Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/11cdf2-ca30-4718-ac80-f196fd0a497b/1/adYEhXHYfqvEvtGnzf-DWH-4lmQ.mft
File: adYEhXHYfqvEvtGnzf-DWH-4lmQ.mft (raw, json)
Hash identifier: 0eWYWAG4xOZBnlozvgBArd+a3o46OeZovm2o9q4aV4w=
Subject key identifier: 0D:A3:E6:BB:BC:82:7D:1E:03:CC:B9:A8:27:05:65:56:B2:3A:62:82
Authority key identifier: 69:D6:04:85:71:D8:7E:AB:C4:BE:D1:A7:CD:FF:83:58:7F:B8:96:64
Certificate issuer: /CN=69d6048571d87eabc4bed1a7cdff83587fb89664
Certificate serial: 0197699785FE255B4E25BA42FF78291D5145
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/adYEhXHYfqvEvtGnzf-DWH-4lmQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/11cdf2-ca30-4718-ac80-f196fd0a497b/1/adYEhXHYfqvEvtGnzf-DWH-4lmQ.mft
Manifest number: 0ECC
Signing time: Fri 13 Jun 2025 14:00:27 +0000
Manifest this update: Fri 13 Jun 2025 14:00:27 +0000
Manifest next update: Sat 14 Jun 2025 14:00:27 +0000
Files and hashes: 1: OTybeQSqUNtNYhW7lIqMu8Xbs9U.roa (hash: qhQfPgHQL0RGn7gt2AnYjMV/XyhTZwosQOVt3JjZawg=)
2: adYEhXHYfqvEvtGnzf-DWH-4lmQ.crl (hash: VsNlwtyxRb1o+4LtBNeglz0nafTTo8v4ParDaavT0T0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/11cdf2-ca30-4718-ac80-f196fd0a497b/1/adYEhXHYfqvEvtGnzf-DWH-4lmQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/11cdf2-ca30-4718-ac80-f196fd0a497b/1/adYEhXHYfqvEvtGnzf-DWH-4lmQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/adYEhXHYfqvEvtGnzf-DWH-4lmQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:97:85:fe:25:5b:4e:25:ba:42:ff:78:29:1d:51:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69d6048571d87eabc4bed1a7cdff83587fb89664
Validity
Not Before: Jun 13 14:00:27 2025 GMT
Not After : Jun 14 14:00:27 2025 GMT
Subject: CN=0da3e6bbbc827d1e03ccb9a827056556b23a6282
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:fe:16:93:cf:a4:ab:c3:4d:6d:bc:50:10:cb:
43:54:bb:03:3f:0f:fd:e3:7d:43:70:c8:fd:77:32:
6d:82:9e:35:7e:cd:f2:e8:fb:53:78:d3:98:f2:d9:
90:77:de:8b:20:d7:90:d3:89:7a:cf:55:a6:6c:a1:
d8:6f:67:23:45:9e:07:8c:bb:54:22:52:07:03:e6:
32:c8:50:f5:ec:54:6d:56:2f:31:95:98:9f:3e:42:
36:1f:57:c3:e1:68:fc:bc:99:b2:c2:60:3e:a8:1b:
41:4d:4d:ae:e0:1d:b9:05:da:f6:c0:c7:d2:b3:bc:
81:90:35:76:3c:2e:35:d6:22:80:f9:4f:7e:2e:40:
a6:a5:20:69:fc:35:2e:75:4a:9b:eb:6a:b8:22:13:
3f:e3:0c:4e:85:35:6c:04:61:9f:09:f8:fd:e4:4d:
a3:37:5c:7c:52:79:1b:56:7c:90:d7:84:59:9a:76:
ae:4b:5e:fc:7e:35:97:d6:d5:c8:95:cf:40:c3:58:
71:2c:30:a8:1a:2e:59:15:de:fd:46:3a:94:b1:cb:
7b:7d:21:eb:c0:49:50:a0:ae:a1:24:42:7c:35:3e:
53:e7:7d:bb:ea:f0:b2:f2:a0:8b:b5:07:7f:9c:da:
7f:49:e2:25:2e:c2:a6:1c:c1:66:d1:12:30:82:22:
d5:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:A3:E6:BB:BC:82:7D:1E:03:CC:B9:A8:27:05:65:56:B2:3A:62:82
X509v3 Authority Key Identifier:
keyid:69:D6:04:85:71:D8:7E:AB:C4:BE:D1:A7:CD:FF:83:58:7F:B8:96:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/adYEhXHYfqvEvtGnzf-DWH-4lmQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/11cdf2-ca30-4718-ac80-f196fd0a497b/1/adYEhXHYfqvEvtGnzf-DWH-4lmQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/11cdf2-ca30-4718-ac80-f196fd0a497b/1/adYEhXHYfqvEvtGnzf-DWH-4lmQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:61:ac:1f:45:88:3e:e8:96:ca:11:35:46:16:cd:bd:bd:29:
79:5b:55:76:12:2f:15:b5:75:0a:81:a8:71:7d:05:f0:09:b4:
ed:f1:97:e5:ac:9b:0d:22:bb:41:67:2f:c5:85:4c:cf:ae:83:
a0:a6:25:df:e6:8b:ae:90:4b:1d:03:c8:3f:a5:d6:c9:ac:05:
5c:4d:63:3e:b7:35:8f:0d:05:6f:09:96:54:eb:65:32:55:82:
80:2a:41:98:d8:92:86:d1:35:55:15:89:cb:43:bf:26:18:50:
64:c8:52:56:bb:55:ce:3b:18:13:3c:e6:46:bd:c2:0a:63:f3:
9e:b2:41:be:9a:90:23:94:84:04:f0:06:95:c0:3d:25:f0:35:
c0:1e:26:86:7d:9b:b8:56:19:18:07:29:db:44:8e:98:6d:fd:
e5:b1:8f:ba:97:42:33:73:63:b2:37:14:42:e7:cf:33:44:35:
20:99:78:9a:49:a5:3b:a1:47:f6:06:44:4a:57:83:c8:bb:55:
f0:56:fe:fa:f4:3e:e1:c1:cd:75:b2:e6:54:55:b8:cd:dc:7e:
a2:e5:0a:12:e2:45:3b:2b:b3:38:50:3e:b9:13:48:ab:86:c0:
fa:a6:46:76:18:a7:8d:23:f5:dd:62:6e:e3:29:47:ab:cf:58:
dc:a1:13:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:30:19 2025 by rpki-client