Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/e66a35-f6b2-4e3b-a43a-18e8b9814695/1/druWg5UW9vs1BsYgZNY9YoeaUnc.mft
File: druWg5UW9vs1BsYgZNY9YoeaUnc.mft (raw, json)
Hash identifier: XKrR3SLQsXhOvvmpk4Y96Zf4UWbwHU89fTBYigNdHb8=
Subject key identifier: D4:76:28:0A:4E:A6:95:F0:D2:05:70:BC:74:66:57:7C:4A:CF:1C:72
Authority key identifier: 76:BB:96:83:95:16:F6:FB:35:06:C6:20:64:D6:3D:62:87:9A:52:77
Certificate issuer: /CN=76bb96839516f6fb3506c62064d63d62879a5277
Certificate serial: 01976F6300EB3E8125A79B1E802A0F07BB97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/druWg5UW9vs1BsYgZNY9YoeaUnc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/e66a35-f6b2-4e3b-a43a-18e8b9814695/1/druWg5UW9vs1BsYgZNY9YoeaUnc.mft
Manifest number: 0F9F
Signing time: Sat 14 Jun 2025 17:00:48 +0000
Manifest this update: Sat 14 Jun 2025 17:00:48 +0000
Manifest next update: Sun 15 Jun 2025 17:00:48 +0000
Files and hashes: 1: A0Dli097tMkIVnJa3m1bqPYzScQ.roa (hash: xNtn+JNQ7hliFuQK823llLTpPPrEWU/YIk1KW2YsDWg=)
2: druWg5UW9vs1BsYgZNY9YoeaUnc.crl (hash: S0g+oQkcYl/jyWxKAIW9NKQuj0P9Hvee+7fFtfZeN+8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/e66a35-f6b2-4e3b-a43a-18e8b9814695/1/druWg5UW9vs1BsYgZNY9YoeaUnc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/e66a35-f6b2-4e3b-a43a-18e8b9814695/1/druWg5UW9vs1BsYgZNY9YoeaUnc.mft
rsync://rpki.ripe.net/repository/DEFAULT/druWg5UW9vs1BsYgZNY9YoeaUnc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:63:00:eb:3e:81:25:a7:9b:1e:80:2a:0f:07:bb:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76bb96839516f6fb3506c62064d63d62879a5277
Validity
Not Before: Jun 14 17:00:48 2025 GMT
Not After : Jun 15 17:00:48 2025 GMT
Subject: CN=d476280a4ea695f0d20570bc7466577c4acf1c72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:28:28:8b:06:a9:3f:17:c1:58:ac:49:5b:7d:
be:16:ae:0c:7e:df:d3:25:52:be:b5:cc:48:68:75:
77:22:4b:c2:1e:e8:dc:f1:69:98:be:da:af:b1:38:
91:d8:44:3a:52:81:96:32:4d:6e:4a:70:e3:ea:a1:
35:aa:72:53:91:a1:ea:ca:e7:09:f9:9f:2e:c3:f5:
b5:b1:9f:f9:94:d3:16:70:9d:f6:93:33:6a:42:5e:
de:1f:e9:58:fc:f8:82:e2:6e:bb:de:12:0a:66:88:
3e:76:1b:7a:5e:44:aa:dd:fc:e7:90:e9:92:28:3b:
3d:b8:55:88:91:95:77:f1:66:31:c5:a0:4e:5c:a8:
46:5a:b4:4a:47:18:59:bd:fb:e2:29:88:8e:8e:a3:
6e:a8:f4:93:bb:31:88:a4:b4:3a:ad:25:b6:48:82:
a1:e4:c1:22:8c:ca:2b:e0:0e:d4:c0:84:4e:92:9e:
88:c6:16:b7:b2:0c:0e:4b:03:24:33:df:ef:e1:09:
57:7f:05:ba:08:c1:53:26:d6:ae:a0:6f:11:00:23:
19:32:fa:67:2f:d2:76:d8:8c:98:a4:ad:2d:06:0b:
a7:ad:1c:21:c6:3c:ea:ef:85:ab:39:50:d5:c5:b1:
4b:ac:37:9c:05:7c:ea:6f:bd:40:63:b2:fb:8d:13:
e8:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:76:28:0A:4E:A6:95:F0:D2:05:70:BC:74:66:57:7C:4A:CF:1C:72
X509v3 Authority Key Identifier:
keyid:76:BB:96:83:95:16:F6:FB:35:06:C6:20:64:D6:3D:62:87:9A:52:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/druWg5UW9vs1BsYgZNY9YoeaUnc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e66a35-f6b2-4e3b-a43a-18e8b9814695/1/druWg5UW9vs1BsYgZNY9YoeaUnc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e66a35-f6b2-4e3b-a43a-18e8b9814695/1/druWg5UW9vs1BsYgZNY9YoeaUnc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:43:08:21:1e:6a:b7:bc:e4:dd:d4:b5:0f:d1:a8:2d:b4:19:
3a:28:30:48:6f:ce:6d:7a:3c:81:eb:74:65:8e:c5:95:34:27:
e7:52:1c:67:f5:ed:ad:46:57:1d:f2:5e:f2:66:eb:ca:57:82:
ed:39:1e:ae:79:db:0f:8d:de:f9:a9:0d:20:97:df:7f:ae:ef:
81:89:83:ba:9f:50:a2:65:c0:9c:de:29:ad:e9:a9:0e:c1:f8:
01:ff:91:ea:5f:09:0b:1a:70:2e:de:72:84:7b:43:86:c4:20:
90:27:d5:75:5d:e5:23:8c:94:75:b9:5d:ca:89:1d:9b:10:73:
e5:5b:94:1f:94:f1:c4:51:f3:cb:15:2d:df:5d:0d:31:02:09:
65:d3:45:f7:55:05:f3:d0:69:48:01:9d:f5:94:a0:9f:1e:8a:
40:24:8e:64:67:f4:29:3d:b8:f7:fb:42:cd:20:a9:48:15:50:
22:08:95:01:e5:a0:83:45:b0:f6:da:95:28:5c:fe:0d:e1:f6:
54:39:5d:41:92:86:5b:9d:43:5d:71:a1:43:fb:12:cc:63:da:
7f:ae:7d:71:ac:40:e1:83:85:e9:32:6a:ac:82:e9:92:9f:f2:
7d:5e:99:ab:70:36:b5:39:97:c5:06:23:9a:b5:47:4e:a1:be:
67:76:a0:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 22:37:31 2025 by rpki-client