Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/dKqTEq9MPZzuCCyVQaa2WtpWmzw.mft
File: dKqTEq9MPZzuCCyVQaa2WtpWmzw.mft (raw, json)
Hash identifier: 1t9qQWYhqOFcxjcx9KJZrUo9bmx8rbA+d2GonXzizgc=
Subject key identifier: 93:15:82:D4:D9:2B:34:6B:14:B7:59:CB:23:98:45:73:C0:3C:E3:8C
Authority key identifier: 74:AA:93:12:AF:4C:3D:9C:EE:08:2C:95:41:A6:B6:5A:DA:56:9B:3C
Certificate issuer: /CN=74aa9312af4c3d9cee082c9541a6b65ada569b3c
Certificate serial: 019777F876FA51A9C60B9A01F1A06DD38D1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dKqTEq9MPZzuCCyVQaa2WtpWmzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/dKqTEq9MPZzuCCyVQaa2WtpWmzw.mft
Manifest number: 1116
Signing time: Mon 16 Jun 2025 09:01:01 +0000
Manifest this update: Mon 16 Jun 2025 09:01:01 +0000
Manifest next update: Tue 17 Jun 2025 09:01:01 +0000
Files and hashes: 1: HD_5B5PkdD6FjC7TkT0hg6RMpR4.roa (hash: edkKQyLMUB/s54h+sVCKB7yaqoodePtajczbUuzbRHE=)
2: dKqTEq9MPZzuCCyVQaa2WtpWmzw.crl (hash: 87e+IofNzbd76EbgI8eApRGdHy26m13u+SNinJwlL7M=)
3: f_wGT4AI_ECeedsmGEwBxGaUeL4.roa (hash: uaJcjwmpsOrQII9GbK1eXz3SSaKBT2wK73YD/T5U+Hc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/dKqTEq9MPZzuCCyVQaa2WtpWmzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/dKqTEq9MPZzuCCyVQaa2WtpWmzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/dKqTEq9MPZzuCCyVQaa2WtpWmzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:77:f8:76:fa:51:a9:c6:0b:9a:01:f1:a0:6d:d3:8d:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74aa9312af4c3d9cee082c9541a6b65ada569b3c
Validity
Not Before: Jun 16 09:01:01 2025 GMT
Not After : Jun 17 09:01:01 2025 GMT
Subject: CN=931582d4d92b346b14b759cb23984573c03ce38c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:54:6c:2f:18:e8:be:04:42:bb:bb:65:85:75:
44:24:dd:5b:c4:39:82:70:29:49:6d:62:24:e3:d3:
e0:ca:af:72:3a:f4:06:00:50:8f:90:61:db:21:a3:
22:20:4d:9a:1c:53:35:69:07:db:cc:85:e3:f4:0c:
f1:63:59:0a:27:b3:17:c6:11:8e:31:cf:33:1f:d2:
b1:d7:63:0e:3a:5a:1d:20:b7:be:94:93:ea:2e:95:
c7:0c:f2:59:8e:19:19:99:9b:02:42:38:84:bf:1c:
da:78:7b:77:74:b1:72:21:47:ae:29:90:27:09:c9:
a1:b4:6d:35:10:6d:da:31:35:0f:73:52:18:7a:2c:
e8:76:ae:8d:75:ab:95:62:36:f2:b0:81:a2:bd:77:
08:9f:2f:01:aa:ac:ed:1c:16:46:72:15:4e:99:1a:
32:ba:f0:6a:dc:15:2c:28:5d:68:ce:63:df:df:3a:
c1:d9:9a:2f:aa:c1:ca:90:44:d1:d3:9f:d7:fa:73:
54:ac:9a:e4:90:71:d5:50:b5:14:44:e0:7f:18:2f:
ec:72:56:63:41:a7:cf:9b:32:2a:33:aa:80:8d:27:
a7:16:04:20:83:34:a1:5e:2b:50:a4:47:5d:b6:0f:
e3:96:25:34:0a:ee:9b:6b:2e:a8:a2:e9:de:9e:b7:
23:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:15:82:D4:D9:2B:34:6B:14:B7:59:CB:23:98:45:73:C0:3C:E3:8C
X509v3 Authority Key Identifier:
keyid:74:AA:93:12:AF:4C:3D:9C:EE:08:2C:95:41:A6:B6:5A:DA:56:9B:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dKqTEq9MPZzuCCyVQaa2WtpWmzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/dKqTEq9MPZzuCCyVQaa2WtpWmzw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/dKqTEq9MPZzuCCyVQaa2WtpWmzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:db:61:0d:32:9d:63:42:59:ef:8e:5f:43:01:10:4d:a7:45:
3b:9c:00:79:b9:23:40:79:10:2b:f5:26:53:1b:30:be:46:42:
44:9e:03:f3:d4:ad:79:41:72:c2:92:31:0f:d9:0d:61:a4:69:
33:c5:c0:03:28:75:a6:c9:f7:9a:51:64:31:d6:07:49:af:0f:
ed:64:a6:19:34:9f:1c:89:aa:d1:a4:1f:48:d9:97:e3:c2:23:
de:42:16:f5:c7:f9:95:f5:f8:08:a2:02:6b:19:f1:05:34:dd:
47:7d:66:11:04:df:46:a1:e4:63:2b:5d:d3:58:e8:0d:af:59:
3b:4d:d8:10:b9:b6:9a:b5:ad:2a:5c:23:a4:84:5c:ae:4c:31:
6d:89:2a:ec:0e:ce:e4:b6:dd:4e:ca:61:15:f3:9b:53:c8:c9:
06:13:c8:ed:38:94:4b:84:34:af:16:57:5e:fd:e5:9a:6e:f3:
b8:80:68:b8:86:0b:3e:38:65:26:6e:76:1b:3f:93:d9:cf:03:
19:a5:83:50:09:a9:5e:d2:74:51:6c:c0:f8:b5:ad:9f:fb:3d:
36:af:71:b6:8e:7d:29:c8:d6:a4:7a:e1:26:49:74:72:8e:18:
5d:fa:30:03:80:ac:42:16:32:66:e5:4e:54:61:96:7a:a0:a4:
6f:9c:31:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 12:31:23 2025 by rpki-client