Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/080530-3f81-4479-b5a0-9a38159b794e/1/dzEQpDcE2VSd9xVuOnieYihbFpM.mft
File: dzEQpDcE2VSd9xVuOnieYihbFpM.mft (raw, json)
Hash identifier: +yWYq1ob3+Yhp/0aj4AQZuySBOfnNP3yPNlFrvNmxPE=
Subject key identifier: CE:15:8E:D4:0D:94:F9:4E:95:3F:D3:8C:74:A1:19:85:67:5E:D7:08
Authority key identifier: 77:31:10:A4:37:04:D9:54:9D:F7:15:6E:3A:78:9E:62:28:5B:16:93
Certificate issuer: /CN=773110a43704d9549df7156e3a789e62285b1693
Certificate serial: 0197711A486F35A59E55D3C4C136ACA935E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dzEQpDcE2VSd9xVuOnieYihbFpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/080530-3f81-4479-b5a0-9a38159b794e/1/dzEQpDcE2VSd9xVuOnieYihbFpM.mft
Manifest number: 155F
Signing time: Sun 15 Jun 2025 01:00:37 +0000
Manifest this update: Sun 15 Jun 2025 01:00:37 +0000
Manifest next update: Mon 16 Jun 2025 01:00:37 +0000
Files and hashes: 1: dzEQpDcE2VSd9xVuOnieYihbFpM.crl (hash: Lx9U/y4W6ACNIHY4HkKBIpfsMYZknPZU3jydmFAFrEI=)
2: lKi6SoPHv8adD_f0H8JMR-0tkso.roa (hash: IDdp81FcSfbScsI5eFdQ3u0Q5w/9MnWkbMQFbCRI7Lw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/080530-3f81-4479-b5a0-9a38159b794e/1/dzEQpDcE2VSd9xVuOnieYihbFpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/080530-3f81-4479-b5a0-9a38159b794e/1/dzEQpDcE2VSd9xVuOnieYihbFpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/dzEQpDcE2VSd9xVuOnieYihbFpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:1a:48:6f:35:a5:9e:55:d3:c4:c1:36:ac:a9:35:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=773110a43704d9549df7156e3a789e62285b1693
Validity
Not Before: Jun 15 01:00:37 2025 GMT
Not After : Jun 16 01:00:37 2025 GMT
Subject: CN=ce158ed40d94f94e953fd38c74a11985675ed708
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:31:e7:4d:2a:a4:5a:14:f4:85:55:de:96:a3:
aa:5f:ab:e8:84:55:cb:bb:8f:a6:4b:96:71:72:66:
c7:15:f3:ab:e0:4c:35:7a:78:08:4b:bd:53:d9:3f:
0c:21:a6:e3:01:57:68:cd:ec:9f:31:e8:07:dc:7a:
20:e6:f3:56:30:05:e4:78:51:a0:c0:e1:bc:55:d2:
81:64:ad:7a:e0:15:16:ae:87:2f:5d:eb:3c:26:4f:
0c:5d:d7:d6:e3:e3:2c:d2:8a:4f:7c:61:d0:9a:7c:
6f:77:54:ff:f8:9b:e3:7b:7d:9d:b6:bc:17:62:a5:
d6:d6:f1:e8:57:c8:99:f0:d2:05:67:71:d1:53:b4:
50:26:dc:00:d8:51:aa:80:e4:ee:cb:f1:ec:84:b4:
74:b5:7b:aa:08:b1:df:44:d7:21:e3:ac:54:a9:f8:
4a:12:f3:58:05:9d:5d:84:d9:79:20:90:ad:b1:80:
ee:c1:6b:a8:14:bc:13:ca:ae:aa:cb:9e:1d:be:77:
c5:1b:9b:ea:74:c1:2a:43:a5:1b:f2:cf:31:6d:ff:
6d:6a:8a:c0:f8:8c:70:f6:92:67:46:8e:5e:54:04:
8c:a5:55:8e:0e:bd:a5:94:80:bc:d9:40:c0:4e:59:
42:92:19:fa:5f:2f:a8:4f:e2:c0:07:d1:72:b6:06:
a0:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:15:8E:D4:0D:94:F9:4E:95:3F:D3:8C:74:A1:19:85:67:5E:D7:08
X509v3 Authority Key Identifier:
keyid:77:31:10:A4:37:04:D9:54:9D:F7:15:6E:3A:78:9E:62:28:5B:16:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dzEQpDcE2VSd9xVuOnieYihbFpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/080530-3f81-4479-b5a0-9a38159b794e/1/dzEQpDcE2VSd9xVuOnieYihbFpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/080530-3f81-4479-b5a0-9a38159b794e/1/dzEQpDcE2VSd9xVuOnieYihbFpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:ec:bf:e4:ad:8b:fd:ee:7a:ff:0b:09:01:83:67:90:98:92:
24:fb:8c:48:6a:75:67:e8:87:70:b2:34:3d:12:84:67:ca:db:
93:50:21:36:27:07:56:7c:a4:e8:68:68:4b:90:84:95:38:aa:
55:84:fd:c2:29:68:78:43:01:73:af:80:b9:bc:9d:22:72:d2:
4f:68:0a:69:74:20:6f:d5:37:ea:78:60:ac:f6:7f:8b:d1:ff:
7b:7d:e7:ff:34:82:f4:93:54:70:e6:fe:72:80:f6:f0:b8:80:
f0:a0:86:ad:08:e8:16:d3:ff:ed:c4:4b:b3:21:2b:f2:e2:b8:
05:c5:de:54:7e:a7:ec:a6:9a:d5:75:2f:4e:98:54:5f:f0:13:
f3:d9:77:1a:a9:37:e0:84:73:e1:cc:13:7b:ba:6d:f4:b4:90:
4a:ad:3d:01:29:78:e6:7c:3f:8a:20:e0:45:03:72:cb:fc:aa:
92:36:9e:fb:76:7c:2d:af:bd:02:91:7f:1c:db:57:f9:86:6f:
a7:39:a1:b3:a1:39:b2:0e:3f:ca:86:dc:1f:a5:e9:78:28:03:
77:9f:42:3a:1d:b3:a1:73:c0:29:5c:c2:31:fb:89:80:e7:93:
13:bc:3f:f5:b1:5e:8c:1c:6b:40:be:b7:32:9b:a9:88:73:25:
e3:d6:1b:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 03:54:07 2025 by rpki-client