TuuSCsS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/a821df-6b49-4489-8a77-d1246cc2c34e/1/DgE0-vunLgYznK3FXV8TuuSCsS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/a821df-6b49-4489-8a77-d1246cc2c34e/1/DgE0-vunLgYznK3FXV8TuuSCsS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:45:94:89:16:72:46:e5:63:84:2e:d2:d0:c6:99:f5:35:b2:
d0:34:c1:37:2c:1a:38:5a:65:4b:97:d2:4e:88:b1:96:25:fc:
3e:6d:da:6e:16:5d:69:a1:ff:13:bf:df:7e:56:6a:78:5e:48:
d5:57:f6:4c:83:e5:ad:71:c4:22:0c:5f:15:e5:df:84:59:19:
2c:0d:40:dc:52:26:5f:8c:5b:c4:bb:70:20:0b:33:08:ad:e5:
79:58:d5:e1:3b:8f:56:3b:77:bc:3e:76:14:cf:c9:4e:14:08:
24:80:a9:d2:04:23:74:34:f3:49:f0:5e:9a:d6:09:72:9d:85:
43:19:e4:03:99:38:2c:39:8d:4f:8e:ad:f8:c3:53:af:a5:81:
5d:f2:8a:ae:72:a6:02:ae:42:d3:65:f2:c4:59:94:90:37:b5:
71:69:2a:d6:b2:ba:58:a2:e7:b0:ad:dc:33:be:1b:c0:28:67:
b1:6a:ec:a5:81:f3:cb:a5:9d:67:cb:ed:7c:5a:7e:9b:87:b2:
e8:70:70:04:6c:0b:91:64:84:6b:e2:78:5c:45:39:fc:5b:90:
f1:30:3c:0a:f0:e7:07:2f:5c:12:db:81:5e:e0:9c:34:4d:80:
82:9a:e4:42:e3:d5:a8:74:7c:d1:a4:9a:3d:a9:bf:2d:d1:b6:
b3:38:b9:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:34:46 2025 by rpki-client