Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/19f4d4-5c1e-421f-9f56-bc5104a385e2/1/08DVsQa4GpKSTqK8UTn7te4Rht0.mft
File: 08DVsQa4GpKSTqK8UTn7te4Rht0.mft (raw, json)
Hash identifier: z0TMmwnv/SItjMsqdVC4EQ/DWOBe1x1HOONyXXBoZLk=
Subject key identifier: 12:DB:CC:BC:7F:25:0E:40:5F:CA:C6:4C:8C:78:65:3A:70:4D:E0:AF
Authority key identifier: D3:C0:D5:B1:06:B8:1A:92:92:4E:A2:BC:51:39:FB:B5:EE:11:86:DD
Certificate issuer: /CN=d3c0d5b106b81a92924ea2bc5139fbb5ee1186dd
Certificate serial: 01976F2BF444D895ABAA11C4A40C02B26281
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/08DVsQa4GpKSTqK8UTn7te4Rht0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/19f4d4-5c1e-421f-9f56-bc5104a385e2/1/08DVsQa4GpKSTqK8UTn7te4Rht0.mft
Manifest number: 1590
Signing time: Sat 14 Jun 2025 16:00:40 +0000
Manifest this update: Sat 14 Jun 2025 16:00:40 +0000
Manifest next update: Sun 15 Jun 2025 16:00:40 +0000
Files and hashes: 1: 08DVsQa4GpKSTqK8UTn7te4Rht0.crl (hash: 1JrbY7YEw/2DlZrsdJupt9c8iNDVwaMVzFtiq0Ny1v8=)
2: vhpsA1QTyqlbOgTgwwiSOvjLosU.roa (hash: oOzCVm5vsYLrY+U1GpoNLtBM7Fbrqb31l0clRbwWzyA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/19f4d4-5c1e-421f-9f56-bc5104a385e2/1/08DVsQa4GpKSTqK8UTn7te4Rht0.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/19f4d4-5c1e-421f-9f56-bc5104a385e2/1/08DVsQa4GpKSTqK8UTn7te4Rht0.mft
rsync://rpki.ripe.net/repository/DEFAULT/08DVsQa4GpKSTqK8UTn7te4Rht0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:2b:f4:44:d8:95:ab:aa:11:c4:a4:0c:02:b2:62:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3c0d5b106b81a92924ea2bc5139fbb5ee1186dd
Validity
Not Before: Jun 14 16:00:40 2025 GMT
Not After : Jun 15 16:00:40 2025 GMT
Subject: CN=12dbccbc7f250e405fcac64c8c78653a704de0af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:01:26:49:3b:67:cb:0c:38:29:ea:2c:57:b7:
90:5a:18:e7:b2:3f:1e:ef:f2:71:78:a4:c4:aa:60:
dd:e5:d0:fd:76:55:73:57:6b:a9:a3:4a:03:fa:64:
65:fe:c6:31:b7:75:fd:7d:ff:24:63:27:af:f1:fe:
11:90:18:76:1c:4b:84:db:aa:33:34:f0:87:93:ef:
8c:28:e9:4b:b4:e0:8b:9d:57:02:98:44:55:5b:24:
cf:ce:59:f4:85:ba:0e:ee:d2:be:04:d2:df:cf:9a:
f1:82:38:f0:dd:9b:10:36:65:d1:b3:31:17:24:f4:
b3:20:f6:01:8f:c6:7e:2d:1f:5a:71:21:d6:9f:e0:
86:e5:a4:04:b7:c0:8a:02:14:5b:24:a8:42:35:85:
b2:02:a1:7e:56:9e:22:5b:27:17:51:49:d1:91:7c:
82:58:53:f5:95:07:c2:2b:f1:6a:2b:5f:80:a2:97:
b1:08:52:b2:ba:b6:15:27:68:0b:67:e1:2e:e7:c1:
ee:48:da:ba:0e:85:14:a7:9d:9b:d5:37:35:6c:ee:
b2:55:e6:da:a7:b9:85:18:6b:64:0a:70:43:94:3e:
34:4a:08:e3:82:97:88:57:ce:d5:be:f4:76:c2:cf:
74:33:9c:b3:5e:98:4f:78:a7:85:36:fd:3e:cb:17:
c0:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:DB:CC:BC:7F:25:0E:40:5F:CA:C6:4C:8C:78:65:3A:70:4D:E0:AF
X509v3 Authority Key Identifier:
keyid:D3:C0:D5:B1:06:B8:1A:92:92:4E:A2:BC:51:39:FB:B5:EE:11:86:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/08DVsQa4GpKSTqK8UTn7te4Rht0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/19f4d4-5c1e-421f-9f56-bc5104a385e2/1/08DVsQa4GpKSTqK8UTn7te4Rht0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/19f4d4-5c1e-421f-9f56-bc5104a385e2/1/08DVsQa4GpKSTqK8UTn7te4Rht0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:dc:69:e7:4f:78:3f:6f:b8:27:fc:06:72:13:d1:2c:8f:ab:
6c:a4:cf:0d:cd:0e:b8:41:3f:92:ff:5e:83:ca:c6:bd:73:b3:
40:67:35:93:02:4e:4b:57:57:01:e8:8b:ec:f4:46:3f:52:08:
96:ba:ba:3a:6d:31:08:98:f0:25:37:32:24:e5:ef:b5:3d:b4:
32:a2:48:7f:f4:90:16:04:c4:f3:ed:5f:62:cd:04:f5:45:80:
66:d6:94:40:aa:8c:c5:93:fd:b2:c4:4c:94:81:01:fe:22:0a:
44:a8:45:57:bc:65:f3:73:7a:9d:f0:8e:31:cd:1a:ac:40:01:
ea:4c:c2:21:2d:73:73:5c:8a:bf:20:76:60:7b:94:3c:19:60:
eb:ef:12:e8:65:dc:04:16:92:5a:4d:a8:87:6f:a3:f6:ee:d7:
7f:e9:77:5c:c8:c0:1f:29:19:16:b4:5e:8c:bb:96:4c:a8:82:
cb:62:a3:95:da:77:9f:9b:b4:fc:34:b2:c2:54:61:66:19:5f:
65:2b:03:a1:b5:93:76:82:33:68:77:61:23:51:fc:85:1e:b5:
15:9d:75:1d:74:44:33:be:a7:cc:57:07:d4:77:f5:df:7e:cf:
1d:ac:a6:01:14:26:a6:3f:fe:f8:e7:9a:a6:25:e3:1f:9a:3c:
a0:12:b0:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 22:23:44 2025 by rpki-client