Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/DU7hk7MBZltW9ngPIl_UTRRAk68.mft
File: DU7hk7MBZltW9ngPIl_UTRRAk68.mft (raw, json)
Hash identifier: FEOtiEMWW6T4tqJrMdZmSR60F7QomSe7WnfBboXSBhw=
Subject key identifier: 95:56:9F:7B:0F:85:A5:76:4B:E7:CB:AD:51:6C:32:B9:08:CA:11:FC
Authority key identifier: 0D:4E:E1:93:B3:01:66:5B:56:F6:78:0F:22:5F:D4:4D:14:40:93:AF
Certificate issuer: /CN=0d4ee193b301665b56f6780f225fd44d144093af
Certificate serial: 019769979A408462E080B99C13AA75290E14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DU7hk7MBZltW9ngPIl_UTRRAk68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/DU7hk7MBZltW9ngPIl_UTRRAk68.mft
Manifest number: 1591
Signing time: Fri 13 Jun 2025 14:00:32 +0000
Manifest this update: Fri 13 Jun 2025 14:00:32 +0000
Manifest next update: Sat 14 Jun 2025 14:00:32 +0000
Files and hashes: 1: 1YRiu8peow1lTJm9FFHNR8FDAbc.roa (hash: M9tDjK8KKMnpI4O/RkjitSO923bPcK4J9p0X6jE60uA=)
2: 5PEhmSsylF5Cqau7beHA-5hPtJA.roa (hash: qg7bbX5JQ150gt7VxDeJGfpKO/e8RwLdHWGQ9Drrzh4=)
3: DU7hk7MBZltW9ngPIl_UTRRAk68.crl (hash: +Eva6aJkeaH+ONFtAzozYVf6EtO3eYJkkYJVctF52DQ=)
4: Rywj_aQoQHnt260cmm4BjBhDxUY.roa (hash: YR+g76t/hDT4XdE58vT7jt0pb9k9/4GBzS42rk3Jatg=)
5: WrHytc5z_RMrlF1ugU748saPCOY.roa (hash: aZHYeaaNVTa6TtaiWMmR/j6toZEkqeQ4kR1tqb6QqNc=)
6: Z0NstpNFGmZvTmitOe-bpzN3pog.roa (hash: vOxHYK5BHjTLsLb9PBk4RNol3oeaceKJ5r4uuQeEoSc=)
7: bEQstBMsIq-USPnqf3A5IqnOEVs.roa (hash: dlwl7Y9SvRWuBlEJJDLRBkmdTgGXUzcp/rFQfnHi1fE=)
8: m6l4SopMeawwf-xaFHTLkByhnNs.roa (hash: S7Ljuk3eaMITMnrAZF6Kgxf8yU/v0CtwtarS6ZzuIMk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/DU7hk7MBZltW9ngPIl_UTRRAk68.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/DU7hk7MBZltW9ngPIl_UTRRAk68.mft
rsync://rpki.ripe.net/repository/DEFAULT/DU7hk7MBZltW9ngPIl_UTRRAk68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:97:9a:40:84:62:e0:80:b9:9c:13:aa:75:29:0e:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d4ee193b301665b56f6780f225fd44d144093af
Validity
Not Before: Jun 13 14:00:32 2025 GMT
Not After : Jun 14 14:00:32 2025 GMT
Subject: CN=95569f7b0f85a5764be7cbad516c32b908ca11fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:cb:8a:b9:b5:de:28:31:48:e2:37:2a:7f:97:
58:72:c9:50:8a:58:ea:87:e7:da:7c:e5:d0:7f:85:
3b:34:01:46:78:ab:75:b1:cb:5a:74:51:5e:13:78:
1e:34:91:04:32:7c:b1:6e:0b:f2:cc:59:40:a4:c2:
c3:61:f6:82:e1:24:65:1f:b6:35:ae:f1:69:7e:46:
70:10:99:b8:42:31:06:af:72:d5:4c:bb:5f:6f:f4:
66:4e:8a:a6:d7:57:d8:da:26:89:ba:f5:10:85:01:
8b:ca:cb:f1:d1:02:a7:ab:21:f7:08:21:b0:35:b0:
74:4c:3c:b0:86:ad:52:e7:82:84:ff:c7:91:9e:0d:
b8:04:d0:76:8d:9f:c5:14:c5:aa:1b:15:66:76:25:
20:98:bd:52:18:cd:6f:5d:80:31:65:28:58:da:79:
c8:a1:04:68:f8:c9:8c:74:d4:1f:8d:b3:da:e1:95:
51:b3:73:74:80:c6:05:54:85:35:49:58:fc:ca:07:
cb:15:cd:a3:ee:1c:de:98:c2:da:42:45:d5:7c:19:
c3:d3:ef:03:35:07:65:7f:a1:19:18:c9:42:48:92:
13:7c:ff:73:d8:52:b5:0d:43:5e:cb:c2:36:2e:3a:
93:90:5f:7c:c3:0e:d9:f1:f0:ee:04:66:79:fc:78:
94:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:56:9F:7B:0F:85:A5:76:4B:E7:CB:AD:51:6C:32:B9:08:CA:11:FC
X509v3 Authority Key Identifier:
keyid:0D:4E:E1:93:B3:01:66:5B:56:F6:78:0F:22:5F:D4:4D:14:40:93:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DU7hk7MBZltW9ngPIl_UTRRAk68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/DU7hk7MBZltW9ngPIl_UTRRAk68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/DU7hk7MBZltW9ngPIl_UTRRAk68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:da:84:b3:a4:b6:48:38:59:20:4c:92:b0:a9:be:85:58:09:
4e:1b:eb:7e:62:4f:51:ed:97:ff:2c:5e:e2:c2:65:c9:96:4f:
d2:64:1b:7e:09:55:f6:87:2a:99:03:1e:54:27:a2:e1:7e:fc:
43:1c:48:01:5f:9a:ed:7f:f6:28:77:03:cc:71:da:26:fc:32:
29:33:20:bf:fc:60:16:10:ac:d9:a8:25:0c:a7:2c:0e:f4:e4:
d9:c1:dd:ae:35:cd:4b:95:92:be:37:88:fb:f2:a7:ae:14:e9:
8f:5e:f0:92:35:60:89:38:8e:5c:3a:4a:8a:c3:ab:a0:2d:bf:
10:3b:35:bb:7c:df:2f:b7:65:ba:3d:ed:95:19:8a:22:b1:01:
48:bb:3c:15:be:b0:d9:78:ae:3b:62:ca:88:94:b1:5b:68:a4:
e4:52:de:3e:f1:4c:d8:d6:7a:9a:dc:2c:50:6e:ce:08:11:67:
e6:7f:ba:d5:6e:e0:76:a0:a6:d9:a9:84:e2:1a:78:09:82:9a:
92:15:df:77:9b:f9:e6:81:d1:91:09:05:f2:1c:49:3a:43:c5:
45:4d:eb:86:92:9e:41:97:45:cd:1b:b4:d7:34:89:bf:6b:62:
0b:e9:1c:46:5b:a6:f1:c9:a0:c4:57:29:27:86:c9:7a:fd:b9:
57:f1:ed:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:39:54 2025 by rpki-client