Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/017849-7ccf-4815-bc69-a77f0b32144e/1/DloI_DRpD1LbDCt-R-jlOIMUWpg.mft
File: DloI_DRpD1LbDCt-R-jlOIMUWpg.mft (raw, json)
Hash identifier: 1PSNle33ZeSXWFq67VrSN8kHMWL/PE6KGqbvHz2nfWU=
Subject key identifier: 88:06:CB:CC:F6:50:E4:A9:0F:AD:83:EA:1C:ED:FD:19:85:5B:A1:DF
Authority key identifier: 0E:5A:08:FC:34:69:0F:52:DB:0C:2B:7E:47:E8:E5:38:83:14:5A:98
Certificate issuer: /CN=0e5a08fc34690f52db0c2b7e47e8e53883145a98
Certificate serial: 019770AC43A3CD3323FB6A884F60337A9A22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DloI_DRpD1LbDCt-R-jlOIMUWpg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/017849-7ccf-4815-bc69-a77f0b32144e/1/DloI_DRpD1LbDCt-R-jlOIMUWpg.mft
Manifest number: A1
Signing time: Sat 14 Jun 2025 23:00:27 +0000
Manifest this update: Sat 14 Jun 2025 23:00:27 +0000
Manifest next update: Sun 15 Jun 2025 23:00:27 +0000
Files and hashes: 1: DloI_DRpD1LbDCt-R-jlOIMUWpg.crl (hash: 2F9J9JaGHzxm5eqeDHinqxjEFS6ZrJAGquOrvLJq9Lk=)
2: xjqb8HoLRLAR-p4-R3Sb4dWDULU.roa (hash: 1mq/X/AhDxzJxbocaN5soLh/qNxvhHjRbgctopoVrKg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/017849-7ccf-4815-bc69-a77f0b32144e/1/DloI_DRpD1LbDCt-R-jlOIMUWpg.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/017849-7ccf-4815-bc69-a77f0b32144e/1/DloI_DRpD1LbDCt-R-jlOIMUWpg.mft
rsync://rpki.ripe.net/repository/DEFAULT/DloI_DRpD1LbDCt-R-jlOIMUWpg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:ac:43:a3:cd:33:23:fb:6a:88:4f:60:33:7a:9a:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e5a08fc34690f52db0c2b7e47e8e53883145a98
Validity
Not Before: Jun 14 23:00:27 2025 GMT
Not After : Jun 15 23:00:27 2025 GMT
Subject: CN=8806cbccf650e4a90fad83ea1cedfd19855ba1df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f8:ea:f3:94:2f:97:e5:2c:e1:5b:f6:1c:e0:
63:e8:14:a2:91:11:bc:90:4d:63:74:d4:f3:58:79:
f4:fb:fa:63:59:c9:96:eb:e1:3a:ad:ef:70:6e:4d:
fd:ad:62:85:a8:fd:9d:0b:56:33:fd:15:e2:c6:0c:
30:83:1e:69:de:8c:d3:93:9a:07:38:a4:82:53:e5:
da:76:b5:83:32:ff:1b:58:97:9b:14:18:3b:2d:9c:
73:18:6b:e4:c4:4b:9c:af:ed:7a:93:fa:43:38:4d:
5a:bf:f8:ae:4a:1e:13:62:ba:49:f7:2d:b3:99:c9:
32:9c:ab:1b:df:19:3a:e1:f5:17:74:9e:5c:ac:91:
b6:13:e3:55:48:97:02:a5:3b:ef:13:d5:fd:3a:01:
db:25:c7:99:e1:61:a0:e7:a3:6e:cd:6f:d3:3d:04:
82:9e:7f:59:3d:0f:f1:3d:e5:20:b3:57:a4:d2:57:
d9:f0:8c:7c:55:2f:8a:11:2b:23:55:3e:4f:49:a0:
91:a1:4e:8f:43:ef:9f:53:7f:0d:1d:fe:4e:a5:93:
40:df:db:58:f6:ce:5c:96:fa:57:cb:2d:bd:0c:da:
b2:a2:27:86:21:d9:16:07:35:eb:a4:60:b7:44:0d:
e9:02:52:0d:5a:dc:ad:a1:65:17:95:aa:82:be:77:
8d:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:06:CB:CC:F6:50:E4:A9:0F:AD:83:EA:1C:ED:FD:19:85:5B:A1:DF
X509v3 Authority Key Identifier:
keyid:0E:5A:08:FC:34:69:0F:52:DB:0C:2B:7E:47:E8:E5:38:83:14:5A:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DloI_DRpD1LbDCt-R-jlOIMUWpg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/017849-7ccf-4815-bc69-a77f0b32144e/1/DloI_DRpD1LbDCt-R-jlOIMUWpg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/017849-7ccf-4815-bc69-a77f0b32144e/1/DloI_DRpD1LbDCt-R-jlOIMUWpg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:09:17:2b:a4:fb:b7:bf:cc:4d:93:d5:e6:bc:1c:74:c0:8c:
e9:6d:5e:f9:eb:6c:2d:3d:f0:dc:eb:ea:56:39:cf:36:de:45:
cb:30:09:ab:7e:19:dd:38:91:29:d2:1a:e9:74:29:ac:62:39:
47:31:de:73:61:dd:90:30:2a:71:8f:57:fb:13:6e:78:e0:81:
92:b7:bc:e5:b8:4f:0c:92:01:ce:fc:b8:fc:fa:ad:8d:85:10:
5e:12:da:44:cc:5f:43:42:4c:6a:ab:19:8c:1c:65:cc:9e:48:
fe:4d:f0:c6:68:ca:64:c4:67:28:4c:40:7a:0f:41:e4:e3:7f:
fb:18:99:1f:43:ec:82:a3:64:e7:ad:bc:5b:f3:78:27:74:d0:
b3:ff:bc:af:20:47:78:33:04:3b:81:d1:66:e2:a4:8d:66:b6:
32:4d:8c:f4:db:2f:76:bc:85:28:bb:54:56:ff:b3:e4:f7:e9:
ee:ce:9f:31:9b:cf:78:57:a1:79:eb:d7:16:7c:5a:72:d5:b9:
72:88:01:73:16:d4:fb:12:ad:7f:12:8d:e3:b2:f4:e6:ae:7b:
36:9e:18:96:72:1e:b7:7a:e8:c1:dc:76:2e:d8:3d:33:4f:aa:
a1:3c:80:30:ef:5e:a3:9a:c4:54:37:7d:38:e7:94:1e:eb:cb:
63:55:2b:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 07:35:43 2025 by rpki-client