Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/92332f-03e0-4116-b6f3-c82f424b6d0d/1/DNpch0NU2Dgm5DwlNbduINW2GwU.mft
File: DNpch0NU2Dgm5DwlNbduINW2GwU.mft (raw, json)
Hash identifier: 4Gyf5FIwry4dAPWR5IAl1qepNAr1uXb01VGptUk8ISI=
Subject key identifier: E3:D9:9B:8D:10:89:EC:50:04:AA:C4:6E:0E:5A:EF:93:15:36:8D:6C
Authority key identifier: 0C:DA:5C:87:43:54:D8:38:26:E4:3C:25:35:B7:6E:20:D5:B6:1B:05
Certificate issuer: /CN=0cda5c874354d83826e43c2535b76e20d5b61b05
Certificate serial: 01976D0688A8F953580B5B7749A3810E9669
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DNpch0NU2Dgm5DwlNbduINW2GwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/92332f-03e0-4116-b6f3-c82f424b6d0d/1/DNpch0NU2Dgm5DwlNbduINW2GwU.mft
Manifest number: 159A
Signing time: Sat 14 Jun 2025 06:00:34 +0000
Manifest this update: Sat 14 Jun 2025 06:00:34 +0000
Manifest next update: Sun 15 Jun 2025 06:00:34 +0000
Files and hashes: 1: 32CQUiCUfdquX7Jbo_dmPVa4RAU.roa (hash: FAfiLPwl0dHpiVR3Uys5QcBsWLGjmkF+BWAYhU6veIk=)
2: DNpch0NU2Dgm5DwlNbduINW2GwU.crl (hash: o2XYCS0ju8CdROKc+MYliOIQSldVzTNL8JX6wfMke/c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/92332f-03e0-4116-b6f3-c82f424b6d0d/1/DNpch0NU2Dgm5DwlNbduINW2GwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/92332f-03e0-4116-b6f3-c82f424b6d0d/1/DNpch0NU2Dgm5DwlNbduINW2GwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DNpch0NU2Dgm5DwlNbduINW2GwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:06:88:a8:f9:53:58:0b:5b:77:49:a3:81:0e:96:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cda5c874354d83826e43c2535b76e20d5b61b05
Validity
Not Before: Jun 14 06:00:34 2025 GMT
Not After : Jun 15 06:00:34 2025 GMT
Subject: CN=e3d99b8d1089ec5004aac46e0e5aef9315368d6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:51:c7:b5:f5:98:0c:89:7e:e1:9d:91:c1:d7:
ef:6a:4b:3e:b7:da:5c:3e:25:e2:ce:b3:8e:da:41:
e6:13:3b:3c:55:68:68:1a:37:65:04:31:58:06:0f:
d9:d4:ed:12:51:f9:b0:ae:e2:0f:98:bf:77:c6:82:
a9:9b:0d:06:c9:d1:25:90:67:46:7e:51:f2:ed:34:
42:54:dc:fc:bf:69:51:36:ca:97:3e:4e:aa:89:e1:
93:d6:37:6f:b7:37:3f:7c:0d:c9:92:c6:40:9a:06:
9c:13:7c:4e:2f:d5:f4:2f:ca:c5:d7:2c:5e:6d:8d:
45:33:d5:10:f6:62:55:82:c8:cf:5d:5e:71:92:8f:
e3:7b:39:57:c0:66:56:6c:38:d1:15:e3:7f:fb:01:
39:d2:c2:33:f7:30:39:80:ff:b1:74:87:11:91:dc:
51:47:cb:df:a1:24:ce:d0:5c:4c:66:04:ed:02:06:
1b:ab:0f:4a:98:a1:95:00:75:11:50:71:de:e4:19:
31:45:65:72:82:dd:84:7a:f6:8d:ff:95:5c:ba:85:
a4:0d:df:39:f8:0a:c5:f9:d2:c7:60:b1:fb:6f:3e:
8f:b3:82:a7:63:6d:ed:89:7c:64:8f:da:49:e2:41:
02:da:a9:f9:16:27:a4:b6:1a:ba:dd:0f:bb:ec:15:
30:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:D9:9B:8D:10:89:EC:50:04:AA:C4:6E:0E:5A:EF:93:15:36:8D:6C
X509v3 Authority Key Identifier:
keyid:0C:DA:5C:87:43:54:D8:38:26:E4:3C:25:35:B7:6E:20:D5:B6:1B:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DNpch0NU2Dgm5DwlNbduINW2GwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/92332f-03e0-4116-b6f3-c82f424b6d0d/1/DNpch0NU2Dgm5DwlNbduINW2GwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/92332f-03e0-4116-b6f3-c82f424b6d0d/1/DNpch0NU2Dgm5DwlNbduINW2GwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:3b:51:d5:43:08:e3:9d:38:43:83:52:7c:de:cc:44:c9:f9:
dc:fc:db:b1:49:77:94:59:4a:13:16:81:17:c9:07:95:fc:ba:
f8:38:b2:25:65:d8:db:2a:b7:81:3a:13:b3:80:13:d0:b4:95:
c0:0e:fd:ff:61:a6:46:75:bf:2c:7e:f3:54:dc:3c:cc:d4:cd:
a9:ae:f2:f4:6f:cb:58:36:e8:63:e6:97:30:18:2d:3a:4a:ad:
a2:66:e8:61:2c:a3:7d:f6:f3:e8:30:42:7b:34:26:3f:fb:47:
da:99:58:2c:97:af:62:16:90:10:16:ca:7a:d7:a2:0d:e0:a6:
ac:44:12:f6:8b:45:57:f9:50:f7:98:e3:40:37:a5:32:4a:7a:
5c:0b:fc:ac:e6:2d:c9:97:4b:81:f5:92:c9:7e:9d:ff:1d:e4:
f4:22:a5:2d:6f:23:17:09:38:13:e9:09:57:4e:75:4a:b4:ec:
1b:df:15:ae:f6:c8:49:87:75:07:2d:7d:f9:e7:ba:f3:93:09:
3b:07:6c:64:1e:86:f5:cf:71:51:ee:05:97:50:25:27:a8:bc:
f6:57:5d:fe:09:95:f3:7a:1b:1a:af:1f:08:90:7e:6d:ff:09:
b7:9d:5c:11:75:bf:dc:11:c8:29:f2:e3:96:1c:ec:24:e2:85:
ca:50:81:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:00:41 2025 by rpki-client