Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/70f8bb-9a37-4f3e-a581-3ea8194fb446/1/dPEFnCc8UO3PPc7fxYABUuyR26I.mft
File: dPEFnCc8UO3PPc7fxYABUuyR26I.mft (raw, json)
Hash identifier: eyfCVhvJSQwbGIb0bkObpi5zgIWyY6rpOkinIFs+7b4=
Subject key identifier: AA:CC:85:72:6A:8D:67:0F:DD:5A:F3:EA:DA:75:F7:33:67:E3:A1:C3
Authority key identifier: 74:F1:05:9C:27:3C:50:ED:CF:3D:CE:DF:C5:80:01:52:EC:91:DB:A2
Certificate issuer: /CN=74f1059c273c50edcf3dcedfc5800152ec91dba2
Certificate serial: 0197B7EA65A9BF7D5A9C42DD228BE568FF2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dPEFnCc8UO3PPc7fxYABUuyR26I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/70f8bb-9a37-4f3e-a581-3ea8194fb446/1/dPEFnCc8UO3PPc7fxYABUuyR26I.mft
Manifest number: 15B4
Signing time: Sat 28 Jun 2025 19:01:21 +0000
Manifest this update: Sat 28 Jun 2025 19:01:21 +0000
Manifest next update: Sun 29 Jun 2025 19:01:21 +0000
Files and hashes: 1: _2TO4dSOjfvwTixfDBf-WBuIl0o.roa (hash: RPjvUg/mlm5LB8eSfOAwiB9MoMFdNTXRZHFg7kwXImU=)
2: dPEFnCc8UO3PPc7fxYABUuyR26I.crl (hash: S+vxWgcMB/ImxZVjhSd3jXGus0WbKqk9Tk0GLB+w1Ns=)
3: f516EGaO9yNnpKCtINgDdW37z6Y.roa (hash: ED6BLlxCP1AdH6cMJc87FGQDnI7Gyi9C1L6MTbKzt54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/70f8bb-9a37-4f3e-a581-3ea8194fb446/1/dPEFnCc8UO3PPc7fxYABUuyR26I.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/70f8bb-9a37-4f3e-a581-3ea8194fb446/1/dPEFnCc8UO3PPc7fxYABUuyR26I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dPEFnCc8UO3PPc7fxYABUuyR26I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:65:a9:bf:7d:5a:9c:42:dd:22:8b:e5:68:ff:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74f1059c273c50edcf3dcedfc5800152ec91dba2
Validity
Not Before: Jun 28 19:01:21 2025 GMT
Not After : Jun 29 19:01:21 2025 GMT
Subject: CN=aacc85726a8d670fdd5af3eada75f73367e3a1c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:81:fb:50:14:b8:7e:16:ae:70:bb:3e:1b:fe:
7f:b3:ad:8a:ba:59:7d:44:08:5e:c2:da:07:7f:e4:
80:86:4d:9b:85:8a:6c:f4:f0:5c:a0:11:1e:f6:c4:
25:f2:df:fb:2a:ae:2b:72:4c:d2:7a:08:3d:e4:95:
9a:bb:8a:5b:c7:52:f7:d2:65:40:36:36:49:71:4f:
af:4e:eb:40:7d:d1:1f:e2:06:62:53:dd:fc:9f:bc:
f1:f9:82:43:33:7e:ce:b6:47:22:a0:65:fb:bf:d6:
c0:c4:e4:3a:c7:45:c7:21:1e:3b:bf:29:cc:7e:3b:
ef:8d:0c:e6:a0:de:48:67:bb:7e:6a:d7:b9:2f:80:
d4:28:32:01:b8:cc:dd:d6:b5:87:d1:32:1a:fa:2c:
ea:c7:77:ad:84:70:3b:5d:c4:83:06:c0:ad:bb:5c:
a5:97:44:88:ab:f6:fa:47:88:dd:3b:1c:2e:ec:fa:
27:86:b6:80:6a:84:39:13:2a:25:f0:1b:1c:5e:8c:
0d:73:bf:a3:f7:3e:9c:51:cf:08:4b:1a:5f:32:e1:
68:41:fc:f8:53:e9:2f:76:30:11:d1:12:f3:5e:38:
49:ed:70:ad:7c:32:a1:b3:12:55:f7:78:30:d3:35:
d3:09:c8:e0:e7:c1:ea:f2:95:c6:3c:e5:a4:99:27:
4d:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:CC:85:72:6A:8D:67:0F:DD:5A:F3:EA:DA:75:F7:33:67:E3:A1:C3
X509v3 Authority Key Identifier:
keyid:74:F1:05:9C:27:3C:50:ED:CF:3D:CE:DF:C5:80:01:52:EC:91:DB:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dPEFnCc8UO3PPc7fxYABUuyR26I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/70f8bb-9a37-4f3e-a581-3ea8194fb446/1/dPEFnCc8UO3PPc7fxYABUuyR26I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/70f8bb-9a37-4f3e-a581-3ea8194fb446/1/dPEFnCc8UO3PPc7fxYABUuyR26I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:e9:ee:13:b0:f5:65:3c:c6:4d:ac:82:e4:ad:da:56:97:14:
7c:80:e1:8d:d9:e1:4d:40:ad:09:0b:21:f5:2c:ce:af:25:cb:
74:5b:f3:c9:7d:93:46:2e:a6:46:05:06:03:4c:66:27:60:f0:
06:b4:18:8d:e3:c2:2c:76:d5:24:f5:7d:52:e7:e4:a2:23:cb:
fe:52:7c:eb:ab:16:2d:48:58:7e:0b:65:8d:5a:6f:4c:a3:76:
ea:03:44:c5:6f:e8:15:7e:71:42:79:c7:c4:55:8c:f4:ca:92:
d5:c1:7c:27:24:e0:d0:b1:19:43:6a:0a:23:ab:fc:11:39:0c:
0b:18:11:ad:17:24:74:8d:5d:8c:d6:a7:9e:b4:3e:21:b6:b2:
de:90:28:e0:ac:4a:58:b5:b8:8b:af:e2:72:d7:20:03:81:f3:
10:67:ed:a1:2d:50:d7:1e:1a:37:4b:0c:f0:2d:ff:78:58:40:
1d:8c:e4:bf:68:bd:11:0c:1f:a3:d4:31:f8:9a:55:22:28:d1:
02:fb:39:53:d3:84:ed:28:fb:53:5d:70:c0:7f:68:40:58:0f:
f6:25:63:cb:37:36:c6:3b:4f:5a:f1:cd:7b:a7:bf:e1:db:ad:
22:1a:a7:ab:3a:5a:66:92:97:0d:17:5c:2d:47:13:c5:f8:14:
c7:a3:e1:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:12:11 2025 by rpki-client