Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/f7f0f2-479e-4f03-baa2-061ed9371475/1/dXXVPbgi0l24J9A3fL6wbSykGss.mft
File: dXXVPbgi0l24J9A3fL6wbSykGss.mft (raw, json)
Hash identifier: kWiuUNxgDJFCb2seBLsNCynSAW6VYEPF/NhAXAHOHBU=
Subject key identifier: 14:EB:C5:33:EE:6B:D9:69:AF:BF:A2:A8:0B:2F:70:94:96:F1:06:31
Authority key identifier: 75:75:D5:3D:B8:22:D2:5D:B8:27:D0:37:7C:BE:B0:6D:2C:A4:1A:CB
Certificate issuer: /CN=7575d53db822d25db827d0377cbeb06d2ca41acb
Certificate serial: 01976BBCD4B7FE5E9F6703CB471AF11A175F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dXXVPbgi0l24J9A3fL6wbSykGss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/f7f0f2-479e-4f03-baa2-061ed9371475/1/dXXVPbgi0l24J9A3fL6wbSykGss.mft
Manifest number: 03FA
Signing time: Sat 14 Jun 2025 00:00:26 +0000
Manifest this update: Sat 14 Jun 2025 00:00:26 +0000
Manifest next update: Sun 15 Jun 2025 00:00:26 +0000
Files and hashes: 1: 59Mn6Fq_ztW3ZpObO3_epXiDhpk.roa (hash: cp+rR6j5Vo4FlHwAzBmhQ3KTx+zcyZnQHkQLzqefDBI=)
2: dXXVPbgi0l24J9A3fL6wbSykGss.crl (hash: w2BK/l4/nz1lsJqxItS2bKBK4mkTWdd/Z/im88zzVwg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/f7f0f2-479e-4f03-baa2-061ed9371475/1/dXXVPbgi0l24J9A3fL6wbSykGss.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/f7f0f2-479e-4f03-baa2-061ed9371475/1/dXXVPbgi0l24J9A3fL6wbSykGss.mft
rsync://rpki.ripe.net/repository/DEFAULT/dXXVPbgi0l24J9A3fL6wbSykGss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:bc:d4:b7:fe:5e:9f:67:03:cb:47:1a:f1:1a:17:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7575d53db822d25db827d0377cbeb06d2ca41acb
Validity
Not Before: Jun 14 00:00:26 2025 GMT
Not After : Jun 15 00:00:26 2025 GMT
Subject: CN=14ebc533ee6bd969afbfa2a80b2f709496f10631
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:eb:7e:7c:7b:76:e3:9e:42:27:2b:1a:1d:fa:
aa:88:7e:f5:b6:b4:7b:d1:9a:15:93:e8:5b:7d:09:
d5:be:3c:f9:9e:a9:c6:9c:13:3e:14:3b:5d:0c:76:
fd:6a:de:67:8b:4d:87:57:f7:b2:dc:03:02:ec:db:
98:24:02:20:4e:5d:f6:90:37:5d:0a:0f:6f:5f:53:
93:73:32:99:ea:a4:5b:65:12:29:9b:5c:3d:65:ed:
da:74:2c:c4:4b:d6:2e:15:19:f8:39:b2:9d:dc:c4:
e8:38:54:74:f8:36:49:76:78:f7:ca:b5:76:02:0e:
3f:60:df:74:50:86:6e:d8:2f:1f:e8:2d:7a:01:54:
2d:92:df:4c:a1:ef:dc:34:8f:0b:09:33:62:1a:d3:
c8:6e:de:0d:2e:53:37:e2:34:5b:03:a4:b8:1d:05:
f3:80:c5:a8:2f:89:3e:a5:e9:f0:b8:38:3b:c1:cd:
c2:32:d2:11:32:c5:c8:a7:86:02:ae:1e:ce:ac:d8:
40:de:f9:2f:05:a7:49:f1:7c:df:16:b0:67:3d:e0:
09:af:ad:57:90:9f:ef:0b:33:50:a8:b4:64:31:98:
fd:ab:70:61:b9:99:35:ac:c4:44:8e:34:8a:1a:59:
47:5f:8e:b1:4e:45:12:ae:95:32:ec:bd:51:6e:20:
bb:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:EB:C5:33:EE:6B:D9:69:AF:BF:A2:A8:0B:2F:70:94:96:F1:06:31
X509v3 Authority Key Identifier:
keyid:75:75:D5:3D:B8:22:D2:5D:B8:27:D0:37:7C:BE:B0:6D:2C:A4:1A:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dXXVPbgi0l24J9A3fL6wbSykGss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/f7f0f2-479e-4f03-baa2-061ed9371475/1/dXXVPbgi0l24J9A3fL6wbSykGss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/f7f0f2-479e-4f03-baa2-061ed9371475/1/dXXVPbgi0l24J9A3fL6wbSykGss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:4a:b8:c7:17:e2:ab:0a:f7:9b:31:4b:f2:d9:6f:88:12:a1:
07:cd:ac:27:5e:9a:5c:ea:45:43:3f:1e:69:c1:b7:eb:27:f1:
c4:1e:64:0d:a3:2f:7d:1c:9a:7f:6a:9a:f8:42:8a:61:c8:79:
07:ad:26:b1:a1:0c:0d:2d:25:c2:86:4f:71:1d:25:de:61:2c:
e2:40:04:0b:0a:45:70:57:e3:d5:43:f5:d8:7f:a3:18:1a:be:
69:97:bb:03:be:5f:53:49:b7:61:1e:d8:26:6a:05:1d:d5:d0:
27:74:57:5b:0e:a0:2e:7e:b8:fa:0e:29:8b:e5:c7:b2:a0:05:
89:42:f7:52:93:7d:25:55:40:ea:10:7a:ef:22:8b:1f:56:43:
bf:05:f8:d1:79:25:0c:3d:57:90:37:ed:45:48:d9:c7:ae:07:
97:c7:46:23:5e:52:b2:f3:7b:11:fa:55:f0:4f:0f:b8:ca:1e:
d9:58:1c:68:a0:10:17:d5:d2:ec:75:8a:01:e3:3d:99:d6:cd:
d3:51:b4:ca:9d:45:f1:e9:7e:f3:26:3f:6e:7f:dc:b6:2b:b1:
81:8a:9f:70:c0:c4:4c:8b:a1:3d:7a:1b:ef:6d:f1:98:9d:54:
9f:b6:20:71:af:53:01:1c:80:c4:ed:b3:fd:0f:8f:a6:79:bd:
be:67:de:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:06:34 2025 by rpki-client