Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/8c3a8b-9171-4620-b1e0-77fca7a30b9f/1/DGhZ_rp4NMkyK3xva9gb0771zlE.mft
File: DGhZ_rp4NMkyK3xva9gb0771zlE.mft (raw, json)
Hash identifier: 0I9xkP+2QubDAef0YIrMNG6tGavDBE3yUsZBB1yzNRU=
Subject key identifier: AA:57:82:81:72:DF:00:4D:72:A7:4F:C3:84:C9:F3:CA:66:CF:54:30
Authority key identifier: 0C:68:59:FE:BA:78:34:C9:32:2B:7C:6F:6B:D8:1B:D3:BE:F5:CE:51
Certificate issuer: /CN=0c6859feba7834c9322b7c6f6bd81bd3bef5ce51
Certificate serial: 01976C623CAA8A4B26686CC52E43982BA223
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DGhZ_rp4NMkyK3xva9gb0771zlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/8c3a8b-9171-4620-b1e0-77fca7a30b9f/1/DGhZ_rp4NMkyK3xva9gb0771zlE.mft
Manifest number: 0433
Signing time: Sat 14 Jun 2025 03:01:06 +0000
Manifest this update: Sat 14 Jun 2025 03:01:06 +0000
Manifest next update: Sun 15 Jun 2025 03:01:06 +0000
Files and hashes: 1: A_Ig0V6t3ntCxD7PTccbnIguTs8.roa (hash: x63polo4t0dGd0M1xxigrw4CFjSi7R4AExIbYtwQIRY=)
2: DGhZ_rp4NMkyK3xva9gb0771zlE.crl (hash: y2lCA9Z/aFFX5nh07UGXLYPKz8vDor0P59WNaVZVa6Q=)
3: Zj1rmMEpOraplrkaquOM2ubO6Mc.roa (hash: oIS73RHQscBvRjMMzd2FUWBDj9UGJrVmsW4v2M6hJEQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/8c3a8b-9171-4620-b1e0-77fca7a30b9f/1/DGhZ_rp4NMkyK3xva9gb0771zlE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/8c3a8b-9171-4620-b1e0-77fca7a30b9f/1/DGhZ_rp4NMkyK3xva9gb0771zlE.mft
rsync://rpki.ripe.net/repository/DEFAULT/DGhZ_rp4NMkyK3xva9gb0771zlE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:62:3c:aa:8a:4b:26:68:6c:c5:2e:43:98:2b:a2:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c6859feba7834c9322b7c6f6bd81bd3bef5ce51
Validity
Not Before: Jun 14 03:01:06 2025 GMT
Not After : Jun 15 03:01:06 2025 GMT
Subject: CN=aa57828172df004d72a74fc384c9f3ca66cf5430
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:64:1a:cc:b7:7c:23:40:e4:10:39:a4:d9:ba:
15:4d:5e:b8:d5:de:32:a6:27:fa:b9:1e:b3:96:eb:
f5:b3:7d:85:c6:a1:03:97:fc:2e:f3:3c:4d:e9:2e:
90:66:d2:c0:9a:f4:80:f6:0b:63:e2:00:2c:ee:c5:
78:90:0e:22:d1:b1:bb:08:03:78:ba:f0:8e:ac:7c:
5b:01:d8:4d:29:63:34:9a:0a:75:26:4f:36:ba:ca:
f4:7c:27:84:f3:da:3f:00:2a:56:ac:19:e2:92:d6:
eb:ac:81:91:89:8b:5b:c4:3a:0c:9f:b9:f5:e0:15:
32:96:da:55:f2:98:74:68:76:77:e9:2b:0b:c0:ae:
c0:71:c0:56:02:4b:1b:8b:ce:40:5a:00:7b:7b:e2:
c9:a7:f3:56:e3:4a:cd:da:95:9f:92:e6:e3:c5:c3:
b6:7b:fc:60:be:4c:6c:ed:f3:24:36:92:e5:fe:f5:
e2:21:33:af:1c:90:f0:f7:61:8a:ed:e5:88:f7:b1:
08:cc:6e:23:39:04:c4:17:57:c2:8b:55:c8:fd:2b:
e2:60:b0:d0:1a:ae:1d:57:42:4b:af:95:9f:fd:0b:
57:82:f9:71:7a:f9:e0:48:2e:51:68:f1:8d:4f:64:
b2:2f:02:fe:ec:ef:98:1f:c2:1c:47:02:81:6c:09:
61:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:57:82:81:72:DF:00:4D:72:A7:4F:C3:84:C9:F3:CA:66:CF:54:30
X509v3 Authority Key Identifier:
keyid:0C:68:59:FE:BA:78:34:C9:32:2B:7C:6F:6B:D8:1B:D3:BE:F5:CE:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DGhZ_rp4NMkyK3xva9gb0771zlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/8c3a8b-9171-4620-b1e0-77fca7a30b9f/1/DGhZ_rp4NMkyK3xva9gb0771zlE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/8c3a8b-9171-4620-b1e0-77fca7a30b9f/1/DGhZ_rp4NMkyK3xva9gb0771zlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:6b:13:21:09:a3:67:61:26:cb:75:06:4b:25:e2:7d:b2:56:
3c:8e:c7:a7:f9:4a:db:a8:61:5b:43:17:d3:87:7b:bb:cc:f5:
06:e3:22:7d:d6:dd:9f:33:ee:23:fd:67:f3:a1:53:06:71:b6:
b0:b9:c6:27:0f:1a:53:2f:63:8d:b5:96:bd:38:96:05:00:97:
c7:df:91:98:64:17:cb:39:d1:bd:4c:5d:a9:39:f1:2f:60:ca:
de:17:42:1b:e3:68:a8:c4:ae:c6:6e:0a:dd:19:a5:99:21:fe:
a2:74:4b:b5:c4:a7:26:d2:93:93:db:3b:5d:99:ab:b5:17:73:
13:a0:e7:1e:42:c8:70:4c:90:88:25:06:43:ff:c6:d0:7b:33:
35:5b:0a:6b:64:7e:0a:f2:f9:f6:cb:fa:15:13:bf:69:ba:4d:
b4:b3:6f:00:10:ca:79:cb:29:08:fe:53:78:94:2e:f7:b4:09:
a0:14:da:b7:e0:72:2b:00:de:43:52:de:e1:26:b7:a0:d1:77:
d2:75:66:06:2f:2d:97:bc:79:1e:12:51:1a:c7:e0:fe:33:3f:
ef:dc:49:6f:4d:3e:68:22:db:a9:26:27:3b:72:b3:e3:89:71:
96:ba:9a:ac:41:61:04:4e:37:79:41:25:77:2d:86:b8:39:ce:
c0:66:d3:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:42:07 2025 by rpki-client