Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/5531a6-964a-419e-95ff-a60f13198d5d/1/DNJ_6juqPvaA6Pegel8ZSsSYkqU.mft
File: DNJ_6juqPvaA6Pegel8ZSsSYkqU.mft (raw, json)
Hash identifier: GH2wE6Iw5wYMI71m7jApiBkaa6S0fOfh6N7ztJsmW1s=
Subject key identifier: 57:EA:0E:A2:1D:4C:FC:33:89:C0:91:97:57:F9:E4:B7:6A:E8:03:7B
Authority key identifier: 0C:D2:7F:EA:3B:AA:3E:F6:80:E8:F7:A0:7A:5F:19:4A:C4:98:92:A5
Certificate issuer: /CN=0cd27fea3baa3ef680e8f7a07a5f194ac49892a5
Certificate serial: 01976D06E58BBFB2C7FEC250AF542F4F39B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DNJ_6juqPvaA6Pegel8ZSsSYkqU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/5531a6-964a-419e-95ff-a60f13198d5d/1/DNJ_6juqPvaA6Pegel8ZSsSYkqU.mft
Manifest number: 0E9B
Signing time: Sat 14 Jun 2025 06:00:57 +0000
Manifest this update: Sat 14 Jun 2025 06:00:57 +0000
Manifest next update: Sun 15 Jun 2025 06:00:57 +0000
Files and hashes: 1: DNJ_6juqPvaA6Pegel8ZSsSYkqU.crl (hash: rzjkRc1pC842rnDI/cUKddRk0d7Geq/dj6wGFpPCsDs=)
2: KSFH2iX9DZf8Q-50ramqag80LYo.roa (hash: N6tvxRZU5FhCXYfq+gSSvyO+LQEuT5uPy32KkqFgDN0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/5531a6-964a-419e-95ff-a60f13198d5d/1/DNJ_6juqPvaA6Pegel8ZSsSYkqU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/5531a6-964a-419e-95ff-a60f13198d5d/1/DNJ_6juqPvaA6Pegel8ZSsSYkqU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DNJ_6juqPvaA6Pegel8ZSsSYkqU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:06:e5:8b:bf:b2:c7:fe:c2:50:af:54:2f:4f:39:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cd27fea3baa3ef680e8f7a07a5f194ac49892a5
Validity
Not Before: Jun 14 06:00:57 2025 GMT
Not After : Jun 15 06:00:57 2025 GMT
Subject: CN=57ea0ea21d4cfc3389c0919757f9e4b76ae8037b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:e1:17:dd:a2:79:80:03:75:97:25:61:c3:d5:
2a:d8:69:57:c8:eb:ab:11:f2:cf:a7:fe:b4:64:2f:
fd:c3:de:c7:b6:46:55:a7:c9:0a:c5:98:05:24:82:
46:21:23:04:9a:e8:37:15:f9:6c:b7:fe:23:0c:c2:
1f:cb:09:21:4a:74:23:af:ba:88:da:ad:73:66:55:
bd:37:cc:99:6f:bd:ce:83:3a:b2:08:46:81:82:5b:
61:be:f5:e9:7c:24:7d:fe:a7:b5:df:da:26:7a:b1:
c1:c6:03:c8:de:b0:0b:7b:a6:a8:8a:18:47:ba:8b:
3f:b2:41:7e:68:c0:a8:16:9c:c7:1e:45:d6:04:f0:
ca:95:c9:cd:de:86:4e:7b:c2:f2:2e:a5:df:43:9a:
e7:9c:a8:fe:67:20:66:f5:26:0f:46:2a:d5:1a:8f:
03:af:da:6b:40:84:e5:8f:fe:24:b5:31:43:0b:19:
c2:6a:64:49:83:f5:e2:81:cb:18:bf:da:fe:ab:c0:
6c:e2:e2:b8:05:4b:60:d8:77:70:fe:4a:90:c3:5d:
82:53:f2:4d:3f:e3:97:9f:99:70:b0:ab:9f:b9:2e:
63:78:70:9f:76:e4:66:a3:14:4b:7e:fa:6a:eb:33:
ee:bc:5c:49:11:f4:d1:02:32:2d:19:f8:5a:d3:d7:
a9:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:EA:0E:A2:1D:4C:FC:33:89:C0:91:97:57:F9:E4:B7:6A:E8:03:7B
X509v3 Authority Key Identifier:
keyid:0C:D2:7F:EA:3B:AA:3E:F6:80:E8:F7:A0:7A:5F:19:4A:C4:98:92:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DNJ_6juqPvaA6Pegel8ZSsSYkqU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/5531a6-964a-419e-95ff-a60f13198d5d/1/DNJ_6juqPvaA6Pegel8ZSsSYkqU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/5531a6-964a-419e-95ff-a60f13198d5d/1/DNJ_6juqPvaA6Pegel8ZSsSYkqU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:d8:d8:22:98:53:45:69:dd:41:ef:f3:57:b1:af:7b:ed:85:
d2:1d:3b:79:1b:34:98:90:ac:f4:96:da:84:a0:35:c5:32:cd:
4e:38:21:d2:ad:2e:76:a6:c3:60:b8:dc:17:17:97:dc:e8:55:
50:3f:9e:1c:de:4c:63:b6:02:34:5d:7e:5e:97:50:e0:66:6a:
c0:69:b9:63:6a:25:48:81:b4:d5:13:c3:55:55:f6:2e:93:fa:
ce:cd:6e:cc:c0:5a:12:e7:00:82:3a:e8:b4:b4:68:d0:37:24:
f7:b7:ff:90:f3:f3:ec:b7:b6:7a:56:3d:5e:cf:c5:72:26:c5:
00:80:e8:2e:b8:ca:8b:3a:3c:5f:e2:2b:07:3f:f8:b4:55:f7:
13:7f:70:4f:97:7e:1d:a5:03:0a:84:80:a2:9a:74:e8:f8:4f:
e5:13:4f:96:30:97:c1:ac:71:17:b7:81:54:b5:a5:9d:23:a3:
ae:64:cb:9e:91:87:5f:5d:b8:cc:8a:da:88:80:bc:ba:f1:06:
59:4d:e6:47:91:39:d2:8d:bf:98:db:15:80:01:41:df:dc:db:
b0:cd:41:8d:17:9f:57:5e:67:9c:16:d6:c6:00:f3:83:70:fa:
7b:8a:c0:8d:12:77:73:e4:1e:2d:c4:ce:3e:b9:3f:6b:16:0e:
c8:0d:2d:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:57:13 2025 by rpki-client