Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/66e51a-fe82-4b5d-9884-b533f4941afe/1/duBenuWUd-AVX8HtwKGDByl2bog.mft
File: duBenuWUd-AVX8HtwKGDByl2bog.mft (raw, json)
Hash identifier: a8tmrx5fxpMsP54Y4Otf3orm0Zre2nyMM1EOUMgd5g8=
Subject key identifier: 2E:8E:36:55:D5:8E:F2:97:76:65:3E:67:7E:F6:07:60:30:9D:49:CB
Authority key identifier: 76:E0:5E:9E:E5:94:77:E0:15:5F:C1:ED:C0:A1:83:07:29:76:6E:88
Certificate issuer: /CN=76e05e9ee59477e0155fc1edc0a1830729766e88
Certificate serial: 01976C2B6752AB7C89D2031FB8E4F2D1FB19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/duBenuWUd-AVX8HtwKGDByl2bog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/66e51a-fe82-4b5d-9884-b533f4941afe/1/duBenuWUd-AVX8HtwKGDByl2bog.mft
Manifest number: 151D
Signing time: Sat 14 Jun 2025 02:01:13 +0000
Manifest this update: Sat 14 Jun 2025 02:01:13 +0000
Manifest next update: Sun 15 Jun 2025 02:01:13 +0000
Files and hashes: 1: 1-eNfPNgGjJz34a_6zifXZRNCWXw.roa (hash: BrqTM2h6iG7WyfhfDjhQFT8qhh74OvrPhMC05Ggy8tQ=)
2: duBenuWUd-AVX8HtwKGDByl2bog.crl (hash: yXAA6BpdaO440gMKpAdKzcc2rMQYU9pR1HbVJtTlPp4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/66e51a-fe82-4b5d-9884-b533f4941afe/1/duBenuWUd-AVX8HtwKGDByl2bog.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/66e51a-fe82-4b5d-9884-b533f4941afe/1/duBenuWUd-AVX8HtwKGDByl2bog.mft
rsync://rpki.ripe.net/repository/DEFAULT/duBenuWUd-AVX8HtwKGDByl2bog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:2b:67:52:ab:7c:89:d2:03:1f:b8:e4:f2:d1:fb:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76e05e9ee59477e0155fc1edc0a1830729766e88
Validity
Not Before: Jun 14 02:01:13 2025 GMT
Not After : Jun 15 02:01:13 2025 GMT
Subject: CN=2e8e3655d58ef29776653e677ef60760309d49cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:73:96:3c:61:d9:09:7f:5a:e6:c5:ea:c4:6a:
b8:41:6d:91:24:01:74:ca:ea:5d:28:09:44:00:9a:
32:ed:42:f0:16:93:3c:96:09:0f:ff:5d:19:22:35:
3f:ae:18:e2:59:4a:dc:6b:59:78:c0:46:fc:86:d8:
7c:65:0e:9a:e4:03:a0:b8:9e:88:08:25:97:6a:84:
8b:6e:06:97:ef:41:3c:7e:f8:12:ea:12:05:78:f4:
93:be:43:93:18:5e:d2:36:1d:9e:86:f6:19:81:d7:
13:4c:84:2a:e1:1f:e2:d4:18:cd:a6:ad:8a:5f:e0:
b1:21:c0:ed:67:74:0b:89:19:c2:81:1c:5a:2c:99:
10:4d:e1:02:18:fa:88:3b:b7:0e:77:92:dd:d1:8a:
53:fb:bc:9d:72:4a:cb:94:d1:10:62:c6:a2:d6:d0:
94:01:c0:a8:14:78:a1:c9:11:3d:8b:ca:5d:6a:17:
77:54:be:1e:d1:1f:fd:ae:30:89:6b:66:02:6e:dd:
fd:7d:11:8b:82:fa:72:9c:84:96:2c:a3:72:82:16:
9f:e7:01:50:22:37:45:a6:ea:da:68:da:21:eb:88:
05:1d:ef:48:bb:49:a3:1c:ec:10:18:fe:ca:64:55:
49:76:54:e1:88:ad:46:fa:30:49:ac:60:8b:c4:13:
59:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:8E:36:55:D5:8E:F2:97:76:65:3E:67:7E:F6:07:60:30:9D:49:CB
X509v3 Authority Key Identifier:
keyid:76:E0:5E:9E:E5:94:77:E0:15:5F:C1:ED:C0:A1:83:07:29:76:6E:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/duBenuWUd-AVX8HtwKGDByl2bog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/66e51a-fe82-4b5d-9884-b533f4941afe/1/duBenuWUd-AVX8HtwKGDByl2bog.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/66e51a-fe82-4b5d-9884-b533f4941afe/1/duBenuWUd-AVX8HtwKGDByl2bog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:b4:96:3c:23:2d:24:c6:35:3c:17:88:8e:38:69:47:9c:c4:
07:db:e5:80:c0:f8:7f:54:e0:cb:a7:de:62:36:d4:81:14:b9:
a1:4a:af:86:2f:b8:e9:87:17:39:8d:c0:b7:af:f4:6d:74:70:
b6:2c:32:5d:51:9a:5c:70:fa:e6:7d:99:54:f8:85:0b:5a:4b:
f6:89:88:89:e9:eb:df:e5:11:ed:40:4e:0b:43:c3:94:46:04:
6b:90:18:86:6a:80:57:05:34:6d:75:4a:23:f5:ff:0a:c9:5c:
ec:bd:d8:f1:4d:74:5b:e6:0a:5d:d3:2f:5e:25:b8:2b:6c:0f:
9e:ce:00:5e:55:84:23:96:2b:63:f9:87:ea:17:e5:be:c6:2d:
e1:dc:e5:30:e9:c0:9f:86:0a:4a:3d:15:ff:f1:2a:4d:3f:f4:
aa:47:72:89:76:a5:4f:d9:f0:af:63:d4:4b:8e:47:cd:d5:7b:
a9:35:42:5c:a7:15:c6:80:fa:4b:e6:73:ac:79:f8:53:23:fa:
53:45:6f:90:d2:03:1d:bb:77:39:ce:c0:94:70:81:bc:dd:27:
38:90:50:58:53:95:41:48:27:f5:ba:69:3b:d2:01:00:09:9c:
d4:dd:58:3f:2d:77:8b:94:87:42:6d:09:1e:ea:f1:f1:85:e0:
1c:3b:82:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:17:15 2025 by rpki-client