Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/2898e6-0d79-454e-ab54-40be0c463b90/1/dHWiyViPxpXSdUKD3NPRI9H3eBE.mft
File: dHWiyViPxpXSdUKD3NPRI9H3eBE.mft (raw, json)
Hash identifier: QI7YbTRRp0ojdUooxNrVq330zmiy4NAaKLi0qicVk8U=
Subject key identifier: 03:1A:DA:8A:F6:79:28:14:E8:ED:62:C0:AB:0F:7C:8C:33:BC:EB:74
Authority key identifier: 74:75:A2:C9:58:8F:C6:95:D2:75:42:83:DC:D3:D1:23:D1:F7:78:11
Certificate issuer: /CN=7475a2c9588fc695d2754283dcd3d123d1f77811
Certificate serial: 01976E1945935268E18AE2133029C0A9F8DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dHWiyViPxpXSdUKD3NPRI9H3eBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/2898e6-0d79-454e-ab54-40be0c463b90/1/dHWiyViPxpXSdUKD3NPRI9H3eBE.mft
Manifest number: 1590
Signing time: Sat 14 Jun 2025 11:00:39 +0000
Manifest this update: Sat 14 Jun 2025 11:00:39 +0000
Manifest next update: Sun 15 Jun 2025 11:00:39 +0000
Files and hashes: 1: byfAz36QPO1zWRGDAvBxGCJUgUc.roa (hash: cj5k9JTRqENUIcOxIhQN0l2jcQzpbWQBrAEBDWIt2vI=)
2: dHWiyViPxpXSdUKD3NPRI9H3eBE.crl (hash: xq6kviH700tEgOqcZHIN90V2JBJAFgKscA4owDbpC3o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/2898e6-0d79-454e-ab54-40be0c463b90/1/dHWiyViPxpXSdUKD3NPRI9H3eBE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/2898e6-0d79-454e-ab54-40be0c463b90/1/dHWiyViPxpXSdUKD3NPRI9H3eBE.mft
rsync://rpki.ripe.net/repository/DEFAULT/dHWiyViPxpXSdUKD3NPRI9H3eBE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:19:45:93:52:68:e1:8a:e2:13:30:29:c0:a9:f8:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7475a2c9588fc695d2754283dcd3d123d1f77811
Validity
Not Before: Jun 14 11:00:39 2025 GMT
Not After : Jun 15 11:00:39 2025 GMT
Subject: CN=031ada8af6792814e8ed62c0ab0f7c8c33bceb74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:6a:dd:96:25:ec:aa:94:e2:c1:99:0f:86:5b:
1e:5e:8d:d1:fb:60:36:13:66:54:17:be:91:b8:d6:
d8:d1:7e:88:61:9c:0b:ef:bf:fb:60:63:25:96:23:
b1:e1:d0:e7:1b:10:e9:56:3c:da:c8:fe:e4:ba:b4:
26:23:aa:db:93:68:5d:ba:84:3b:7e:b7:ca:4c:d2:
50:e9:d8:09:12:c5:5d:05:b4:c1:56:73:a6:b6:df:
bc:56:34:63:04:f1:89:37:d5:1a:b6:32:51:9a:63:
22:a4:c8:02:10:9b:93:40:44:a6:fa:7d:92:7a:17:
1f:25:b2:f0:8f:ee:6f:00:75:f0:ae:f5:ca:7b:63:
66:bd:dc:86:fb:1f:d3:b1:ff:bd:0a:53:f8:11:ea:
e1:32:e4:16:19:46:50:73:5d:7a:35:03:81:a8:70:
48:aa:a0:e0:2a:82:79:c7:6c:8e:4f:a0:70:16:ec:
dc:f0:68:d3:b0:75:7c:9f:4a:f2:18:58:49:e7:04:
4e:35:45:f7:91:75:87:09:1d:b2:cd:59:1d:30:2c:
c8:65:ef:9a:79:18:91:b8:35:94:42:d9:de:41:6a:
4f:9d:20:ba:ce:36:13:2e:cd:6f:ff:62:fe:c7:fd:
ab:4c:18:43:96:00:fb:c4:b7:73:96:a6:37:a9:9e:
bc:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:1A:DA:8A:F6:79:28:14:E8:ED:62:C0:AB:0F:7C:8C:33:BC:EB:74
X509v3 Authority Key Identifier:
keyid:74:75:A2:C9:58:8F:C6:95:D2:75:42:83:DC:D3:D1:23:D1:F7:78:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dHWiyViPxpXSdUKD3NPRI9H3eBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2898e6-0d79-454e-ab54-40be0c463b90/1/dHWiyViPxpXSdUKD3NPRI9H3eBE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2898e6-0d79-454e-ab54-40be0c463b90/1/dHWiyViPxpXSdUKD3NPRI9H3eBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:e6:c5:c2:52:7f:e9:8e:2d:e9:78:ae:6a:20:62:2a:28:bd:
15:7f:d1:f0:88:ac:c5:f4:d3:da:a1:8f:4b:03:e4:74:f7:0f:
dd:76:bd:bd:8e:ef:36:4c:8d:40:e3:f3:a2:f6:de:f4:60:23:
99:6c:fa:4f:21:68:4e:92:73:cc:f2:23:56:e7:c6:6c:e4:3f:
3d:96:e8:12:a8:5e:24:47:7e:34:d2:4b:3d:9c:3c:7b:ce:30:
e7:b1:fc:08:50:f8:a8:25:c5:67:8b:07:59:e4:b5:cf:ed:bb:
2d:d7:04:42:43:88:8d:3f:a5:b0:9a:51:ce:04:b0:ba:71:de:
6b:2e:f0:06:f9:93:7e:57:a2:23:ba:b0:8b:b6:72:b3:37:54:
e9:af:14:8e:b4:c6:10:87:11:83:4d:c5:2f:ec:cd:fb:39:18:
54:94:82:96:db:07:e4:57:e5:84:74:f2:b0:a7:41:5d:9d:99:
ba:23:4e:d7:7a:a7:c9:e0:97:2b:62:8e:f1:c7:69:e4:58:b8:
87:e9:8b:5e:ff:3d:cb:fb:87:41:fc:22:81:32:1a:60:89:00:
fb:d5:7a:51:1d:0b:29:67:f9:fb:6e:98:8d:b6:c4:7d:c4:84:
83:d6:de:9b:7e:66:d3:73:e7:b9:f2:48:9b:67:ff:0a:4b:e0:
c2:91:dd:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 20:12:03 2025 by rpki-client