Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/1be5e1-56b4-4c66-beab-6f163966af8b/1/dBmPcCK5VgUB20SK9gMB-ihekjY.mft
File: dBmPcCK5VgUB20SK9gMB-ihekjY.mft (raw, json)
Hash identifier: G/E7amwYwBxSn2Ja1sswmEMMg8hyftrLStr1fw6axTw=
Subject key identifier: 88:EA:90:1A:3A:79:81:88:14:E2:FF:64:41:88:98:A3:5E:7E:84:B0
Authority key identifier: 74:19:8F:70:22:B9:56:05:01:DB:44:8A:F6:03:01:FA:28:5E:92:36
Certificate issuer: /CN=74198f7022b9560501db448af60301fa285e9236
Certificate serial: 01976C2B4E7E39B12276C614D00B0F18E66E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dBmPcCK5VgUB20SK9gMB-ihekjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/1be5e1-56b4-4c66-beab-6f163966af8b/1/dBmPcCK5VgUB20SK9gMB-ihekjY.mft
Manifest number: 1591
Signing time: Sat 14 Jun 2025 02:01:06 +0000
Manifest this update: Sat 14 Jun 2025 02:01:06 +0000
Manifest next update: Sun 15 Jun 2025 02:01:06 +0000
Files and hashes: 1: HIDgrdHX_QU-bGXtDjZHW_ouIno.roa (hash: CeASJRYiDgx1fz5UAh5dDbAHwn7ALNNERk8t4H2LNDQ=)
2: dBmPcCK5VgUB20SK9gMB-ihekjY.crl (hash: Wh+yiP/JzEo0YkOvb9NdFbdZMQG4K2eknggIwZAWy14=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/1be5e1-56b4-4c66-beab-6f163966af8b/1/dBmPcCK5VgUB20SK9gMB-ihekjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/1be5e1-56b4-4c66-beab-6f163966af8b/1/dBmPcCK5VgUB20SK9gMB-ihekjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/dBmPcCK5VgUB20SK9gMB-ihekjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:2b:4e:7e:39:b1:22:76:c6:14:d0:0b:0f:18:e6:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74198f7022b9560501db448af60301fa285e9236
Validity
Not Before: Jun 14 02:01:06 2025 GMT
Not After : Jun 15 02:01:06 2025 GMT
Subject: CN=88ea901a3a79818814e2ff64418898a35e7e84b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:70:a6:2a:63:31:77:aa:ef:fa:f4:55:9b:89:
4e:c1:01:3b:b7:a4:3a:27:13:22:43:e3:ae:58:96:
2f:5f:d5:a6:72:c5:7c:d2:29:fd:d5:ba:9d:8f:89:
dc:4a:97:af:7d:1e:31:1b:75:57:b7:5e:1d:5d:92:
dc:c1:cf:33:77:c6:75:da:91:e1:e6:a8:fb:f0:51:
f9:a7:8a:3c:57:76:f8:44:8c:f2:b0:a8:cd:62:13:
9d:d5:f4:2f:09:0a:14:1d:0d:e0:23:2e:db:4b:18:
b5:8e:84:4b:56:47:de:23:75:78:5e:85:56:71:7e:
05:aa:3d:69:1f:b2:af:e7:24:75:bd:10:86:cc:71:
bc:3f:44:23:0f:ac:54:7a:c8:87:4c:13:af:45:8e:
3b:f3:38:1c:86:57:3a:fe:2f:df:7a:27:35:d3:3d:
39:8b:69:e7:83:e3:a3:ec:e5:04:1f:eb:64:ac:20:
9b:58:15:9c:68:5f:43:70:90:5f:d3:46:f6:d7:8c:
34:b1:26:d0:39:5d:ff:23:b9:aa:9a:05:45:e3:b7:
3b:44:68:c8:53:d5:e3:dc:d2:ea:5a:de:59:d5:e9:
a7:b0:1f:4f:04:38:29:73:e5:49:c4:a1:27:30:95:
1a:b4:bb:35:e8:34:0a:23:aa:38:81:99:ed:96:f1:
7e:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:EA:90:1A:3A:79:81:88:14:E2:FF:64:41:88:98:A3:5E:7E:84:B0
X509v3 Authority Key Identifier:
keyid:74:19:8F:70:22:B9:56:05:01:DB:44:8A:F6:03:01:FA:28:5E:92:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dBmPcCK5VgUB20SK9gMB-ihekjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/1be5e1-56b4-4c66-beab-6f163966af8b/1/dBmPcCK5VgUB20SK9gMB-ihekjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/1be5e1-56b4-4c66-beab-6f163966af8b/1/dBmPcCK5VgUB20SK9gMB-ihekjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:95:00:e3:94:72:ae:ac:3d:82:64:61:03:bd:b5:4e:89:30:
b1:13:31:42:b1:93:6d:67:89:aa:80:f4:dd:bc:47:60:26:7a:
15:b7:87:c5:87:d2:a2:e6:d9:c4:cb:8f:1c:29:19:b7:52:d0:
5e:ea:da:e1:74:7e:ee:6b:48:a5:d5:d4:a2:2c:1d:6f:a5:83:
c1:13:3b:76:b5:b2:89:95:6b:cc:8b:dd:d4:dd:f5:ff:d9:8d:
2e:eb:ed:dd:31:e7:36:f5:34:e9:c6:99:8a:5f:21:88:7e:75:
36:4a:47:1d:71:9d:42:c8:70:c8:24:7a:de:82:71:4e:7a:c4:
67:5d:eb:5b:69:a3:cf:95:a2:fb:40:fa:e0:77:8d:7d:93:a0:
23:ce:90:93:95:9a:5d:45:f9:c8:28:e8:bf:10:dc:f6:c0:41:
de:bc:55:07:0a:8b:80:e5:59:e8:54:b0:36:c2:df:4a:bd:b1:
e2:a8:49:10:d8:55:33:d6:9d:8c:21:5e:68:ae:77:b0:c7:fe:
fd:74:89:7c:d3:0c:1c:2b:be:ea:31:82:69:71:fe:ab:3f:56:
db:0d:20:e8:49:a8:b1:89:ed:84:78:78:3e:66:fc:f6:27:31:
ff:c4:89:3d:3e:a6:9e:94:0d:c6:5f:e8:cc:71:4b:e9:46:32:
89:c0:00:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:11:43 2025 by rpki-client