Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/0acf2d-5d62-43f3-8d14-4e0cc58163b0/1/d2-uQ_c9o1_houQpZirguRdR4_s.mft
File: d2-uQ_c9o1_houQpZirguRdR4_s.mft (raw, json)
Hash identifier: eOM5miF9kAbCk8vMoeJu1g2mZf2EfGPJi4glkb0vy4I=
Subject key identifier: 73:99:71:6C:4D:2D:6A:9B:30:BB:99:30:FF:9C:8B:A6:9E:A1:AE:3A
Authority key identifier: 77:6F:AE:43:F7:3D:A3:5F:E1:A2:E4:29:66:2A:E0:B9:17:51:E3:FB
Certificate issuer: /CN=776fae43f73da35fe1a2e429662ae0b91751e3fb
Certificate serial: 0197684E85529B97AA9761E55083592454CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d2-uQ_c9o1_houQpZirguRdR4_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/0acf2d-5d62-43f3-8d14-4e0cc58163b0/1/d2-uQ_c9o1_houQpZirguRdR4_s.mft
Manifest number: 12B1
Signing time: Fri 13 Jun 2025 08:01:05 +0000
Manifest this update: Fri 13 Jun 2025 08:01:05 +0000
Manifest next update: Sat 14 Jun 2025 08:01:05 +0000
Files and hashes: 1: BIbyN6MobH1STyCEPdXKcXxO-0I.roa (hash: Os4l0m9oxr0hmnuszsL7ZwnRaiayTTQWv9r3AFurnXg=)
2: Bbz0bBQb7OvBUdzdUU2fR0aTHW0.roa (hash: oXnG95uJE4GWCusPMitN/8TOoOTM8j2qb4pX4QMQ5u0=)
3: bdDCotOAfO1kv_FK4imM3A-Vth0.roa (hash: SflKXIddgIp/qAd1Zs2morymiezh6i6wy0uu+gUqlSk=)
4: d2-uQ_c9o1_houQpZirguRdR4_s.crl (hash: atTomTECgdo0r0K5VTOoMxJFxeDVl8OJg3Z5HkUZ8gY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/0acf2d-5d62-43f3-8d14-4e0cc58163b0/1/d2-uQ_c9o1_houQpZirguRdR4_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/0acf2d-5d62-43f3-8d14-4e0cc58163b0/1/d2-uQ_c9o1_houQpZirguRdR4_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/d2-uQ_c9o1_houQpZirguRdR4_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 08:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:4e:85:52:9b:97:aa:97:61:e5:50:83:59:24:54:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=776fae43f73da35fe1a2e429662ae0b91751e3fb
Validity
Not Before: Jun 13 08:01:05 2025 GMT
Not After : Jun 14 08:01:05 2025 GMT
Subject: CN=7399716c4d2d6a9b30bb9930ff9c8ba69ea1ae3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:1d:82:db:b3:7a:8f:a2:65:67:75:a2:7b:3d:
92:62:8a:62:25:7b:b3:a5:25:64:23:1d:e4:64:bd:
97:2c:c3:e8:4d:39:14:8a:94:29:19:f5:a4:fb:e8:
93:a3:21:9e:97:36:f0:a2:4a:5a:c5:cd:d0:73:62:
c2:32:c9:a0:3f:6c:2f:27:3e:bf:30:aa:f6:9a:3f:
2f:81:98:51:59:68:ce:8c:71:86:b2:9c:0c:93:4b:
86:b4:7a:04:31:d7:92:03:ad:46:d4:fb:a0:96:41:
03:15:f8:3b:67:e1:ad:bc:a0:48:07:0b:b2:c7:9c:
a9:e2:ad:d1:0f:90:08:62:27:92:90:62:35:d9:fe:
17:82:01:a1:9a:4c:4d:b9:8c:9a:28:cc:a6:36:40:
63:d5:c5:2a:da:8c:48:4b:f1:78:46:68:aa:2e:b3:
b8:eb:67:ee:30:7e:57:5f:ff:8d:2d:29:5c:6d:e7:
5a:fd:34:f1:54:06:9e:a2:cc:01:6d:19:33:7b:77:
1c:23:64:82:56:7c:68:20:f8:f8:b5:e3:c0:65:b1:
32:69:34:ec:8c:3f:80:f8:27:7a:b2:f5:2a:a9:91:
d1:a6:c6:82:99:fe:7c:55:fa:7b:04:ea:57:3a:4e:
c8:10:12:f3:c6:58:46:6e:db:11:e4:bc:51:03:3f:
54:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:99:71:6C:4D:2D:6A:9B:30:BB:99:30:FF:9C:8B:A6:9E:A1:AE:3A
X509v3 Authority Key Identifier:
keyid:77:6F:AE:43:F7:3D:A3:5F:E1:A2:E4:29:66:2A:E0:B9:17:51:E3:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2-uQ_c9o1_houQpZirguRdR4_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/0acf2d-5d62-43f3-8d14-4e0cc58163b0/1/d2-uQ_c9o1_houQpZirguRdR4_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/0acf2d-5d62-43f3-8d14-4e0cc58163b0/1/d2-uQ_c9o1_houQpZirguRdR4_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:fb:11:91:03:b6:ce:5b:e5:4c:04:d0:65:25:2e:98:f2:9e:
d7:26:47:8d:0a:99:bc:dc:42:9d:6d:b7:06:05:a4:fd:d9:03:
f9:b9:01:fe:94:48:b1:ed:35:91:22:57:47:6e:96:da:f6:3e:
b9:85:bf:1e:8b:1f:74:8d:13:ed:20:32:d6:b3:a1:a3:40:86:
c8:cb:19:de:68:be:e0:fe:60:4a:0c:98:db:03:e7:c5:b7:9d:
3a:ed:56:dc:1b:75:35:20:08:c3:3a:72:d7:eb:fb:d6:34:38:
90:16:78:a5:08:05:85:27:3a:b8:b8:ac:f0:d6:84:b3:21:29:
69:19:5b:bb:2b:44:6f:3b:7b:af:09:9f:6f:ba:23:13:21:1b:
fe:cb:3f:38:ee:dc:75:7f:2f:ca:4e:0d:d4:5e:f3:32:59:6b:
04:cb:88:5d:4b:89:56:38:39:e5:82:27:7e:b2:c6:64:61:bb:
ce:6c:15:a7:58:30:a0:0b:b5:27:30:c2:99:c5:df:19:03:48:
95:56:78:13:28:c3:ac:0f:75:02:81:19:14:74:ad:ce:79:d6:
68:60:5b:56:8a:94:33:16:25:c8:aa:bc:f3:d8:f9:d7:3c:ef:
7a:e9:d3:65:3a:f6:4c:7c:74:06:aa:9e:b7:aa:8a:0d:51:05:
aa:a0:fd:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:00:18 2025 by rpki-client