Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/7e7842-cd4c-47fa-851a-2c664ce08077/1/DDy2GrT0PwfjeDMH3TOE-dzBwxo.mft
File: DDy2GrT0PwfjeDMH3TOE-dzBwxo.mft (raw, json)
Hash identifier: EXsE6cYzQcYmMO44wPkUr6ochs580GqpdRPSGo9HMFI=
Subject key identifier: A0:56:57:72:BA:BF:54:70:9B:83:02:F2:A2:AC:0B:04:DD:40:83:C8
Authority key identifier: 0C:3C:B6:1A:B4:F4:3F:07:E3:78:33:07:DD:33:84:F9:DC:C1:C3:1A
Certificate issuer: /CN=0c3cb61ab4f43f07e3783307dd3384f9dcc1c31a
Certificate serial: 01977CB18C4103C9111BACF034F16AB020E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DDy2GrT0PwfjeDMH3TOE-dzBwxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/7e7842-cd4c-47fa-851a-2c664ce08077/1/DDy2GrT0PwfjeDMH3TOE-dzBwxo.mft
Manifest number: 0153
Signing time: Tue 17 Jun 2025 07:01:39 +0000
Manifest this update: Tue 17 Jun 2025 07:01:39 +0000
Manifest next update: Wed 18 Jun 2025 07:01:39 +0000
Files and hashes: 1: DDy2GrT0PwfjeDMH3TOE-dzBwxo.crl (hash: op0yqbiSs+P5FJACyrkRnbCVLpwQDi4r2CUGPmuFlqs=)
2: cZNRC54iklgNWYm4bOxRUrThNWU.roa (hash: 7TUW8rEcRA76OYIr9WRYyb0EVyDB9PyjFL1/RYt7YQI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/7e7842-cd4c-47fa-851a-2c664ce08077/1/DDy2GrT0PwfjeDMH3TOE-dzBwxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/7e7842-cd4c-47fa-851a-2c664ce08077/1/DDy2GrT0PwfjeDMH3TOE-dzBwxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/DDy2GrT0PwfjeDMH3TOE-dzBwxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 07:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7c:b1:8c:41:03:c9:11:1b:ac:f0:34:f1:6a:b0:20:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c3cb61ab4f43f07e3783307dd3384f9dcc1c31a
Validity
Not Before: Jun 17 07:01:39 2025 GMT
Not After : Jun 18 07:01:39 2025 GMT
Subject: CN=a0565772babf54709b8302f2a2ac0b04dd4083c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:e3:d0:ea:2b:b6:78:81:dd:2d:0a:49:1c:79:
8f:ae:9a:b3:a0:20:31:22:4f:5e:f4:f4:bb:a4:63:
13:e9:fa:b7:c3:69:5a:f9:99:d7:aa:12:0c:ec:27:
7f:59:65:f6:b9:48:1a:13:d5:80:af:4b:20:d7:1c:
f9:9d:12:cd:5e:07:d2:e0:94:21:6b:57:53:65:40:
c2:71:c4:16:4e:56:9a:f4:5f:e0:a3:8d:c6:fa:0e:
61:0b:e9:fb:8f:62:a9:26:90:e3:90:38:a3:73:8b:
d5:88:f8:a6:d7:c8:9b:e1:70:37:79:13:3d:db:7d:
44:bb:e3:79:04:47:45:a8:4a:25:78:ee:5f:d6:ad:
7e:da:c7:4e:69:d3:7a:23:61:d5:27:83:20:98:a0:
7a:1c:cc:56:0c:a0:13:00:11:1a:ca:a8:3e:04:b9:
95:99:ec:fd:20:49:a6:a9:c6:29:20:49:d0:b2:d7:
b9:c1:dc:e9:fa:ba:01:44:ca:d0:da:78:e5:b4:64:
ce:f5:ac:d7:e4:41:a9:f1:d1:ae:5b:82:b0:fe:a9:
a9:e4:32:2e:f5:72:f7:c5:05:a2:c2:d1:8b:1a:4f:
80:0b:93:64:d9:d0:64:9e:ca:80:e1:e5:94:38:8e:
4b:9a:2e:71:2e:a4:2f:47:f8:42:e8:37:6a:cc:77:
7e:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:56:57:72:BA:BF:54:70:9B:83:02:F2:A2:AC:0B:04:DD:40:83:C8
X509v3 Authority Key Identifier:
keyid:0C:3C:B6:1A:B4:F4:3F:07:E3:78:33:07:DD:33:84:F9:DC:C1:C3:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DDy2GrT0PwfjeDMH3TOE-dzBwxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/7e7842-cd4c-47fa-851a-2c664ce08077/1/DDy2GrT0PwfjeDMH3TOE-dzBwxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/7e7842-cd4c-47fa-851a-2c664ce08077/1/DDy2GrT0PwfjeDMH3TOE-dzBwxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:e5:90:c0:e2:ce:97:f3:64:4a:b6:ad:5a:47:55:8c:25:ae:
c6:22:22:de:42:26:f1:8e:a7:eb:ff:c4:2c:b3:02:6d:85:37:
32:73:d6:32:c8:b9:75:10:01:c6:03:fd:27:9e:1f:48:31:6f:
84:2f:e2:dc:1a:9d:83:66:5f:a1:38:ed:2c:e8:f2:c2:39:41:
68:3a:c0:92:41:31:e0:84:47:32:c0:6a:9b:5b:25:45:2b:91:
29:53:d9:ea:2a:f2:4b:93:23:35:4b:ad:3c:ab:23:a5:fb:a2:
9d:31:42:b9:6d:98:79:1c:be:fb:b9:18:63:0f:d4:97:8f:f5:
66:17:37:12:9b:01:d7:73:a5:f9:b8:00:b5:32:19:43:00:6e:
ea:22:37:34:74:b2:c0:09:bf:a4:99:69:91:81:51:dc:68:98:
c9:1d:ba:a9:28:dd:d6:2b:bb:e1:df:7f:13:ec:ed:da:12:76:
53:61:97:5b:63:7f:a7:89:5a:7b:ab:05:c9:e1:41:0f:33:b9:
96:8a:8a:3e:0c:cf:62:81:4c:d2:6d:90:12:02:59:6e:e9:f4:
fd:1c:bd:f4:50:f4:a2:ef:9c:93:13:4b:79:1e:a4:ab:27:27:
a1:20:cc:cd:d8:e8:d1:ec:02:0b:50:be:c7:e4:20:0b:1c:e5:
33:a5:33:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 11:12:11 2025 by rpki-client