Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/f9e9a1-fe52-451a-a154-33f73d9fddb5/1/dHIvFqh8_9eP15BQVoobTJWbEiQ.mft
File: dHIvFqh8_9eP15BQVoobTJWbEiQ.mft (raw, json)
Hash identifier: NSx3vkuKNZ+ya542y5C2MWj6PGMlePxYzrPlgO879Y8=
Subject key identifier: 0D:97:15:DE:55:01:A8:1B:98:D2:D0:10:FF:AF:7B:C9:09:73:90:8D
Authority key identifier: 74:72:2F:16:A8:7C:FF:D7:8F:D7:90:50:56:8A:1B:4C:95:9B:12:24
Certificate issuer: /CN=74722f16a87cffd78fd79050568a1b4c959b1224
Certificate serial: 01976CCFC2D09B6B625E3833AA5D1C1E2710
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dHIvFqh8_9eP15BQVoobTJWbEiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/f9e9a1-fe52-451a-a154-33f73d9fddb5/1/dHIvFqh8_9eP15BQVoobTJWbEiQ.mft
Manifest number: 0534
Signing time: Sat 14 Jun 2025 05:00:44 +0000
Manifest this update: Sat 14 Jun 2025 05:00:44 +0000
Manifest next update: Sun 15 Jun 2025 05:00:44 +0000
Files and hashes: 1: 7ZY1Q8mS5q8z2UfLPJc5K6uKZQo.roa (hash: jj4WM2xy5po+h+orIYLAd72AyCd84wAZcTm4AiOOtow=)
2: dHIvFqh8_9eP15BQVoobTJWbEiQ.crl (hash: /T3Wovq2+HrZR8fHDIz03Lrc1XoVQzQhImwuhWMQqE0=)
3: umqBfoDDAK3jbRiLn4CC-iVGvHg.roa (hash: XnoyZYelLC2MdNI+4AYsdN08BX8Cvr0ms42chjRPStA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/f9e9a1-fe52-451a-a154-33f73d9fddb5/1/dHIvFqh8_9eP15BQVoobTJWbEiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/f9e9a1-fe52-451a-a154-33f73d9fddb5/1/dHIvFqh8_9eP15BQVoobTJWbEiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/dHIvFqh8_9eP15BQVoobTJWbEiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:cf:c2:d0:9b:6b:62:5e:38:33:aa:5d:1c:1e:27:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74722f16a87cffd78fd79050568a1b4c959b1224
Validity
Not Before: Jun 14 05:00:44 2025 GMT
Not After : Jun 15 05:00:44 2025 GMT
Subject: CN=0d9715de5501a81b98d2d010ffaf7bc90973908d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:06:9e:ce:dc:7e:94:56:98:4f:bc:93:eb:ee:
3c:aa:c5:fa:75:38:81:7d:96:3c:8a:5a:73:ca:6d:
b1:96:d2:a9:f5:88:3e:65:ea:f2:4d:e2:c9:d3:59:
ef:49:69:40:98:bf:b5:0a:3a:89:b7:77:53:ef:1a:
b1:13:12:9e:94:d4:52:f2:9b:67:3c:f8:46:96:77:
e9:1a:d2:93:30:9f:0b:14:50:47:52:75:69:3e:0b:
b3:69:69:97:80:92:82:d1:02:e1:d4:10:2c:3e:7a:
2b:87:8e:38:f6:80:fb:4e:d4:6b:2a:e4:41:c7:44:
d5:6e:97:29:07:4d:b5:d0:1d:bd:d3:27:59:32:ea:
2a:4b:3a:7c:58:61:ff:95:c6:aa:1c:e7:12:ef:41:
18:bb:4c:b8:82:3c:9e:c1:e9:54:ed:f9:78:c4:5b:
f1:98:86:2b:3c:73:4f:cd:2e:44:72:39:91:ae:70:
6d:2b:f8:85:16:65:f6:8c:0b:02:65:8b:8e:12:ba:
19:f4:3a:f1:4d:28:7a:f6:20:12:8e:85:f9:6d:30:
41:8c:17:71:af:65:a8:d2:44:67:59:b8:36:62:df:
2d:5b:48:36:f9:80:7d:ab:b5:ec:0c:0d:3b:e7:73:
51:03:71:cd:55:43:a4:ab:7f:2c:db:8a:d4:5b:d6:
31:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:97:15:DE:55:01:A8:1B:98:D2:D0:10:FF:AF:7B:C9:09:73:90:8D
X509v3 Authority Key Identifier:
keyid:74:72:2F:16:A8:7C:FF:D7:8F:D7:90:50:56:8A:1B:4C:95:9B:12:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dHIvFqh8_9eP15BQVoobTJWbEiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/f9e9a1-fe52-451a-a154-33f73d9fddb5/1/dHIvFqh8_9eP15BQVoobTJWbEiQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/f9e9a1-fe52-451a-a154-33f73d9fddb5/1/dHIvFqh8_9eP15BQVoobTJWbEiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:a4:a0:4c:d6:3a:55:e5:5f:96:89:61:85:a0:17:bd:4f:38:
fb:0f:16:50:65:95:5f:dd:8e:e3:ab:2c:09:21:a0:08:3c:42:
96:85:44:42:42:54:4e:96:fd:33:47:2e:a7:0e:b8:ef:96:4c:
5c:db:d1:a0:2f:b5:aa:89:2f:d1:a7:90:b5:20:2d:4c:0c:28:
64:00:1b:e8:c4:75:c6:68:a1:4c:97:3e:50:c6:de:66:47:a2:
95:8a:52:58:b5:8a:28:82:8f:c2:0e:a6:43:3a:74:47:bc:ee:
d6:89:7b:38:5e:d2:5e:d0:03:67:52:25:da:47:12:35:3d:fe:
0e:1b:25:f6:b1:b9:bc:44:b9:55:20:42:fd:f2:d8:63:66:25:
79:7e:bb:09:84:c7:67:c9:5f:44:22:2d:97:0f:7b:8a:36:55:
5b:9a:d4:dd:24:07:2b:1e:d4:18:9d:2f:42:7f:5d:aa:ea:cd:
43:e4:a4:7c:cc:2a:20:9c:0f:73:7b:00:04:a0:db:75:0d:8d:
90:c5:5d:6a:89:17:32:cf:aa:a0:11:1d:81:11:89:46:5f:99:
dd:ec:ca:9b:43:0a:f1:25:db:dd:74:06:19:e4:6a:54:1e:5d:
1b:66:e8:60:71:f3:cc:32:e2:95:e4:54:d0:f2:06:ac:c0:d4:
b5:4c:a8:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:17:46 2025 by rpki-client