Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/91101c-3437-4f3c-b120-752c933639e5/1/ddUf2ReUrgygfzkwcw0Gmqwbku0.mft
File: ddUf2ReUrgygfzkwcw0Gmqwbku0.mft (raw, json)
Hash identifier: OUwS1Zatdkb9hLeVbacztJdoXb0s3SUD3CF8PSqd9zo=
Subject key identifier: 97:CE:3D:24:A6:4C:5D:9F:6D:84:E7:59:B9:A7:77:9F:0B:EB:F7:F8
Authority key identifier: 75:D5:1F:D9:17:94:AE:0C:A0:7F:39:30:73:0D:06:9A:AC:1B:92:ED
Certificate issuer: /CN=75d51fd91794ae0ca07f3930730d069aac1b92ed
Certificate serial: 019769CF0C3BA96DF1AFE71E214662DCC3D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ddUf2ReUrgygfzkwcw0Gmqwbku0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/91101c-3437-4f3c-b120-752c933639e5/1/ddUf2ReUrgygfzkwcw0Gmqwbku0.mft
Manifest number: CA
Signing time: Fri 13 Jun 2025 15:01:06 +0000
Manifest this update: Fri 13 Jun 2025 15:01:06 +0000
Manifest next update: Sat 14 Jun 2025 15:01:06 +0000
Files and hashes: 1: ddUf2ReUrgygfzkwcw0Gmqwbku0.crl (hash: 5+XtPE2auulLu1SRx18RWl6Lx0dGG21b1id7CMnKIas=)
2: ggnUuCiiw5KDxP7VC2MuE-m18jg.roa (hash: hCPwze5ka3HW9b6kkZEr86kyUHzmDg3+6W3Ek9YCVgo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/91101c-3437-4f3c-b120-752c933639e5/1/ddUf2ReUrgygfzkwcw0Gmqwbku0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/91101c-3437-4f3c-b120-752c933639e5/1/ddUf2ReUrgygfzkwcw0Gmqwbku0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ddUf2ReUrgygfzkwcw0Gmqwbku0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:cf:0c:3b:a9:6d:f1:af:e7:1e:21:46:62:dc:c3:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75d51fd91794ae0ca07f3930730d069aac1b92ed
Validity
Not Before: Jun 13 15:01:06 2025 GMT
Not After : Jun 14 15:01:06 2025 GMT
Subject: CN=97ce3d24a64c5d9f6d84e759b9a7779f0bebf7f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:bd:25:73:b2:7a:80:cc:aa:1d:f8:12:0a:f1:
81:27:bf:b1:ed:52:51:69:c3:7b:26:82:6a:8a:d0:
4d:ac:95:d2:d6:b8:72:c6:97:0a:dc:84:12:f1:d8:
8b:cb:6a:0e:e6:70:dd:80:d7:57:5d:fd:e3:da:83:
db:2f:7a:15:33:ba:2a:b6:5e:23:de:79:50:10:af:
f9:c4:86:b3:b0:a6:c1:a2:f3:9a:26:2d:ec:f3:2b:
f0:7a:f5:4d:5a:a0:19:70:3f:f9:56:2f:5d:26:79:
5c:7d:b9:66:9f:70:7b:f7:87:40:76:7a:6f:15:77:
5d:27:8e:2d:17:66:6a:15:28:fe:44:f7:2a:85:92:
d6:f2:d4:61:e4:5c:df:31:88:78:e9:52:d9:ee:70:
6d:1b:8e:72:50:54:5a:72:aa:de:01:67:4b:07:b1:
f1:04:a4:ca:27:d9:5e:6d:96:66:5d:fe:37:10:06:
d8:bc:19:e1:43:0a:f0:76:5c:fb:a7:f6:79:38:7b:
6f:21:de:07:05:09:49:e4:e0:3a:fc:95:6e:6b:c2:
17:e9:7d:c0:14:7e:c1:07:b6:4f:3e:80:d1:d8:31:
18:fc:b8:2f:cb:65:c9:ba:35:65:35:29:be:13:44:
06:06:f3:7a:9a:67:4c:04:4c:9c:27:67:de:4d:90:
de:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:CE:3D:24:A6:4C:5D:9F:6D:84:E7:59:B9:A7:77:9F:0B:EB:F7:F8
X509v3 Authority Key Identifier:
keyid:75:D5:1F:D9:17:94:AE:0C:A0:7F:39:30:73:0D:06:9A:AC:1B:92:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ddUf2ReUrgygfzkwcw0Gmqwbku0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/91101c-3437-4f3c-b120-752c933639e5/1/ddUf2ReUrgygfzkwcw0Gmqwbku0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/91101c-3437-4f3c-b120-752c933639e5/1/ddUf2ReUrgygfzkwcw0Gmqwbku0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:8c:6f:da:66:62:15:89:92:3d:96:35:e0:8c:39:46:10:75:
1a:8d:e4:a4:a3:05:34:d0:74:ca:14:73:07:28:50:c4:a3:80:
e4:8b:67:c1:65:8d:13:8e:56:5d:13:9c:86:7f:32:54:e5:5a:
42:9f:20:28:eb:dc:69:9e:91:ff:4e:d9:e4:f8:0c:93:53:b3:
be:47:97:36:1d:6e:e6:2b:aa:4a:6e:ea:4c:eb:9c:38:6e:f9:
7b:b0:ef:2c:8c:08:76:85:8f:ee:29:96:fd:0b:99:23:c4:6f:
58:83:18:ad:05:b3:46:41:a1:45:3d:ef:29:05:b2:f7:40:93:
eb:5f:d7:ac:c4:ef:22:00:05:e3:43:f2:d8:fd:d9:b8:fb:40:
27:7e:ad:df:9b:b6:14:77:1f:b9:21:95:80:df:94:18:1d:a7:
41:e8:a9:ad:77:f7:4d:9d:72:39:e5:37:3f:2b:eb:e0:a3:18:
28:32:4b:26:59:ca:1d:a0:a2:c2:18:f3:d6:fc:56:e2:46:94:
0e:b4:10:6e:16:d2:5f:fa:44:e8:d0:7f:26:34:a1:45:74:f7:
b8:2f:fa:c0:97:64:2b:1a:37:63:09:c1:8b:24:6f:13:1a:95:
b2:c5:96:90:76:3c:f1:28:1d:22:62:f5:69:39:1c:6a:05:36:
9f:27:d7:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:27:22 2025 by rpki-client