Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/58e8f8-1b27-41a4-92ab-fe8484f7079d/1/DTIXImHJUJ5XNSE3ugGSqEhrb90.mft
File: DTIXImHJUJ5XNSE3ugGSqEhrb90.mft (raw, json)
Hash identifier: Iki6SkP8L+oCcoH8p7SB1iBZHo9F37JFTFmhgi2ihyQ=
Subject key identifier: 34:6E:D9:E2:19:B0:A2:6B:F0:99:87:47:F3:E4:60:BE:E6:56:70:1A
Authority key identifier: 0D:32:17:22:61:C9:50:9E:57:35:21:37:BA:01:92:A8:48:6B:6F:DD
Certificate issuer: /CN=0d32172261c9509e57352137ba0192a8486b6fdd
Certificate serial: 01976BBD39F613A534926515324A3F7FC8FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DTIXImHJUJ5XNSE3ugGSqEhrb90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/58e8f8-1b27-41a4-92ab-fe8484f7079d/1/DTIXImHJUJ5XNSE3ugGSqEhrb90.mft
Manifest number: 0677
Signing time: Sat 14 Jun 2025 00:00:52 +0000
Manifest this update: Sat 14 Jun 2025 00:00:52 +0000
Manifest next update: Sun 15 Jun 2025 00:00:52 +0000
Files and hashes: 1: DTIXImHJUJ5XNSE3ugGSqEhrb90.crl (hash: e8IXaWzsarBbDGhlq3p6wxo2lcfIMz1nqnPqhFtlq8s=)
2: fjriIHG0K5ESLdXlGMzPccy1eWc.roa (hash: 8Yi5eFrLfWuilXieuc7JFFDe1Ore62ncPRyz11+p5yU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/58e8f8-1b27-41a4-92ab-fe8484f7079d/1/DTIXImHJUJ5XNSE3ugGSqEhrb90.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/58e8f8-1b27-41a4-92ab-fe8484f7079d/1/DTIXImHJUJ5XNSE3ugGSqEhrb90.mft
rsync://rpki.ripe.net/repository/DEFAULT/DTIXImHJUJ5XNSE3ugGSqEhrb90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 00:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:bd:39:f6:13:a5:34:92:65:15:32:4a:3f:7f:c8:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d32172261c9509e57352137ba0192a8486b6fdd
Validity
Not Before: Jun 14 00:00:52 2025 GMT
Not After : Jun 15 00:00:52 2025 GMT
Subject: CN=346ed9e219b0a26bf0998747f3e460bee656701a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:91:cf:89:75:b9:e0:47:d4:16:e3:8d:39:b1:
20:38:6a:9d:5f:47:3d:05:2a:1e:05:1b:a7:88:73:
01:2e:57:c9:ed:2b:a6:ef:8b:fc:09:38:4d:f2:34:
c3:50:67:1c:1c:2b:ff:44:d5:bb:fb:41:83:62:5b:
c8:95:de:96:a4:10:85:ef:1c:11:9e:4e:e2:4b:25:
c2:32:f3:0c:0f:86:33:72:39:38:84:ca:fa:ed:c0:
1d:0c:86:c1:e4:94:a8:26:12:0e:e7:84:97:76:59:
16:13:65:7f:9c:4d:3b:d9:ef:bb:c2:31:4d:78:15:
b4:6d:00:6a:1c:c3:a1:22:19:2d:17:20:e2:da:bf:
44:95:ff:db:cf:a8:f6:6d:b9:31:84:b1:3a:bb:70:
5c:d9:35:4a:87:a8:2b:e6:fc:69:a3:0e:bf:94:11:
36:e9:ad:92:6d:8e:a8:de:cb:33:00:0a:8d:9c:31:
bc:02:9d:a0:d8:d2:9e:00:85:c3:f4:5a:bb:e3:8d:
08:55:d2:14:42:3f:c6:65:7a:93:17:4b:26:5e:76:
7b:94:fd:90:51:ca:ef:ab:4b:a0:40:f0:96:74:6e:
1f:ae:2f:b9:c2:d9:66:3b:c9:ce:72:9f:66:99:ac:
13:f9:7d:33:90:58:1b:9f:48:05:05:e5:01:98:46:
ed:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:6E:D9:E2:19:B0:A2:6B:F0:99:87:47:F3:E4:60:BE:E6:56:70:1A
X509v3 Authority Key Identifier:
keyid:0D:32:17:22:61:C9:50:9E:57:35:21:37:BA:01:92:A8:48:6B:6F:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DTIXImHJUJ5XNSE3ugGSqEhrb90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/58e8f8-1b27-41a4-92ab-fe8484f7079d/1/DTIXImHJUJ5XNSE3ugGSqEhrb90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/58e8f8-1b27-41a4-92ab-fe8484f7079d/1/DTIXImHJUJ5XNSE3ugGSqEhrb90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:2d:a4:cb:69:e3:d9:f0:bc:a7:2a:37:32:98:4d:63:9c:32:
98:cc:d2:91:b2:62:0d:2d:62:a4:b9:c2:e0:f6:ca:33:5f:18:
4e:83:0f:bb:d4:21:fe:9d:e8:a1:70:d0:10:26:c2:30:8c:16:
77:79:80:7b:84:f7:03:30:d8:af:94:63:63:b3:f4:ea:37:e2:
55:05:0a:af:ec:ce:0e:a9:34:05:af:ca:2b:6d:fe:7f:6d:3b:
04:c8:86:a2:36:bb:78:ab:f8:d8:64:f1:93:54:57:a5:f5:5a:
fe:c7:6d:ab:f7:d1:9a:4d:3a:b1:e0:23:fa:3d:50:02:c6:3d:
d4:a5:f5:d2:a0:0e:76:8d:a2:05:c4:ad:79:65:2a:da:6b:fd:
e9:21:54:51:a2:7b:7f:bb:b9:ff:5c:18:d0:75:2e:f4:c7:97:
41:81:da:81:af:d8:7a:1e:f5:c4:a5:3d:c7:30:82:b1:34:08:
16:f9:8b:f1:31:35:e6:f0:48:91:98:30:24:29:65:7c:32:a6:
67:dd:b9:d9:42:31:18:62:4a:b7:19:44:5d:bd:bc:df:0d:33:
3c:a2:e5:11:07:36:b5:44:39:37:82:dc:17:5d:10:3f:62:2a:
32:92:ac:91:25:dd:86:1a:63:c0:d5:f6:19:e4:fd:80:ef:71:
e6:1b:cd:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:09:56 2025 by rpki-client