Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/4cca48-3189-4491-aede-d3d30ebc36ac/1/dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.mft
File: dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.mft (raw, json)
Hash identifier: b8l+ZONn8tKZGhZNbHpVe5ucdmljzp594VRgoNSqXaE=
Subject key identifier: 62:97:CC:15:A2:BE:D3:4D:90:DC:88:05:80:4F:05:AF:7A:30:5C:F5
Authority key identifier: 75:18:C2:27:3A:D7:43:64:64:9B:CB:2E:2D:34:FB:70:7F:5D:5B:94
Certificate issuer: /CN=7518c2273ad74364649bcb2e2d34fb707f5d5b94
Certificate serial: 01977B30B61E5C492FF60418393E24FD7531
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/4cca48-3189-4491-aede-d3d30ebc36ac/1/dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.mft
Manifest number: 03AA
Signing time: Tue 17 Jun 2025 00:01:19 +0000
Manifest this update: Tue 17 Jun 2025 00:01:19 +0000
Manifest next update: Wed 18 Jun 2025 00:01:19 +0000
Files and hashes: 1: dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.crl (hash: Pw8iXMMuZ3C6wDLexXCDfFaE5OfKKuBPT9gPSdaflSo=)
2: lEeX1Eg0Z-W1kOpICD-OcFxqe18.roa (hash: oHYZvay6jraEH9M8mxk8k8IOPDuHNAZIsTWqM0koag4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/4cca48-3189-4491-aede-d3d30ebc36ac/1/dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/4cca48-3189-4491-aede-d3d30ebc36ac/1/dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 00:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7b:30:b6:1e:5c:49:2f:f6:04:18:39:3e:24:fd:75:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7518c2273ad74364649bcb2e2d34fb707f5d5b94
Validity
Not Before: Jun 17 00:01:19 2025 GMT
Not After : Jun 18 00:01:19 2025 GMT
Subject: CN=6297cc15a2bed34d90dc8805804f05af7a305cf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:38:f3:a9:16:e3:7a:d9:3d:b3:6a:bc:58:29:
e2:1c:f6:fc:82:b0:8f:f9:2f:16:41:0c:e5:88:31:
62:54:a4:1d:c1:92:09:51:3c:a8:cf:66:65:67:94:
72:6e:c6:fd:1c:ba:e1:26:45:3f:72:75:cf:1c:e6:
26:8f:b1:72:49:06:e5:39:ed:a3:7b:28:de:b9:0b:
3e:c3:dc:c8:1c:7e:c7:71:8d:4f:54:5d:64:ad:02:
12:94:35:19:1b:6b:ca:bf:ea:a0:b5:2c:ed:31:42:
07:16:ea:91:1a:cc:5a:38:a0:b9:19:6b:8d:71:9b:
90:18:b9:35:f4:03:70:79:6d:a9:31:c4:2f:e4:45:
f8:c3:95:a2:59:76:22:0f:e4:31:8b:bd:90:8a:49:
b0:5b:79:1a:e0:14:8d:70:d3:c5:b1:cc:5e:92:3c:
2c:c0:b2:f4:d1:90:62:3b:47:4e:70:6b:1e:39:78:
88:fd:7d:fd:a0:c6:4d:dc:d7:7a:a2:54:30:5a:da:
99:c8:02:98:69:31:35:c4:6d:0a:68:37:4a:d2:10:
eb:7a:fb:69:1c:b7:cf:c7:4e:14:b6:91:bc:dc:f9:
37:d7:7b:95:2e:20:da:5e:88:93:db:13:63:1f:c7:
61:af:51:2f:9a:64:2b:f5:4b:f8:e7:75:de:a8:9c:
f6:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:97:CC:15:A2:BE:D3:4D:90:DC:88:05:80:4F:05:AF:7A:30:5C:F5
X509v3 Authority Key Identifier:
keyid:75:18:C2:27:3A:D7:43:64:64:9B:CB:2E:2D:34:FB:70:7F:5D:5B:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/4cca48-3189-4491-aede-d3d30ebc36ac/1/dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/4cca48-3189-4491-aede-d3d30ebc36ac/1/dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:be:a3:15:1b:99:c0:d0:27:39:b7:9f:c7:f2:34:4c:9a:af:
b2:39:17:49:3b:cf:21:9c:10:d3:41:1b:21:9a:9b:0f:f5:3f:
be:81:0a:62:57:d4:45:fe:18:52:cd:33:0d:17:b2:fe:cf:58:
3b:ec:25:81:e6:a1:f7:36:8a:d0:76:62:c3:97:86:fd:b7:db:
bb:55:d6:c3:f2:e1:b2:d3:58:cd:26:95:a2:b3:39:48:f2:fd:
3d:98:83:12:96:e5:49:c7:d7:94:85:83:fd:84:eb:9c:25:dc:
c9:23:9f:87:ce:5d:86:27:14:49:f4:9c:2d:30:ab:dd:00:21:
15:dd:0d:f4:32:ae:22:33:26:93:9f:d4:8e:52:da:b4:0c:c9:
15:52:19:0c:0b:e8:ac:fc:44:67:47:46:67:e5:35:9f:94:2f:
bd:27:db:86:55:71:ac:e5:72:5c:2c:3d:06:10:ed:34:5f:2b:
ad:6d:45:3c:aa:8c:52:89:99:be:24:67:c4:3b:0a:8b:97:5d:
f0:2b:48:db:2f:cb:06:9b:fe:41:14:05:7e:d3:b9:73:79:d3:
5d:75:59:19:fa:2a:aa:31:18:ba:af:b0:ea:ce:16:27:cb:a8:
35:44:e2:bd:b8:0f:8e:3b:5a:ae:27:fe:dc:ff:7e:4d:4e:67:
37:5d:20:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 11:10:33 2025 by rpki-client