Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/9cd1d7-34e7-47c1-8484-c191410dc889/1/dNnAc7T3BpfiF1walV9sqMOmJGs.mft
File: dNnAc7T3BpfiF1walV9sqMOmJGs.mft (raw, json)
Hash identifier: hqIGgIDJk+B9Gq7Tj49lmU/1W6Y2ab8LkpTvOQTxD/c=
Subject key identifier: 8C:66:20:DE:15:D8:8B:2F:C2:10:3B:41:E3:BC:6E:78:33:13:D6:9E
Authority key identifier: 74:D9:C0:73:B4:F7:06:97:E2:17:5C:1A:95:5F:6C:A8:C3:A6:24:6B
Certificate issuer: /CN=74d9c073b4f70697e2175c1a955f6ca8c3a6246b
Certificate serial: 01976D06635AD04BFBC66460B5BDAFE6AF73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dNnAc7T3BpfiF1walV9sqMOmJGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/9cd1d7-34e7-47c1-8484-c191410dc889/1/dNnAc7T3BpfiF1walV9sqMOmJGs.mft
Manifest number: 0EFA
Signing time: Sat 14 Jun 2025 06:00:24 +0000
Manifest this update: Sat 14 Jun 2025 06:00:24 +0000
Manifest next update: Sun 15 Jun 2025 06:00:24 +0000
Files and hashes: 1: Jr22ey1N2NwAUwk5_MnoxmPuMXY.roa (hash: 35l8sKB3wVTvVWmpyHsbhQyl9RJrjRSgJU8YSXiR6gw=)
2: dNnAc7T3BpfiF1walV9sqMOmJGs.crl (hash: e9s1xYBgGP824rNR/qkmvjvaur1jnYQuopCWTgBUDCA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/9cd1d7-34e7-47c1-8484-c191410dc889/1/dNnAc7T3BpfiF1walV9sqMOmJGs.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/9cd1d7-34e7-47c1-8484-c191410dc889/1/dNnAc7T3BpfiF1walV9sqMOmJGs.mft
rsync://rpki.ripe.net/repository/DEFAULT/dNnAc7T3BpfiF1walV9sqMOmJGs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:06:63:5a:d0:4b:fb:c6:64:60:b5:bd:af:e6:af:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74d9c073b4f70697e2175c1a955f6ca8c3a6246b
Validity
Not Before: Jun 14 06:00:24 2025 GMT
Not After : Jun 15 06:00:24 2025 GMT
Subject: CN=8c6620de15d88b2fc2103b41e3bc6e783313d69e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:c4:c1:95:88:8e:55:a3:67:7a:c8:cd:3a:63:
2b:31:d5:65:a0:4d:2e:26:0f:d6:95:8f:24:df:d3:
a3:30:73:6b:88:8d:bb:f0:bc:0b:18:1b:af:46:06:
fb:09:93:7a:77:10:fd:d0:f5:ac:18:a2:4a:05:14:
30:5b:46:95:03:f3:26:a5:92:cf:62:2c:ff:f0:28:
ea:74:18:87:4e:5e:22:f2:6d:16:46:90:75:a3:eb:
b6:93:c7:56:cf:87:11:79:4b:9b:0e:21:eb:d6:b3:
55:58:1c:5a:24:18:93:43:c7:0b:56:ae:46:c8:11:
7c:64:f1:45:da:97:22:b1:6f:96:ab:be:aa:01:28:
4b:cc:e4:f0:d2:07:10:eb:f3:a0:83:48:b2:85:63:
bd:3a:d6:33:a6:f4:da:11:cf:21:c1:2f:f6:d8:7c:
ac:71:c7:5c:90:ad:15:47:25:b5:dd:59:d9:77:54:
6e:48:14:7d:cc:41:d2:c4:cb:b7:b5:1d:2a:e8:4d:
62:ee:5e:1a:68:17:27:cd:03:37:34:4c:b1:fe:d0:
72:5b:87:c8:85:71:72:23:78:e7:33:c7:4a:f8:3f:
99:5a:70:2e:a5:8f:5d:81:53:1f:f2:af:57:90:d2:
d3:aa:ca:b2:1d:57:37:5b:36:57:0a:e2:86:f9:85:
3e:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:66:20:DE:15:D8:8B:2F:C2:10:3B:41:E3:BC:6E:78:33:13:D6:9E
X509v3 Authority Key Identifier:
keyid:74:D9:C0:73:B4:F7:06:97:E2:17:5C:1A:95:5F:6C:A8:C3:A6:24:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dNnAc7T3BpfiF1walV9sqMOmJGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/9cd1d7-34e7-47c1-8484-c191410dc889/1/dNnAc7T3BpfiF1walV9sqMOmJGs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/9cd1d7-34e7-47c1-8484-c191410dc889/1/dNnAc7T3BpfiF1walV9sqMOmJGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:07:49:ad:42:2a:be:90:87:2f:a3:5c:6d:b6:24:6a:24:39:
f1:88:ef:33:b1:2a:9d:21:46:d4:fc:df:ff:55:4e:0d:c3:90:
e0:5f:2d:2c:06:c7:f3:8c:c5:70:27:34:c2:b9:fa:bc:87:12:
bb:5e:5d:ae:f9:8a:2f:d5:bd:6e:de:58:20:c4:33:ce:88:7c:
d7:5a:00:3a:37:05:49:b1:e7:44:e4:9b:e3:dc:7a:20:22:a0:
b7:af:f5:b9:1d:5f:e8:7c:9c:5b:fb:67:54:26:31:f1:b0:9b:
33:af:de:47:63:d9:81:bf:f6:2e:19:73:c4:84:de:e5:b0:bf:
07:6d:76:00:07:2b:ae:d2:3a:17:7d:7b:d0:85:f0:6c:9c:2a:
87:c3:08:b2:ef:73:02:36:f5:a9:b6:69:96:df:fe:c3:35:14:
11:e6:4d:1c:48:fa:5a:74:b4:20:2a:c9:18:28:f7:1c:da:05:
02:df:5d:98:3c:f6:55:74:1c:8b:81:34:43:94:15:8e:08:ef:
2d:5d:2d:4a:2f:76:b4:73:e6:d2:c0:a9:f2:f4:6e:af:57:eb:
f9:60:93:4c:22:4a:d3:28:90:82:31:a8:93:3f:6d:60:f8:66:
d4:03:39:e2:2f:44:5a:68:9d:d5:97:dd:e4:b6:81:b2:14:29:
11:e7:5c:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 13:01:00 2025 by rpki-client