Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/6a9cf9-c0cc-4011-860e-4685782ac2c3/1/dT1Hbblt4eWGIxGacLnXsAtnbaA.mft
File: dT1Hbblt4eWGIxGacLnXsAtnbaA.mft (raw, json)
Hash identifier: m6EptrLo3UeisxOjBxAAjVsmv97ADzMoyPhQAt5qOos=
Subject key identifier: 19:96:64:02:1F:F8:41:F7:EC:3E:DB:C0:CF:94:A1:96:68:B6:D4:95
Authority key identifier: 75:3D:47:6D:B9:6D:E1:E5:86:23:11:9A:70:B9:D7:B0:0B:67:6D:A0
Certificate issuer: /CN=753d476db96de1e58623119a70b9d7b00b676da0
Certificate serial: 019782B2CEFBCD65068C1F62F12220A26260
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dT1Hbblt4eWGIxGacLnXsAtnbaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/6a9cf9-c0cc-4011-860e-4685782ac2c3/1/dT1Hbblt4eWGIxGacLnXsAtnbaA.mft
Manifest number: 1598
Signing time: Wed 18 Jun 2025 11:00:45 +0000
Manifest this update: Wed 18 Jun 2025 11:00:45 +0000
Manifest next update: Thu 19 Jun 2025 11:00:45 +0000
Files and hashes: 1: 46jADdHLKU7NIyeYvDkR9sakzHU.roa (hash: byWqvbSSzcE1Xc0qEaXyUWnOp7q2hSYPDvEBq1c3RLI=)
2: ZzBmvMdXYMiQ9bwVHMIzO7s9SmM.roa (hash: sLT+c6scYZ8+Q07xIyxSqYkUzEuyYwiK9vh89QW6tS8=)
3: dT1Hbblt4eWGIxGacLnXsAtnbaA.crl (hash: tWzS+hZmwYvsuArx81fVUHEUe1EOH0Ev7Z4sdPpCbrw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/6a9cf9-c0cc-4011-860e-4685782ac2c3/1/dT1Hbblt4eWGIxGacLnXsAtnbaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/6a9cf9-c0cc-4011-860e-4685782ac2c3/1/dT1Hbblt4eWGIxGacLnXsAtnbaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/dT1Hbblt4eWGIxGacLnXsAtnbaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:82:b2:ce:fb:cd:65:06:8c:1f:62:f1:22:20:a2:62:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=753d476db96de1e58623119a70b9d7b00b676da0
Validity
Not Before: Jun 18 11:00:45 2025 GMT
Not After : Jun 19 11:00:45 2025 GMT
Subject: CN=199664021ff841f7ec3edbc0cf94a19668b6d495
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:56:71:42:f9:5f:6d:23:4b:45:6b:a0:fe:98:
bf:a5:88:0b:f9:73:7f:0a:ad:00:9e:fe:9e:55:43:
06:24:29:bc:be:51:a7:fc:e4:24:d9:f4:03:54:fe:
96:e8:74:34:a2:1b:70:31:25:8f:c9:c5:1f:90:a4:
eb:9a:6d:36:11:24:dc:bf:8d:9d:dd:11:1b:7a:8a:
f0:68:67:63:5a:db:c2:39:03:82:32:fc:88:a8:1f:
74:23:31:e0:06:16:18:81:de:0e:68:26:a5:43:75:
3f:0f:2a:2f:61:21:72:76:dc:40:b6:39:1c:02:20:
57:b7:92:fe:73:ba:a2:62:6c:da:e2:68:91:e5:5f:
3b:44:17:50:75:2b:f4:1d:cf:79:c4:c8:14:cf:04:
c0:97:f1:0a:87:de:da:c7:d9:4b:1c:80:5d:5c:ff:
d2:e6:17:6f:d4:76:fd:c2:85:e5:fd:dd:d0:57:d7:
29:a2:bb:2c:55:a0:af:43:a0:f0:b3:65:2f:d2:00:
42:fc:72:ef:0c:e6:fe:78:ce:21:0a:ed:44:8d:15:
45:08:3d:0a:7f:4d:7b:6d:24:17:c3:dc:ed:e6:b5:
63:1b:28:4c:34:b5:63:ff:a2:00:46:85:55:5f:13:
f7:c1:79:e7:9b:f2:d2:9a:f8:a4:67:b9:7c:25:73:
f3:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:96:64:02:1F:F8:41:F7:EC:3E:DB:C0:CF:94:A1:96:68:B6:D4:95
X509v3 Authority Key Identifier:
keyid:75:3D:47:6D:B9:6D:E1:E5:86:23:11:9A:70:B9:D7:B0:0B:67:6D:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dT1Hbblt4eWGIxGacLnXsAtnbaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/6a9cf9-c0cc-4011-860e-4685782ac2c3/1/dT1Hbblt4eWGIxGacLnXsAtnbaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/6a9cf9-c0cc-4011-860e-4685782ac2c3/1/dT1Hbblt4eWGIxGacLnXsAtnbaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:4f:9f:fe:0f:d0:e4:e0:c2:47:6f:4c:e7:7a:b8:d7:a0:a0:
ae:f9:af:b1:49:3b:b2:ba:94:8c:45:c1:c6:b3:21:0a:f8:63:
82:e0:dd:d5:b1:0f:8e:4e:e5:af:b0:86:9c:1e:f0:98:64:22:
0f:a3:ef:f0:3e:4d:ad:2a:4b:0e:0a:48:c4:4f:73:1d:43:66:
1d:71:25:d8:0b:ee:8a:41:3e:47:96:cd:b3:f5:23:6c:30:8c:
07:73:19:8f:66:c0:58:17:ed:a0:91:55:b3:d8:81:b0:b0:07:
8f:9d:cc:ca:a0:e1:a8:33:83:78:61:3f:77:9b:c7:55:ee:55:
82:a9:ab:fd:c1:c1:74:6b:c7:d4:eb:6f:6c:46:c0:76:d1:7e:
23:da:fc:6d:9c:51:9e:55:ed:e2:6a:37:c4:b1:27:45:8a:ad:
08:a0:84:e3:80:2f:ae:26:18:3f:3f:22:8a:96:9a:04:5e:8e:
93:4b:94:e8:0e:c8:d7:51:a3:dc:c6:f4:6f:df:7a:bf:29:f1:
ae:fc:4c:67:b7:5a:66:95:3d:91:0e:a7:66:12:1c:d5:82:93:
c7:11:d6:73:1e:f0:76:31:11:31:56:aa:f4:c9:6e:c6:fe:64:
67:93:e3:90:39:ea:00:48:19:24:d5:7e:61:e8:32:f5:cc:c6:
e1:05:02:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 16:36:55 2025 by rpki-client