Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/45a3ad-4b4c-4aaa-96d9-297180079422/1/DdIkCGSH7IZmumFcFdyPR532pI0.mft
File: DdIkCGSH7IZmumFcFdyPR532pI0.mft (raw, json)
Hash identifier: OiVDIgc5iA5eW7SfFs4gJVpi5vvCwRu05tY3wv61YaE=
Subject key identifier: C6:EB:43:41:74:70:91:A1:86:63:D7:F2:49:D2:78:C0:EB:61:F4:A4
Authority key identifier: 0D:D2:24:08:64:87:EC:86:66:BA:61:5C:15:DC:8F:47:9D:F6:A4:8D
Certificate issuer: /CN=0dd224086487ec8666ba615c15dc8f479df6a48d
Certificate serial: 01976DABC61D9724FB7C562421219E1BA54A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DdIkCGSH7IZmumFcFdyPR532pI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/45a3ad-4b4c-4aaa-96d9-297180079422/1/DdIkCGSH7IZmumFcFdyPR532pI0.mft
Manifest number: 03C2
Signing time: Sat 14 Jun 2025 09:01:03 +0000
Manifest this update: Sat 14 Jun 2025 09:01:03 +0000
Manifest next update: Sun 15 Jun 2025 09:01:03 +0000
Files and hashes: 1: DdIkCGSH7IZmumFcFdyPR532pI0.crl (hash: wbs/wvnuHFXV1G3IL1MDr3ZUAMdRX06ql59ilqvsfTQ=)
2: DsQ3XuL18x6JXJPIAS7Bywor1FI.roa (hash: YgD4/obT5P1W7ZaQyQBLHDkI0d6d+gx0ix2vsYYOe7Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/45a3ad-4b4c-4aaa-96d9-297180079422/1/DdIkCGSH7IZmumFcFdyPR532pI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/45a3ad-4b4c-4aaa-96d9-297180079422/1/DdIkCGSH7IZmumFcFdyPR532pI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/DdIkCGSH7IZmumFcFdyPR532pI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:ab:c6:1d:97:24:fb:7c:56:24:21:21:9e:1b:a5:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dd224086487ec8666ba615c15dc8f479df6a48d
Validity
Not Before: Jun 14 09:01:03 2025 GMT
Not After : Jun 15 09:01:03 2025 GMT
Subject: CN=c6eb4341747091a18663d7f249d278c0eb61f4a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d1:88:86:24:1e:47:fc:38:07:77:3b:d0:65:
78:eb:8b:ec:b3:c9:86:66:5e:f0:bc:6e:14:7a:31:
82:3b:0d:cf:a0:7d:aa:a1:aa:b8:15:82:6e:ea:e7:
0a:fc:93:1c:4b:07:36:93:80:a2:97:ab:5d:b3:d2:
59:fa:fe:45:a9:37:d4:9b:da:27:5e:d1:0a:84:0a:
60:de:d0:88:8b:6e:f9:49:48:7c:c9:32:23:d9:ca:
d8:a1:81:3c:d8:29:3b:e1:b9:53:b6:21:c4:0b:36:
45:58:8f:da:d8:b6:47:67:63:01:af:c8:b6:e6:c7:
c4:4e:a2:62:ea:0b:fd:c3:c3:d0:b9:4c:d2:0d:63:
95:d4:b8:eb:2c:b6:69:99:54:9f:a4:1c:8d:3b:32:
d5:c0:60:25:8a:c0:9e:c2:f2:c9:9a:d9:6f:5e:fd:
23:61:60:b3:e4:16:71:a0:59:85:9f:7e:44:74:37:
03:44:66:44:af:14:10:ee:a8:15:26:5a:f5:57:76:
f1:14:61:74:81:78:10:4f:2f:0f:66:be:1a:c9:36:
3f:d8:ac:b7:b9:f3:04:ec:73:6d:37:c0:92:84:ef:
d3:62:d1:ad:cc:d3:c6:07:09:dd:0d:c6:e8:db:61:
0b:4e:ba:24:a4:3f:1a:b0:4b:07:ee:a5:ff:8a:5f:
27:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:EB:43:41:74:70:91:A1:86:63:D7:F2:49:D2:78:C0:EB:61:F4:A4
X509v3 Authority Key Identifier:
keyid:0D:D2:24:08:64:87:EC:86:66:BA:61:5C:15:DC:8F:47:9D:F6:A4:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DdIkCGSH7IZmumFcFdyPR532pI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/45a3ad-4b4c-4aaa-96d9-297180079422/1/DdIkCGSH7IZmumFcFdyPR532pI0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/45a3ad-4b4c-4aaa-96d9-297180079422/1/DdIkCGSH7IZmumFcFdyPR532pI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:92:02:90:85:6c:56:20:86:c2:84:dc:26:19:92:8e:6d:79:
2b:6f:ab:41:7e:47:36:39:28:f4:11:43:fc:40:eb:8a:2e:f6:
05:93:b9:b7:c6:a5:08:a9:0a:36:7b:4f:16:ed:c6:a0:5d:9b:
29:5f:ea:92:99:c0:86:58:04:a0:2f:12:43:d5:52:19:1a:3a:
2e:c7:36:44:c1:ac:93:89:c0:85:71:83:30:f9:77:8a:09:fb:
8d:40:76:49:e7:90:4e:84:e4:fc:e8:8d:e2:e6:d5:d1:66:28:
0f:50:2e:09:d2:05:b9:90:82:bb:a1:02:1d:42:f0:a0:d2:cd:
11:63:7e:9e:7f:2f:63:33:d0:ea:12:74:b5:b3:0c:9b:e7:6a:
ab:60:1b:41:9e:16:11:96:6a:28:13:a0:70:cd:ae:ad:17:fc:
f4:43:98:9a:cb:63:6e:8f:b9:9d:f6:fb:a8:7e:5a:ed:a5:ae:
10:3b:dd:97:32:19:9d:55:08:71:ac:53:c9:aa:8d:ee:8a:e8:
01:de:7c:e5:89:3b:12:60:36:53:2d:6f:3f:83:b4:a9:74:97:
68:96:b3:6f:ec:0b:4c:38:0a:e7:8c:29:f9:5a:2b:d3:76:94:
1d:98:93:b4:51:07:cc:12:9f:6c:1c:4f:16:40:5f:f2:15:e1:
9c:2a:df:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 13:02:04 2025 by rpki-client