Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.mft
File: rSQ9z_DLOCEff-fbP5ExabRM9FY.mft (raw, json)
Hash identifier: +wnl7Xpc8V6CmF43InOVQLm7g2+ptiqNUZXZxnUkOe4=
Subject key identifier: 7E:F8:08:02:57:D7:34:80:7F:D0:38:FF:39:36:73:1C:AB:2F:76:49
Authority key identifier: AD:24:3D:CF:F0:CB:38:21:1F:7F:E7:DB:3F:91:31:69:B4:4C:F4:56
Certificate issuer: /CN=ad243dcff0cb38211f7fe7db3f913169b44cf456
Certificate serial: 01976D066B8C75B9E74CC9817810B6D4C8EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rSQ9z_DLOCEff-fbP5ExabRM9FY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.mft
Manifest number: 0AC5
Signing time: Sat 14 Jun 2025 06:00:26 +0000
Manifest this update: Sat 14 Jun 2025 06:00:26 +0000
Manifest next update: Sun 15 Jun 2025 06:00:26 +0000
Files and hashes: 1: IjTxYypUMPd9vNvxDH7e63Vss-s.roa (hash: ddL2vaX8z2K9wMCm5nW5FRiHC0CRdW6lG+EEvQKzKbw=)
2: T2MgSfJhA--awsv_yLzhSgCTR5o.roa (hash: WyuHaMn+gG0jVz0dGyAqt02pX4u9yt+Uj+QT07hTOKI=)
3: UY_6W8Weiu8wfSraZN42RZZCh9E.roa (hash: v6nlIIdPdLR7D5BuTrHHAZdgu5wLraNYTQd+Byp51pA=)
4: bpthfOzMCHmNWPoyMwo5XIQPCUQ.roa (hash: VtftbkCJkVOtxURtiBDwhwZ/TrioGRiRetZ47whwsMM=)
5: c-jYtKSfa4VIV0dc7SVHGi1wpDM.roa (hash: AvwD63bIF1X5ZQR5fhuIKgABQi3TuCqXO/815QhlfiQ=)
6: lnoSZUl-KAxHgvChTMMkabDVOZE.roa (hash: MW0GEHPEt15f0rFl2wirejWxs1Jn9X63PZPwnku/3cI=)
7: lxlWJPcAj7vgwHk2Hyt3CXNN6xs.roa (hash: 2V4JLadPHaMoMNiFHz0+pVFh6WwhhrJwcPkeEfLnUuY=)
8: rSQ9z_DLOCEff-fbP5ExabRM9FY.crl (hash: bEbfJGjrtnb0Xm8x76bS4E6ueu75TGFV6YqCcA4B3wk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.mft
rsync://rpki.ripe.net/repository/DEFAULT/rSQ9z_DLOCEff-fbP5ExabRM9FY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:06:6b:8c:75:b9:e7:4c:c9:81:78:10:b6:d4:c8:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad243dcff0cb38211f7fe7db3f913169b44cf456
Validity
Not Before: Jun 14 06:00:26 2025 GMT
Not After : Jun 15 06:00:26 2025 GMT
Subject: CN=7ef8080257d734807fd038ff3936731cab2f7649
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:96:f5:e7:08:5b:ae:78:ed:a4:63:63:4f:46:
f8:4d:59:be:39:23:2f:60:43:ed:f2:15:bb:44:5d:
9e:71:a9:cd:ee:ec:05:20:a7:77:3d:11:2a:3c:8a:
97:3e:5d:26:ca:f5:fa:be:b4:fe:91:ff:8f:1b:b9:
e9:eb:fe:f9:7d:44:87:1c:ce:6c:71:a1:bf:d0:ad:
c5:d2:eb:f3:36:65:d6:6f:1b:79:df:46:97:55:1e:
0b:02:48:84:dc:24:24:e4:12:b6:9b:b9:9a:a4:90:
72:d0:2e:25:bd:0d:c3:99:b8:14:bc:1e:7a:38:8c:
86:81:01:44:4e:81:4e:df:5c:84:7a:11:c9:bf:9b:
80:a1:0b:01:ce:c7:40:da:5c:eb:cd:8b:8e:c2:20:
ff:f1:f5:af:f9:a5:d4:1f:af:77:15:3a:4c:40:d3:
d0:e7:67:30:e4:a2:7e:97:5f:12:54:08:62:58:32:
3f:0d:be:1c:ab:52:ec:bc:37:1d:0b:e9:b3:fc:04:
3a:3b:91:7d:c9:fb:41:24:2a:e1:c3:29:63:ea:f4:
cb:ac:d5:ca:e8:09:cc:20:15:6e:3a:3d:fa:95:85:
1c:f6:94:d0:a0:c1:e6:3f:52:94:67:93:d5:71:fb:
be:94:10:1d:04:6b:9e:b4:57:13:7b:e0:7e:9c:9f:
23:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:F8:08:02:57:D7:34:80:7F:D0:38:FF:39:36:73:1C:AB:2F:76:49
X509v3 Authority Key Identifier:
keyid:AD:24:3D:CF:F0:CB:38:21:1F:7F:E7:DB:3F:91:31:69:B4:4C:F4:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rSQ9z_DLOCEff-fbP5ExabRM9FY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:09:c5:38:96:1c:c3:eb:5b:4c:32:07:28:ad:c4:8e:aa:fd:
21:25:02:7a:b1:9a:ae:02:61:9a:98:2a:b0:e1:af:15:3e:6c:
8f:d0:40:f7:1d:2a:d8:da:21:a5:01:11:de:35:58:1e:cf:29:
66:56:83:35:cd:5c:f3:d1:fe:f4:d7:28:e7:ef:4d:ad:1e:a8:
c9:eb:5a:f8:53:fb:23:8e:1f:5a:8a:94:9f:42:34:aa:fd:66:
e3:09:56:82:14:64:7e:ba:1b:07:cf:94:10:8d:2a:bb:46:80:
38:d1:c3:4b:29:4e:9b:4d:12:bf:fa:e9:0e:d3:63:3c:5b:b9:
d9:5f:19:21:15:c2:83:ce:1b:a4:39:5f:4f:cf:3d:da:c5:db:
39:09:29:bd:1a:80:33:b0:0d:65:50:05:17:9b:36:85:f8:ed:
bf:09:c9:2c:16:2e:47:d3:7b:14:88:88:e5:47:e0:9d:1c:1c:
a7:57:70:93:5b:22:42:fe:6a:39:27:71:c7:23:33:b2:58:ce:
78:51:3b:5d:b6:35:74:fa:57:b7:45:ba:6c:78:4b:62:af:88:
03:a7:60:8d:c6:64:eb:46:29:81:1b:69:7d:95:47:b8:64:24:
81:ea:c1:88:87:d5:75:9d:07:b3:00:b5:c8:15:c2:50:33:60:
81:5f:c0:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:44:46 2025 by rpki-client