Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/5a3b6b-9a61-4557-a3d6-c25aba6b55af/1/dX-f3qNQp2a7mMYE07nCeRZzIgk.mft
File: dX-f3qNQp2a7mMYE07nCeRZzIgk.mft (raw, json)
Hash identifier: nqUEOhU4UrpMBWNu4vMjoOdabU0tFWBk8ehC2HaMUJ4=
Subject key identifier: FB:8F:1E:62:CD:AA:82:A5:4C:B9:8B:FC:65:8C:7F:8C:6B:A9:50:61
Authority key identifier: 75:7F:9F:DE:A3:50:A7:66:BB:98:C6:04:D3:B9:C2:79:16:73:22:09
Certificate issuer: /CN=757f9fdea350a766bb98c604d3b9c27916732209
Certificate serial: 019770E32B4E8DD57BE3738813B79F7F5619
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dX-f3qNQp2a7mMYE07nCeRZzIgk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/5a3b6b-9a61-4557-a3d6-c25aba6b55af/1/dX-f3qNQp2a7mMYE07nCeRZzIgk.mft
Manifest number: 1594
Signing time: Sun 15 Jun 2025 00:00:25 +0000
Manifest this update: Sun 15 Jun 2025 00:00:25 +0000
Manifest next update: Mon 16 Jun 2025 00:00:25 +0000
Files and hashes: 1: bXLXdbvFGFR0FszgHn84rVBOGio.roa (hash: nmNBpS+PbDPDefHKYKNVtxbPVQnu+QoIycRrjJFcsBw=)
2: dX-f3qNQp2a7mMYE07nCeRZzIgk.crl (hash: 9dedZHXjVMZJw+S7AmvJ4m7w+aFPWMCBU4YErKZ9Qx8=)
3: hKQ8LLa9--B-K86xayaw0kpiYWg.roa (hash: d0JIaOsBs7E/BdBAQ915qmU5N9B7n1lC3k/0IYxFCFU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/5a3b6b-9a61-4557-a3d6-c25aba6b55af/1/dX-f3qNQp2a7mMYE07nCeRZzIgk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/5a3b6b-9a61-4557-a3d6-c25aba6b55af/1/dX-f3qNQp2a7mMYE07nCeRZzIgk.mft
rsync://rpki.ripe.net/repository/DEFAULT/dX-f3qNQp2a7mMYE07nCeRZzIgk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:e3:2b:4e:8d:d5:7b:e3:73:88:13:b7:9f:7f:56:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=757f9fdea350a766bb98c604d3b9c27916732209
Validity
Not Before: Jun 15 00:00:25 2025 GMT
Not After : Jun 16 00:00:25 2025 GMT
Subject: CN=fb8f1e62cdaa82a54cb98bfc658c7f8c6ba95061
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:4b:4f:6e:2c:63:6f:dd:1f:7b:b9:be:ed:70:
41:6b:06:8d:b1:0a:f5:05:af:e5:9e:13:0d:61:b7:
a2:00:fb:ac:94:a7:67:4c:41:0d:5a:e3:7c:70:7f:
d3:44:45:3c:18:ae:ab:c3:08:4a:d5:4e:64:30:fc:
f2:37:04:86:a9:8f:13:b0:d0:bd:35:81:2a:32:86:
1a:e5:5a:1f:2d:ee:17:52:0f:f8:ea:72:e2:9a:a6:
87:e8:b3:59:5e:40:0a:1d:34:6f:8e:45:b2:ec:7f:
c9:95:4e:3b:58:58:c5:73:d5:29:b4:1c:28:44:88:
e1:ac:5d:c7:96:4f:02:71:db:37:ef:2f:5d:46:75:
43:11:64:d0:ac:4f:a8:49:da:e8:7e:b2:37:1c:3d:
5e:9d:98:c3:81:20:19:f8:39:00:b0:00:9e:f7:5c:
51:55:66:8b:c4:d0:02:05:5b:c2:73:c8:00:aa:70:
cc:e6:aa:32:5f:d1:e4:a8:03:a4:50:cc:09:38:ee:
01:a8:14:be:1b:91:4e:82:71:69:af:73:75:47:4f:
e9:5c:27:37:b7:11:75:cd:8d:4e:e2:ce:72:3c:22:
9c:51:80:83:f7:73:ce:f0:9b:23:69:51:c9:af:c7:
d8:0c:93:d8:c1:fc:79:da:76:67:cc:1b:de:40:71:
d3:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:8F:1E:62:CD:AA:82:A5:4C:B9:8B:FC:65:8C:7F:8C:6B:A9:50:61
X509v3 Authority Key Identifier:
keyid:75:7F:9F:DE:A3:50:A7:66:BB:98:C6:04:D3:B9:C2:79:16:73:22:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dX-f3qNQp2a7mMYE07nCeRZzIgk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/5a3b6b-9a61-4557-a3d6-c25aba6b55af/1/dX-f3qNQp2a7mMYE07nCeRZzIgk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/5a3b6b-9a61-4557-a3d6-c25aba6b55af/1/dX-f3qNQp2a7mMYE07nCeRZzIgk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:0f:77:6a:70:61:63:85:5d:39:15:d8:ba:0a:2f:26:97:12:
13:f7:a2:13:8e:bf:08:df:81:8a:bd:32:7f:2b:5f:26:ab:91:
3c:05:55:7b:76:c4:22:23:bc:56:9c:2d:df:7b:b5:b2:79:0a:
b0:2c:70:45:dd:49:1b:a3:95:2a:a9:96:e7:28:82:ce:2b:8c:
36:7d:8d:6e:11:e5:d5:f0:9c:df:b3:59:dd:89:8f:8b:31:8f:
49:67:7f:ea:3a:1d:de:cd:b1:f2:df:33:4b:d1:4c:a5:58:24:
bb:af:d3:f7:f9:73:52:d9:de:8d:79:cd:f5:d8:ef:48:0f:f0:
d4:9c:e1:73:61:ec:3a:7c:48:f3:23:51:cf:55:63:df:14:f5:
ef:e1:0d:1a:73:c2:86:58:b7:b8:39:09:dc:bd:e8:09:37:0e:
12:32:2c:a8:47:18:03:d2:b1:da:88:6d:27:74:aa:9b:c9:bb:
3b:0c:71:6c:ba:23:f4:b4:31:4b:e4:48:d4:17:7e:16:05:f1:
c9:fa:53:e3:7a:db:03:06:16:99:b5:30:a5:07:16:52:7e:03:
ed:a4:25:b5:e8:ba:ba:84:06:b5:5d:ea:b1:07:f8:a9:26:85:
5e:a5:40:f4:63:7f:b2:d2:56:5c:58:11:0f:cf:3f:74:ad:0b:
0d:b9:80:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 08:59:11 2025 by rpki-client