Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/9ba504-02af-4972-b0b9-822de9308e01/1/Djaq1zNfNOTNgpQjvrCJxOCk6HQ.mft
File: Djaq1zNfNOTNgpQjvrCJxOCk6HQ.mft (raw, json)
Hash identifier: oQFp/G2jkj+JMy1Oai3ge6jiHXtuFbJxOtqsHFrJp1Q=
Subject key identifier: BB:37:43:3A:4C:FD:36:44:C6:5C:78:B7:C3:3D:7F:14:45:BA:6B:4F
Authority key identifier: 0E:36:AA:D7:33:5F:34:E4:CD:82:94:23:BE:B0:89:C4:E0:A4:E8:74
Certificate issuer: /CN=0e36aad7335f34e4cd829423beb089c4e0a4e874
Certificate serial: 019795CCB0C4DBEEA4E8D5FAF1ADD9FAA97C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Djaq1zNfNOTNgpQjvrCJxOCk6HQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/9ba504-02af-4972-b0b9-822de9308e01/1/Djaq1zNfNOTNgpQjvrCJxOCk6HQ.mft
Manifest number: 15A5
Signing time: Sun 22 Jun 2025 04:01:49 +0000
Manifest this update: Sun 22 Jun 2025 04:01:49 +0000
Manifest next update: Mon 23 Jun 2025 04:01:49 +0000
Files and hashes: 1: 8o1O-t_WKzJXOkGFsMQUN6blBp0.roa (hash: KBCGb1hk/sBmmTgro2o9IaPB/nx00oBvONm6CxD0Y2w=)
2: Djaq1zNfNOTNgpQjvrCJxOCk6HQ.crl (hash: yeeQCPalrw7t3B9Wfdj7J+cR9eoSnSPLOFfRNRyeGsQ=)
3: aW93vIod8bw9akpUiGgWH-EgLiE.roa (hash: qyblENK3boODcPRYexEWYW0qmMFYuF1Qh/Vo8m2KhS0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/9ba504-02af-4972-b0b9-822de9308e01/1/Djaq1zNfNOTNgpQjvrCJxOCk6HQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/9ba504-02af-4972-b0b9-822de9308e01/1/Djaq1zNfNOTNgpQjvrCJxOCk6HQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Djaq1zNfNOTNgpQjvrCJxOCk6HQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 23 Jun 2025 01:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:95:cc:b0:c4:db:ee:a4:e8:d5:fa:f1:ad:d9:fa:a9:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e36aad7335f34e4cd829423beb089c4e0a4e874
Validity
Not Before: Jun 22 04:01:49 2025 GMT
Not After : Jun 23 04:01:49 2025 GMT
Subject: CN=bb37433a4cfd3644c65c78b7c33d7f1445ba6b4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:0a:9e:a4:0a:2d:03:e3:58:26:6c:8e:b6:e4:
75:9c:0b:0e:c6:ce:d5:f6:03:df:81:e0:aa:8e:40:
84:02:c9:cc:90:6d:c9:19:51:6f:25:56:61:69:39:
ff:09:08:de:be:09:69:81:de:e5:dd:32:15:a4:c5:
09:9a:eb:2f:c2:d8:60:82:38:61:62:e9:ad:68:9c:
5d:e4:06:f4:5f:ca:61:ab:a7:75:69:9d:36:44:42:
78:79:7c:97:7c:34:f3:30:f5:04:98:b6:36:3e:cc:
fa:1f:82:b3:59:92:88:2e:b5:f3:06:10:2c:46:3f:
32:fb:1f:fd:8e:86:94:09:95:76:ba:d8:4b:46:ce:
93:e9:29:7e:53:95:ef:e5:44:fe:35:30:d1:b4:b5:
37:b6:c7:b9:1f:f4:0b:d8:23:80:09:50:66:23:48:
1f:59:63:b5:5e:76:bc:94:70:c4:a5:39:33:78:c9:
2f:7e:d0:90:a1:25:18:3f:64:af:7d:8c:1a:05:84:
40:eb:b4:72:f0:2b:ea:a4:3a:37:52:62:fc:c4:38:
51:5a:ea:a7:2c:d6:8c:ef:8c:8d:95:32:67:32:78:
66:43:12:a0:1c:72:76:74:2a:c3:12:c8:e5:0d:03:
26:37:cf:76:ea:ea:a7:fb:47:1a:e4:43:6d:36:3d:
ca:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:37:43:3A:4C:FD:36:44:C6:5C:78:B7:C3:3D:7F:14:45:BA:6B:4F
X509v3 Authority Key Identifier:
keyid:0E:36:AA:D7:33:5F:34:E4:CD:82:94:23:BE:B0:89:C4:E0:A4:E8:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Djaq1zNfNOTNgpQjvrCJxOCk6HQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/9ba504-02af-4972-b0b9-822de9308e01/1/Djaq1zNfNOTNgpQjvrCJxOCk6HQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/9ba504-02af-4972-b0b9-822de9308e01/1/Djaq1zNfNOTNgpQjvrCJxOCk6HQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:56:b7:6d:5b:56:c7:cf:14:47:48:77:40:ad:32:23:14:3f:
b3:c7:3e:68:2f:d4:b3:0a:0c:1a:65:c4:25:f5:1a:3d:ad:4a:
85:c4:14:13:06:8b:ec:f3:0d:8f:96:9b:7c:17:c0:7a:49:28:
8e:c7:4f:11:6d:ae:bc:46:9a:f7:fb:4c:5b:6a:fc:c3:fd:8f:
d9:c0:2d:66:ef:88:56:80:5f:e6:6c:45:17:8c:2b:38:da:74:
dc:54:fd:44:92:8c:af:57:a1:62:38:0b:99:0a:fe:43:7a:29:
01:f1:96:0d:be:9d:e8:de:40:45:23:60:d0:1a:6f:10:ee:d6:
09:87:86:da:f3:aa:f3:20:4a:89:b1:b6:2c:06:95:57:ea:bf:
fa:9d:ae:1d:0f:86:ad:06:3c:a9:c4:d8:39:a7:da:2a:63:10:
c2:51:b5:37:be:37:3e:de:05:d3:4f:68:bd:74:3a:ea:50:f8:
c8:35:87:0e:c4:8f:9d:60:77:ce:d7:ce:be:81:3a:7e:66:81:
1b:ad:97:3d:26:ab:d7:6d:08:42:41:f5:26:70:d0:a4:3f:f4:
3b:90:dd:1c:52:29:a9:8d:7b:9b:2a:fc:fe:c5:bb:07:56:10:
03:2f:66:cd:6e:1b:ac:7e:38:3a:4e:b5:e2:70:a0:ff:e2:13:
dd:b0:56:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 11:28:28 2025 by rpki-client