Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/14e4c2-8a98-456e-9612-9429da87bd50/1/dK6UGmgcFYY3ngckfcwZ8_QQNdg.mft
File: dK6UGmgcFYY3ngckfcwZ8_QQNdg.mft (raw, json)
Hash identifier: 5deGKQdKj+zRanJClEnD+keJvqyi+OTVw7oxKa26WFQ=
Subject key identifier: D1:B7:9A:F7:A6:09:84:07:6A:E7:32:5B:6D:C8:0E:C6:4B:CA:34:27
Authority key identifier: 74:AE:94:1A:68:1C:15:86:37:9E:07:24:7D:CC:19:F3:F4:10:35:D8
Certificate issuer: /CN=74ae941a681c1586379e07247dcc19f3f41035d8
Certificate serial: 01977A1D44C372D5FF46DD43F3F973C89F10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dK6UGmgcFYY3ngckfcwZ8_QQNdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/14e4c2-8a98-456e-9612-9429da87bd50/1/dK6UGmgcFYY3ngckfcwZ8_QQNdg.mft
Manifest number: 0D33
Signing time: Mon 16 Jun 2025 19:00:27 +0000
Manifest this update: Mon 16 Jun 2025 19:00:27 +0000
Manifest next update: Tue 17 Jun 2025 19:00:27 +0000
Files and hashes: 1: aRphps94ueev9_cb0Fbr1t6EWos.roa (hash: qY/6yr4D72wfd0je0UgbA5pXBnLSwy4IbEDXkYKHi6c=)
2: dK6UGmgcFYY3ngckfcwZ8_QQNdg.crl (hash: vUiy9H9DpNBNEyfEqMv4V/NeDNZGZhOwv+gRBCW87FU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/14e4c2-8a98-456e-9612-9429da87bd50/1/dK6UGmgcFYY3ngckfcwZ8_QQNdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/14e4c2-8a98-456e-9612-9429da87bd50/1/dK6UGmgcFYY3ngckfcwZ8_QQNdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/dK6UGmgcFYY3ngckfcwZ8_QQNdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 19:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7a:1d:44:c3:72:d5:ff:46:dd:43:f3:f9:73:c8:9f:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74ae941a681c1586379e07247dcc19f3f41035d8
Validity
Not Before: Jun 16 19:00:27 2025 GMT
Not After : Jun 17 19:00:27 2025 GMT
Subject: CN=d1b79af7a60984076ae7325b6dc80ec64bca3427
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:5d:fc:f1:11:39:72:eb:62:11:de:a4:a2:0f:
21:e0:0d:4b:46:a2:03:fa:59:8f:27:a9:1d:3b:fc:
ff:0e:d7:e5:d2:86:23:4c:46:d6:a1:0f:d8:0f:f4:
6b:f6:6a:19:be:a6:b2:95:29:23:3c:3f:d1:5b:d6:
4f:96:95:23:b8:f0:57:4e:9b:6b:32:06:31:a8:c4:
d7:16:39:60:62:ee:17:70:84:b3:56:11:83:63:ec:
28:a0:08:7d:24:a8:cd:09:a0:9e:ba:58:7e:58:55:
3b:34:06:1c:54:bf:f7:3e:4a:00:9c:02:16:23:80:
a6:a3:d2:8b:d6:1f:28:5b:31:cc:ab:05:85:84:7c:
62:f6:8c:b2:5f:f5:da:d3:ae:a7:bf:7b:42:d0:05:
a2:48:34:0b:25:c8:c7:72:9d:a9:e7:7c:77:d1:43:
ab:bf:06:98:cb:3e:b8:19:1f:ed:02:ad:50:ca:fd:
b2:d6:a5:78:46:f3:fb:7c:85:d1:c9:0d:88:2a:b8:
c0:d0:09:40:0e:99:9f:72:5f:cf:a6:5f:f6:ed:58:
e7:87:66:52:24:60:9e:d1:48:3b:89:3b:01:4e:c3:
28:fd:08:3b:fb:6a:f2:79:04:1d:fd:b4:8a:85:82:
17:ff:8b:47:c0:00:53:28:d0:c2:87:9e:e1:58:52:
09:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:B7:9A:F7:A6:09:84:07:6A:E7:32:5B:6D:C8:0E:C6:4B:CA:34:27
X509v3 Authority Key Identifier:
keyid:74:AE:94:1A:68:1C:15:86:37:9E:07:24:7D:CC:19:F3:F4:10:35:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dK6UGmgcFYY3ngckfcwZ8_QQNdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/14e4c2-8a98-456e-9612-9429da87bd50/1/dK6UGmgcFYY3ngckfcwZ8_QQNdg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/14e4c2-8a98-456e-9612-9429da87bd50/1/dK6UGmgcFYY3ngckfcwZ8_QQNdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:05:70:9d:1e:b3:0f:c1:8e:96:d2:1d:ef:f9:26:62:28:56:
c5:ca:3f:2c:ae:5c:82:77:0c:93:b7:cf:4b:41:a4:e4:24:2e:
87:f3:cf:52:45:d9:05:3b:bb:1b:f8:15:c9:0a:57:18:95:54:
9a:c5:70:16:c7:fd:eb:10:ca:a3:f9:5f:88:31:10:e3:b5:4a:
c8:3f:10:ee:c9:73:c5:f9:e8:a4:63:6e:c6:98:da:74:df:63:
75:e9:f0:e7:4b:a6:f0:a5:76:93:04:6c:0a:19:f5:d9:71:bd:
d5:09:91:88:ab:95:4e:c6:93:56:1d:76:4b:9e:78:fe:6f:20:
c0:01:7a:d6:6e:38:01:33:d5:f9:eb:78:a2:ce:d4:c4:c7:ed:
22:41:d6:d6:f2:65:0f:7f:dc:11:b4:02:23:13:48:be:ac:35:
f0:45:32:4a:1b:9f:ba:09:c9:e7:8b:ca:d4:c9:82:3a:b4:d2:
33:69:b3:37:a9:68:ba:2f:7f:e5:c8:ec:70:e5:df:49:4b:7d:
55:78:da:1b:de:98:c6:10:b1:f7:a3:cf:93:b6:6b:33:9a:8e:
c9:12:d0:43:bd:bd:53:05:93:d4:e6:da:aa:5a:8b:dd:5f:1f:
48:cb:d7:3e:04:9e:59:b8:5e:28:00:d3:b3:ce:37:41:c0:a0:
35:3a:43:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 01:27:56 2025 by rpki-client