Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/1686c3-da70-4b54-ab2b-3be995d2bbda/1/du8KDuj6FU162kOK8SEiac4KzEE.mft
File: du8KDuj6FU162kOK8SEiac4KzEE.mft (raw, json)
Hash identifier: DuNLIa7XVF8ZX/r+jMxpU8PLKi6h3uSUe+J8mINz6Z4=
Subject key identifier: 43:6C:A8:51:16:82:D7:C3:9D:C4:2E:05:7F:AA:24:CB:B1:07:00:0A
Authority key identifier: 76:EF:0A:0E:E8:FA:15:4D:7A:DA:43:8A:F1:21:22:69:CE:0A:CC:41
Certificate issuer: /CN=76ef0a0ee8fa154d7ada438af1212269ce0acc41
Certificate serial: 01977AC2708C7909811FC4D676C24E2EE0C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/du8KDuj6FU162kOK8SEiac4KzEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/1686c3-da70-4b54-ab2b-3be995d2bbda/1/du8KDuj6FU162kOK8SEiac4KzEE.mft
Manifest number: 0509
Signing time: Mon 16 Jun 2025 22:00:52 +0000
Manifest this update: Mon 16 Jun 2025 22:00:52 +0000
Manifest next update: Tue 17 Jun 2025 22:00:52 +0000
Files and hashes: 1: Duy0w8egSd6_tWOhbaPt5UeYgF0.roa (hash: 85ocILxngCmwXS32iOfp1qK7+ygQ+Dz/qqJJB6oRnIE=)
2: J4VjN9NGRUAj6-HvTcD4a4pRvuI.roa (hash: BPJJa1BdBThf5/6mJP59LpQAGjz4XfDNQ5fBL115gk0=)
3: _fP9Z6Qv2kJn-Wq44o76SeffPHk.roa (hash: 4imK77f8nPoaw3AiGFAa7c39oqo+0JEgUABlegcK0lE=)
4: du8KDuj6FU162kOK8SEiac4KzEE.crl (hash: Wr4RaFbtIGzHV/ra9hUD388GA0fmi5oQQdm3e3aVt70=)
5: l65724QI29Rvj8Dehw-WDE4zXrs.roa (hash: GIynNXgCpE42jnQGxrKvLDY9GYzVvsdz2aApBnrj/3E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/1686c3-da70-4b54-ab2b-3be995d2bbda/1/du8KDuj6FU162kOK8SEiac4KzEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/1686c3-da70-4b54-ab2b-3be995d2bbda/1/du8KDuj6FU162kOK8SEiac4KzEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/du8KDuj6FU162kOK8SEiac4KzEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 21:51:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7a:c2:70:8c:79:09:81:1f:c4:d6:76:c2:4e:2e:e0:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76ef0a0ee8fa154d7ada438af1212269ce0acc41
Validity
Not Before: Jun 16 22:00:52 2025 GMT
Not After : Jun 17 22:00:52 2025 GMT
Subject: CN=436ca8511682d7c39dc42e057faa24cbb107000a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:8d:a4:b1:d0:93:98:48:3e:d7:2f:2e:9c:d7:
bd:aa:d5:f5:63:30:77:c0:30:d8:53:98:b3:13:77:
22:02:31:21:4a:27:ea:0a:4d:df:a9:c5:1e:65:bf:
48:fe:e2:fd:8e:1a:c2:af:33:8f:13:73:f2:ec:2e:
d0:54:e4:46:8f:40:6d:fa:e4:da:d8:84:df:c6:2c:
b5:b7:c7:db:79:50:df:3b:8c:b9:ae:86:1c:26:d7:
f1:0d:db:9f:b6:fb:1e:49:2d:9a:3a:33:d5:7b:28:
62:03:d4:f8:f9:11:92:09:91:80:96:85:ec:fa:63:
79:84:3b:d2:7f:fe:70:cd:b5:ec:a6:15:0c:f2:61:
81:97:e4:88:c9:47:c9:c3:88:3e:3b:1b:81:0d:bf:
04:66:9f:93:1e:b5:f1:66:e8:31:47:06:41:30:3a:
62:9e:21:cc:d8:63:f0:4b:25:be:eb:c5:09:75:ce:
4f:d1:e6:3b:9f:26:6e:b3:89:55:80:33:17:b0:82:
b8:a4:8e:12:f1:30:f1:30:6f:88:6f:54:8d:74:4b:
ad:74:65:65:e0:f6:4c:5b:e3:a9:e9:17:8a:d5:05:
31:af:4b:a1:08:0a:9a:47:a6:24:e1:e9:13:29:f7:
7d:8e:86:be:68:4b:10:02:77:f5:da:4a:83:59:92:
d1:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:6C:A8:51:16:82:D7:C3:9D:C4:2E:05:7F:AA:24:CB:B1:07:00:0A
X509v3 Authority Key Identifier:
keyid:76:EF:0A:0E:E8:FA:15:4D:7A:DA:43:8A:F1:21:22:69:CE:0A:CC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/du8KDuj6FU162kOK8SEiac4KzEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/1686c3-da70-4b54-ab2b-3be995d2bbda/1/du8KDuj6FU162kOK8SEiac4KzEE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/1686c3-da70-4b54-ab2b-3be995d2bbda/1/du8KDuj6FU162kOK8SEiac4KzEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:f3:7d:ec:08:21:20:6a:2a:93:69:33:19:21:0d:c8:e5:8e:
23:d1:22:f2:28:38:b5:4e:f7:ee:4c:52:47:24:3c:05:af:3c:
91:ad:40:84:f1:51:52:8e:5f:a4:cc:ec:6b:87:19:f6:44:97:
50:e4:c6:2d:2c:e5:47:46:8c:70:2a:17:76:4d:f7:2b:36:2d:
b7:6f:e9:2a:71:ab:5a:5b:58:b3:40:ba:7d:83:c3:15:78:3c:
b1:2f:d8:c3:bd:64:c5:fa:03:e2:23:50:0c:b8:08:e7:ad:f7:
0c:96:97:6d:0e:ef:bc:89:1c:1c:3c:c6:7f:0a:e6:45:e4:64:
b1:7b:9a:2e:2c:db:2c:8f:98:b7:32:40:6c:23:6a:44:22:dd:
a7:83:17:9e:82:33:1f:59:5b:22:fa:b5:aa:32:2c:bf:95:3d:
2a:8d:14:6a:2b:56:d9:02:53:98:c6:41:fa:82:b0:1f:48:b2:
c0:23:ec:74:bc:fb:3e:d2:37:10:6f:fc:cc:c2:64:7a:d5:29:
ac:42:2a:a2:96:79:2b:30:68:3c:eb:a6:e5:83:65:8b:6b:41:
b8:20:20:e3:60:9c:53:e2:e6:db:9f:57:c9:a2:41:d0:74:cc:
87:6a:45:b0:f7:08:1f:82:b8:53:85:6f:e8:0a:16:b1:24:29:
27:3d:8a:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 06:21:09 2025 by rpki-client