Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/03afc6-88f5-4660-8015-64c9c2cc9609/1/DbD591Ww4wPMFtGmM_lYwDYDSUU.mft
File: DbD591Ww4wPMFtGmM_lYwDYDSUU.mft (raw, json)
Hash identifier: B5272/6cdNVSG7oV07GSAT3FeN4kxMugFnK02l54+eo=
Subject key identifier: C9:10:1F:01:84:46:3E:8F:50:3C:77:95:98:5A:19:B9:D1:05:74:BC
Authority key identifier: 0D:B0:F9:F7:55:B0:E3:03:CC:16:D1:A6:33:F9:58:C0:36:03:49:45
Certificate issuer: /CN=0db0f9f755b0e303cc16d1a633f958c036034945
Certificate serial: 019778D3FE664C109C38924030D0D59326A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DbD591Ww4wPMFtGmM_lYwDYDSUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/03afc6-88f5-4660-8015-64c9c2cc9609/1/DbD591Ww4wPMFtGmM_lYwDYDSUU.mft
Manifest number: 0A79
Signing time: Mon 16 Jun 2025 13:00:48 +0000
Manifest this update: Mon 16 Jun 2025 13:00:48 +0000
Manifest next update: Tue 17 Jun 2025 13:00:48 +0000
Files and hashes: 1: DbD591Ww4wPMFtGmM_lYwDYDSUU.crl (hash: UAjp/9DYr/DFfy42zReXtC/oRH9WPcwDrKAVfloiREs=)
2: s3TIKJMGO-H8fbbN5SX9DjrKZbg.roa (hash: nJZCH4ElBXirrkbsvqmvn6OniRKSBo6O3OjFqSqnuAA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/03afc6-88f5-4660-8015-64c9c2cc9609/1/DbD591Ww4wPMFtGmM_lYwDYDSUU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/03afc6-88f5-4660-8015-64c9c2cc9609/1/DbD591Ww4wPMFtGmM_lYwDYDSUU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DbD591Ww4wPMFtGmM_lYwDYDSUU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 13:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:78:d3:fe:66:4c:10:9c:38:92:40:30:d0:d5:93:26:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0db0f9f755b0e303cc16d1a633f958c036034945
Validity
Not Before: Jun 16 13:00:48 2025 GMT
Not After : Jun 17 13:00:48 2025 GMT
Subject: CN=c9101f0184463e8f503c7795985a19b9d10574bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:03:da:1a:77:90:c7:dd:30:f8:3c:47:14:fe:
73:55:7b:fb:67:75:7b:bf:9d:36:b2:61:4f:07:e0:
ae:45:dc:52:76:c1:57:0d:1d:40:4d:d5:a2:2a:65:
6e:24:72:60:f4:9e:d3:5b:40:7f:ea:0a:fd:bd:7c:
a8:63:9d:16:a8:1e:c4:a5:86:ab:f8:fb:4d:6f:a8:
c9:bd:ae:3d:89:db:b0:b2:d4:fb:86:4e:d0:96:19:
73:fc:de:b2:ca:1e:66:27:85:47:cb:ac:a0:73:31:
82:c7:9f:5f:40:b0:7b:6a:e1:60:0c:a9:d8:6a:2b:
40:5e:70:8a:f9:54:a4:21:e9:c2:22:6b:43:08:7a:
5a:ea:18:95:64:f8:16:cc:57:d8:b6:e6:c2:73:d6:
60:bf:18:23:5d:22:5b:3c:86:d0:86:29:a6:24:e4:
08:e5:05:c1:67:04:c0:c6:44:1b:e2:5d:28:1d:0f:
b8:e8:7f:2c:ca:cd:7d:55:ff:c4:f8:f6:32:57:7c:
59:4e:75:a3:09:9a:12:06:e3:ac:d8:60:26:3a:12:
2e:2b:73:55:34:9f:1e:42:b4:7d:09:74:ad:c2:da:
55:51:3f:62:39:4c:52:a0:90:2b:11:dd:62:23:77:
2d:e7:02:b5:68:ee:b9:95:d5:58:16:04:98:ba:6e:
91:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:10:1F:01:84:46:3E:8F:50:3C:77:95:98:5A:19:B9:D1:05:74:BC
X509v3 Authority Key Identifier:
keyid:0D:B0:F9:F7:55:B0:E3:03:CC:16:D1:A6:33:F9:58:C0:36:03:49:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DbD591Ww4wPMFtGmM_lYwDYDSUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/03afc6-88f5-4660-8015-64c9c2cc9609/1/DbD591Ww4wPMFtGmM_lYwDYDSUU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/03afc6-88f5-4660-8015-64c9c2cc9609/1/DbD591Ww4wPMFtGmM_lYwDYDSUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:d0:be:f0:db:bb:b3:72:57:95:8b:31:3f:4f:43:b5:3b:33:
28:3a:9f:94:98:14:63:44:a3:7e:5f:21:7b:e7:ca:48:6e:4e:
5a:c1:3c:12:3f:00:7e:ba:1b:37:10:ec:13:91:9e:af:6f:68:
17:80:40:a8:3c:08:f1:2b:06:d7:03:10:95:c8:c4:99:91:c2:
d1:56:f7:83:8c:46:e8:27:43:a7:c2:2d:73:c7:63:e3:e5:c5:
93:9f:bb:d6:87:fe:ea:2f:0e:b0:e4:5a:78:a4:26:c8:79:e5:
7e:c3:db:de:ef:08:58:31:1a:6b:01:c0:4a:1e:ed:5f:25:af:
c8:09:6b:eb:df:6a:7c:31:58:80:c2:62:23:70:a9:98:3e:7a:
90:56:ce:31:97:4f:70:5b:6b:8a:4b:a2:73:81:82:4c:9c:09:
3b:0b:db:b9:f1:dd:0b:a6:5e:89:8a:ba:24:dd:e4:12:64:5d:
21:23:a0:65:96:6d:f4:97:da:d4:ab:f3:39:39:8a:ed:ee:62:
c4:c3:58:c0:e5:31:f2:24:0e:12:9f:34:93:e9:5d:9d:95:d9:
ab:87:92:fa:66:29:9a:a7:09:2c:b8:ef:91:f9:1e:08:c9:7f:
b7:b2:6b:52:68:0b:05:5f:4e:a6:fe:76:87:c6:dc:80:22:c9:
df:3d:d7:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 15:58:55 2025 by rpki-client