Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/9ec134-f04f-4423-8be5-7f5e1759f84e/1/dxBykg2MmitA6zoEXx8qbjNKRJY.mft
File: dxBykg2MmitA6zoEXx8qbjNKRJY.mft (raw, json)
Hash identifier: gmtWAiCHZAKT+yTIlHbtGZ1hbBDicH6XqC2oPIzqzTU=
Subject key identifier: B6:3D:81:84:C4:69:43:C0:0B:AA:FF:CE:41:47:F4:5A:0E:19:A4:1D
Authority key identifier: 77:10:72:92:0D:8C:9A:2B:40:EB:3A:04:5F:1F:2A:6E:33:4A:44:96
Certificate issuer: /CN=771072920d8c9a2b40eb3a045f1f2a6e334a4496
Certificate serial: 0197711B0AACBD90DC1EF4BCD67C22898BAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dxBykg2MmitA6zoEXx8qbjNKRJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/9ec134-f04f-4423-8be5-7f5e1759f84e/1/dxBykg2MmitA6zoEXx8qbjNKRJY.mft
Manifest number: 1593
Signing time: Sun 15 Jun 2025 01:01:27 +0000
Manifest this update: Sun 15 Jun 2025 01:01:27 +0000
Manifest next update: Mon 16 Jun 2025 01:01:27 +0000
Files and hashes: 1: YkTwnLLBjio1cr_ngfAfzZs1Hh0.roa (hash: Y9RRPtZapEofyZ5MjGOGJpjlqTcZ/UM1TnoKmtwIB40=)
2: dxBykg2MmitA6zoEXx8qbjNKRJY.crl (hash: qW2Baio59t0GymjgUYKVjCR8UQQy+ZsiLOedRNwaV+4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/9ec134-f04f-4423-8be5-7f5e1759f84e/1/dxBykg2MmitA6zoEXx8qbjNKRJY.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/9ec134-f04f-4423-8be5-7f5e1759f84e/1/dxBykg2MmitA6zoEXx8qbjNKRJY.mft
rsync://rpki.ripe.net/repository/DEFAULT/dxBykg2MmitA6zoEXx8qbjNKRJY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:1b:0a:ac:bd:90:dc:1e:f4:bc:d6:7c:22:89:8b:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=771072920d8c9a2b40eb3a045f1f2a6e334a4496
Validity
Not Before: Jun 15 01:01:27 2025 GMT
Not After : Jun 16 01:01:27 2025 GMT
Subject: CN=b63d8184c46943c00baaffce4147f45a0e19a41d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:15:c2:be:57:e0:ec:aa:e7:ca:f9:21:6d:67:
1c:08:71:da:e2:cf:a8:bf:6b:5f:57:35:8c:3e:19:
fa:68:2a:a9:19:be:d8:5b:13:94:da:80:67:ab:fd:
53:11:cb:77:ee:5b:b1:95:a8:a2:2e:75:33:b6:4b:
e6:38:83:dc:b1:e4:01:3c:65:4c:d4:b7:6f:2e:9f:
2b:e0:b3:d3:00:6f:28:a5:1f:e7:b8:3c:db:da:86:
6c:50:0a:3e:fb:7d:bb:ee:d4:9e:c1:4f:27:84:08:
47:72:8d:d5:ea:c6:bc:98:d5:59:dd:7d:85:cd:e0:
55:1e:60:25:a5:c1:20:12:7c:c4:1f:b6:91:7d:0b:
66:43:31:b9:a4:b2:58:bb:07:4b:e0:83:f5:ef:4f:
a0:70:b3:e5:af:2d:15:34:d1:bd:84:8f:18:fc:08:
07:bc:dd:21:17:a5:78:04:70:a2:86:61:e6:49:11:
86:c5:75:18:48:c7:2b:60:2d:6a:77:eb:6a:2c:9e:
95:84:c1:1d:4c:fc:c3:58:ff:28:fe:f8:ea:22:31:
18:e8:cc:f1:cb:c8:77:f7:64:ea:0e:0c:ae:df:8f:
f6:52:8c:74:30:8b:90:d3:e3:fc:70:0d:89:72:17:
90:4c:4f:4d:48:75:9c:c3:cc:d2:f1:69:9a:aa:32:
8c:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:3D:81:84:C4:69:43:C0:0B:AA:FF:CE:41:47:F4:5A:0E:19:A4:1D
X509v3 Authority Key Identifier:
keyid:77:10:72:92:0D:8C:9A:2B:40:EB:3A:04:5F:1F:2A:6E:33:4A:44:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dxBykg2MmitA6zoEXx8qbjNKRJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/9ec134-f04f-4423-8be5-7f5e1759f84e/1/dxBykg2MmitA6zoEXx8qbjNKRJY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/9ec134-f04f-4423-8be5-7f5e1759f84e/1/dxBykg2MmitA6zoEXx8qbjNKRJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:e7:3f:22:3b:8a:f8:39:ce:55:57:c4:b4:6d:52:58:ba:7a:
a8:5f:66:87:4b:0c:9a:d3:4d:fa:8e:c1:5b:85:9e:1b:b2:5b:
9d:4f:37:3d:10:90:2a:67:08:6e:8a:9d:ae:3c:dc:8f:4b:8f:
db:87:83:44:90:df:d3:71:9b:ce:ea:da:fb:23:34:52:e9:17:
f8:49:14:69:6d:22:b1:42:b7:d0:36:14:43:2b:ff:f9:40:ca:
2c:7e:68:ae:a2:fc:e2:0a:18:64:9b:04:40:e8:54:24:02:72:
6e:31:88:c1:d6:fb:9d:c7:ba:c6:0b:1c:f4:e9:37:68:13:e8:
53:c7:4a:c4:d0:be:17:c4:3a:dc:c4:3c:00:4f:71:d4:48:4f:
50:c5:f9:15:60:ee:63:2c:88:20:d5:b0:1f:64:2a:bc:4f:04:
e1:fc:0d:9f:10:54:47:d1:4a:9d:bc:ec:5a:07:12:ad:c6:32:
b2:4d:81:0a:64:d9:9b:40:19:5f:0d:28:2f:c4:cf:be:6e:de:
df:d0:6a:a7:dd:57:31:f9:66:75:54:d1:de:8f:5c:2a:e9:0c:
fc:01:8f:68:59:45:e7:02:6c:53:9d:10:56:6b:4d:38:77:d3:
14:e9:db:b7:b1:2e:4d:f4:7d:da:52:a8:5d:74:f2:98:c7:bf:
e0:75:99:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 08:37:29 2025 by rpki-client