Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/2aaa49-2823-4ee2-b5d1-e547395d6b47/1/doFcfQ6GPCF4D4v0uezDqcZFkpg.mft
File: doFcfQ6GPCF4D4v0uezDqcZFkpg.mft (raw, json)
Hash identifier: A5j0ZzCW3NhiAnptfmTsVydGgvpA1AxA7yBzixYlCHM=
Subject key identifier: 6E:E7:01:7D:FF:7D:68:4A:4F:B4:5B:22:A0:B7:B7:30:1C:20:DF:C2
Authority key identifier: 76:81:5C:7D:0E:86:3C:21:78:0F:8B:F4:B9:EC:C3:A9:C6:45:92:98
Certificate issuer: /CN=76815c7d0e863c21780f8bf4b9ecc3a9c6459298
Certificate serial: 01976BBCFE9FD19DFEC7D7492A0B6DE3072E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/doFcfQ6GPCF4D4v0uezDqcZFkpg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/2aaa49-2823-4ee2-b5d1-e547395d6b47/1/doFcfQ6GPCF4D4v0uezDqcZFkpg.mft
Manifest number: 0284
Signing time: Sat 14 Jun 2025 00:00:37 +0000
Manifest this update: Sat 14 Jun 2025 00:00:37 +0000
Manifest next update: Sun 15 Jun 2025 00:00:37 +0000
Files and hashes: 1: doFcfQ6GPCF4D4v0uezDqcZFkpg.crl (hash: NMSL/F6UsfChWqHIcNZKytOdoDVemS2BXdb3P/1SsNM=)
2: pTTtPKmhE713zQ-lNSyfapckqck.roa (hash: Z4OXgVLMtdMbDgwAv+QfBL8XpAweOau33nbHajpmsxQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/2aaa49-2823-4ee2-b5d1-e547395d6b47/1/doFcfQ6GPCF4D4v0uezDqcZFkpg.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/2aaa49-2823-4ee2-b5d1-e547395d6b47/1/doFcfQ6GPCF4D4v0uezDqcZFkpg.mft
rsync://rpki.ripe.net/repository/DEFAULT/doFcfQ6GPCF4D4v0uezDqcZFkpg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 00:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:bc:fe:9f:d1:9d:fe:c7:d7:49:2a:0b:6d:e3:07:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76815c7d0e863c21780f8bf4b9ecc3a9c6459298
Validity
Not Before: Jun 14 00:00:37 2025 GMT
Not After : Jun 15 00:00:37 2025 GMT
Subject: CN=6ee7017dff7d684a4fb45b22a0b7b7301c20dfc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:43:97:ca:63:0b:9e:45:b4:db:fb:85:b1:49:
a1:b2:03:41:4b:57:07:96:75:f6:f0:94:81:62:2b:
45:ac:55:0f:9e:eb:32:e1:ec:4d:6d:52:b7:b3:9c:
b2:62:25:65:ef:40:00:6b:c2:49:a4:f5:21:3a:6f:
c7:23:1a:f2:99:63:ba:96:dc:e3:a2:18:92:fd:18:
00:90:8b:05:19:68:eb:2f:7e:32:26:52:dc:c4:da:
a9:c8:a3:41:50:48:d0:fe:aa:0f:67:a0:08:d0:61:
77:0b:69:c7:0e:b6:31:b9:84:8e:1f:c3:91:73:af:
e0:f3:e7:d2:79:c1:45:e4:d2:3c:a2:57:41:f8:76:
62:4c:d1:f5:c1:c5:aa:1c:b6:a0:b6:10:09:19:48:
8a:18:87:8a:a5:b6:dc:80:af:98:f7:30:14:94:02:
bc:c4:06:3e:12:1c:c7:84:30:c7:33:6f:ca:5d:b3:
8b:59:2b:ef:78:bb:f7:f2:21:78:e7:02:77:90:e1:
8f:9b:8f:2b:89:70:05:52:23:2f:04:b7:64:e2:60:
60:62:78:83:0b:c3:11:32:90:46:40:16:dd:14:c1:
8d:38:3e:b9:47:5a:b2:ba:83:e6:e9:4b:07:10:30:
3a:17:52:a0:41:ef:36:96:6e:4a:10:97:9d:20:f6:
5c:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:E7:01:7D:FF:7D:68:4A:4F:B4:5B:22:A0:B7:B7:30:1C:20:DF:C2
X509v3 Authority Key Identifier:
keyid:76:81:5C:7D:0E:86:3C:21:78:0F:8B:F4:B9:EC:C3:A9:C6:45:92:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/doFcfQ6GPCF4D4v0uezDqcZFkpg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/2aaa49-2823-4ee2-b5d1-e547395d6b47/1/doFcfQ6GPCF4D4v0uezDqcZFkpg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/2aaa49-2823-4ee2-b5d1-e547395d6b47/1/doFcfQ6GPCF4D4v0uezDqcZFkpg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:d3:45:04:75:1c:60:07:4c:e4:28:32:6b:9f:96:27:ef:84:
09:10:28:ba:32:ed:44:bc:7d:f2:53:9d:db:77:0b:4d:45:f9:
92:bd:0c:23:65:e4:af:41:d2:6e:a7:33:d8:9c:c9:9e:28:d3:
ee:5e:df:a6:54:b0:df:08:3d:b9:00:59:45:6e:9b:15:c0:b0:
2b:0a:b6:72:34:f8:c3:8e:e5:f9:22:57:3e:97:2f:d2:0a:ee:
bf:ce:6f:59:f0:3c:83:dc:f1:09:e6:f3:32:2b:30:b9:02:af:
13:4e:e1:c7:24:6a:17:91:1c:81:54:65:13:4a:a7:00:cf:3f:
e6:5e:03:84:dd:79:9c:2f:62:e5:78:d9:ac:99:0d:b8:1a:2b:
ac:18:4f:ad:f9:eb:3c:6b:90:62:28:ae:95:a6:4d:55:e5:d9:
d0:59:91:68:f8:18:92:10:4a:ac:44:30:e3:75:06:db:43:d6:
65:ea:ec:f4:bf:c7:de:c0:c0:1a:5d:ae:b3:a7:56:92:d5:5c:
07:8e:7a:d0:9e:66:e4:ed:f9:ed:94:05:b1:fd:2a:0e:f5:f2:
14:74:c0:5d:14:42:03:f2:14:6f:7e:17:39:71:75:72:80:79:
e9:5e:91:2d:73:cf:06:37:c6:33:90:ef:fd:a1:95:39:5d:4b:
b2:f3:55:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:51:47 2025 by rpki-client