Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/df99d3-5028-4361-b795-3af4a9463b77/1/Dv0crRIZAnVQiePKgLptfMxLm3E.mft
File: Dv0crRIZAnVQiePKgLptfMxLm3E.mft (raw, json)
Hash identifier: e8+cLROim1plkANoDWRb7eT+QxTelgohUNrOzqY7lTs=
Subject key identifier: 96:87:A6:FF:D5:E0:CF:92:14:FF:C4:49:65:E6:E2:49:FE:E9:64:C1
Authority key identifier: 0E:FD:1C:AD:12:19:02:75:50:89:E3:CA:80:BA:6D:7C:CC:4B:9B:71
Certificate issuer: /CN=0efd1cad121902755089e3ca80ba6d7ccc4b9b71
Certificate serial: 01976C61F4C022F782D3DCEE18758C8A7AA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dv0crRIZAnVQiePKgLptfMxLm3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/df99d3-5028-4361-b795-3af4a9463b77/1/Dv0crRIZAnVQiePKgLptfMxLm3E.mft
Manifest number: 0B8A
Signing time: Sat 14 Jun 2025 03:00:48 +0000
Manifest this update: Sat 14 Jun 2025 03:00:48 +0000
Manifest next update: Sun 15 Jun 2025 03:00:48 +0000
Files and hashes: 1: Dv0crRIZAnVQiePKgLptfMxLm3E.crl (hash: WNRktuAiSF4krTNkTYA1IuXK0vLPt49XSUNqej4PzJY=)
2: kzypufx1A54QL9RnefA55meWSPM.roa (hash: cK+sc1FxI2UgckK1YuVxFsSFuYcOk8chhmHAVw1PhQ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/df99d3-5028-4361-b795-3af4a9463b77/1/Dv0crRIZAnVQiePKgLptfMxLm3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/df99d3-5028-4361-b795-3af4a9463b77/1/Dv0crRIZAnVQiePKgLptfMxLm3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dv0crRIZAnVQiePKgLptfMxLm3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:61:f4:c0:22:f7:82:d3:dc:ee:18:75:8c:8a:7a:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0efd1cad121902755089e3ca80ba6d7ccc4b9b71
Validity
Not Before: Jun 14 03:00:48 2025 GMT
Not After : Jun 15 03:00:48 2025 GMT
Subject: CN=9687a6ffd5e0cf9214ffc44965e6e249fee964c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:5c:4d:c0:8e:a6:ea:90:65:f3:b2:1f:10:93:
ee:c7:ae:88:47:c3:5e:ff:45:e6:07:56:38:23:dd:
b5:73:57:8c:6b:30:a4:dc:ef:e5:b8:74:51:78:2f:
87:cd:fb:22:2a:22:6a:0d:2a:f6:dd:a3:6e:44:3d:
5e:5c:f5:1a:24:38:52:bb:d6:3c:d7:60:3f:0f:56:
ca:02:76:ab:5a:fc:48:62:3c:8e:3e:c2:52:7a:29:
e6:6d:5e:67:d1:ec:4d:61:61:07:3a:9a:76:c9:2f:
e4:b1:ad:76:96:3e:59:7c:99:aa:df:b4:bc:78:9a:
b4:a5:47:d0:51:58:62:23:d3:e6:99:20:df:4b:2a:
e8:52:90:47:17:8d:a6:8f:4c:1f:65:45:30:59:ca:
70:ac:03:21:74:63:8f:e6:3a:a1:b5:c0:b5:e8:51:
57:2c:08:94:c7:97:f3:98:bb:e4:e9:fd:4a:9a:43:
92:bd:6e:f7:83:ee:50:34:39:1b:60:d6:70:4d:29:
f8:40:e1:f1:d4:c3:52:c8:3a:6a:7c:83:fc:55:0a:
e0:76:29:94:56:4f:2c:98:78:29:e3:8f:16:b8:85:
45:a1:cc:78:88:9a:55:f1:2e:2e:9b:d4:b9:4d:96:
16:e5:7c:19:e7:0e:ca:91:c6:76:d5:24:7f:b3:ec:
9e:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:87:A6:FF:D5:E0:CF:92:14:FF:C4:49:65:E6:E2:49:FE:E9:64:C1
X509v3 Authority Key Identifier:
keyid:0E:FD:1C:AD:12:19:02:75:50:89:E3:CA:80:BA:6D:7C:CC:4B:9B:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dv0crRIZAnVQiePKgLptfMxLm3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/df99d3-5028-4361-b795-3af4a9463b77/1/Dv0crRIZAnVQiePKgLptfMxLm3E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/df99d3-5028-4361-b795-3af4a9463b77/1/Dv0crRIZAnVQiePKgLptfMxLm3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:95:78:73:1b:93:5d:09:c5:6a:6a:f1:c7:a6:78:73:ff:4b:
53:0c:a5:51:af:fd:40:92:65:59:ab:42:57:10:f0:36:82:72:
39:f2:fa:ce:02:4c:5c:5c:8c:41:99:42:79:a3:38:a5:d3:52:
8b:50:25:0e:7d:84:6d:e6:bf:eb:f4:79:b2:1d:ee:53:6e:25:
36:41:a5:d8:1d:90:da:1f:55:ff:13:9d:ce:c6:34:63:67:b1:
cc:6e:f6:34:ce:27:93:84:0d:f6:49:7a:d1:94:dc:42:82:22:
65:3c:fd:f0:de:3a:cb:e4:39:78:b9:19:d7:ea:9a:b1:2f:8d:
e1:26:39:68:63:a0:77:32:3b:96:c2:e4:20:01:b8:77:84:ef:
27:d7:d1:ab:76:8c:92:0b:1a:d2:a7:c5:32:f6:1a:3c:b6:19:
ec:94:1b:5d:ff:af:c3:5e:f9:5c:c5:92:b0:15:e7:a4:a7:d4:
72:7c:07:26:4a:32:4d:6a:eb:3c:4c:8b:7c:e9:03:58:64:32:
dc:c2:bf:11:8e:9f:dc:1b:a9:31:b3:f7:6b:33:ba:b5:59:9f:
32:3c:0b:4b:f3:aa:d5:a8:66:b6:1c:34:4c:8c:1b:ca:0c:92:
44:ea:34:de:d3:f5:02:43:24:3c:5e:35:0c:e0:41:bd:10:52:
be:f6:55:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:57:39 2025 by rpki-client