Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/deb874-f90b-42c4-bcd2-47bbf21eac9f/1/rRDN0Li3MwTJhf3hsQ5AGCvxOQI.mft
File: rRDN0Li3MwTJhf3hsQ5AGCvxOQI.mft (raw, json)
Hash identifier: BdyLQAubY9PmXGhFuLLwz6QrATRhs3BAK9EVPbb77lk=
Subject key identifier: 1D:61:3E:C4:D8:01:02:DA:C1:C7:EC:26:D9:FA:F3:4A:F9:2D:50:91
Authority key identifier: AD:10:CD:D0:B8:B7:33:04:C9:85:FD:E1:B1:0E:40:18:2B:F1:39:02
Certificate issuer: /CN=ad10cdd0b8b73304c985fde1b10e40182bf13902
Certificate serial: 01976BBD4B43C3B89B9A499C66E370537C28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rRDN0Li3MwTJhf3hsQ5AGCvxOQI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/deb874-f90b-42c4-bcd2-47bbf21eac9f/1/rRDN0Li3MwTJhf3hsQ5AGCvxOQI.mft
Manifest number: 158F
Signing time: Sat 14 Jun 2025 00:00:57 +0000
Manifest this update: Sat 14 Jun 2025 00:00:57 +0000
Manifest next update: Sun 15 Jun 2025 00:00:57 +0000
Files and hashes: 1: Ja_97273VAEHJD8U1oqoC_9aF9c.roa (hash: vJfC/52sLPqoQGFApNLbUAegOgUUxIE6GeG0+RQdWv8=)
2: rRDN0Li3MwTJhf3hsQ5AGCvxOQI.crl (hash: Z7qmpugyZ0JESUMydtBuFTBipgHBGQJSfvftn5CrmBA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/deb874-f90b-42c4-bcd2-47bbf21eac9f/1/rRDN0Li3MwTJhf3hsQ5AGCvxOQI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/deb874-f90b-42c4-bcd2-47bbf21eac9f/1/rRDN0Li3MwTJhf3hsQ5AGCvxOQI.mft
rsync://rpki.ripe.net/repository/DEFAULT/rRDN0Li3MwTJhf3hsQ5AGCvxOQI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 00:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:bd:4b:43:c3:b8:9b:9a:49:9c:66:e3:70:53:7c:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad10cdd0b8b73304c985fde1b10e40182bf13902
Validity
Not Before: Jun 14 00:00:57 2025 GMT
Not After : Jun 15 00:00:57 2025 GMT
Subject: CN=1d613ec4d80102dac1c7ec26d9faf34af92d5091
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:78:10:7d:6c:dd:26:3b:45:fd:17:6d:16:e2:
00:cb:4d:0f:bc:1a:14:69:d6:73:60:7a:c2:29:20:
e1:70:f4:77:46:d2:20:f7:e8:99:a0:0e:21:dc:9b:
ab:40:65:f9:74:a8:aa:e4:44:b4:4e:e6:70:20:be:
b0:8a:44:3d:63:3e:dc:fe:f3:04:a9:d5:6b:07:38:
c4:69:5b:5f:5b:3a:e8:51:cf:e7:bf:90:ed:2e:78:
5d:fc:93:15:4e:37:3d:df:2f:d1:1e:8d:4d:b7:32:
6d:3f:63:57:b7:72:a1:74:50:db:b6:15:c6:b6:05:
75:be:31:42:b0:83:d3:fa:7b:ba:54:56:be:b9:5e:
fc:71:a8:a0:b6:49:40:41:c2:2a:29:08:6a:2e:d5:
ca:7f:f7:32:ea:c7:d5:00:f3:1c:d0:83:4e:ed:e8:
8f:0c:bf:7d:14:e0:68:4d:8a:5f:ad:f0:3f:10:ab:
88:98:a2:00:16:16:29:a3:92:45:ae:0d:c8:36:a0:
97:a0:47:2f:3b:87:fd:34:5c:05:f5:f4:a8:be:c8:
9e:e1:dd:c4:70:f6:8a:c4:6f:8a:09:a9:2d:22:60:
b1:33:8a:07:b1:a2:3c:03:ff:0c:b4:26:b7:1f:a8:
e6:2c:d5:f9:e1:9a:49:44:2d:68:3f:49:91:26:8b:
47:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:61:3E:C4:D8:01:02:DA:C1:C7:EC:26:D9:FA:F3:4A:F9:2D:50:91
X509v3 Authority Key Identifier:
keyid:AD:10:CD:D0:B8:B7:33:04:C9:85:FD:E1:B1:0E:40:18:2B:F1:39:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rRDN0Li3MwTJhf3hsQ5AGCvxOQI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/deb874-f90b-42c4-bcd2-47bbf21eac9f/1/rRDN0Li3MwTJhf3hsQ5AGCvxOQI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/deb874-f90b-42c4-bcd2-47bbf21eac9f/1/rRDN0Li3MwTJhf3hsQ5AGCvxOQI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:d8:11:e6:36:73:72:b2:2b:27:17:df:47:15:e6:14:72:f7:
39:46:8e:4d:84:96:12:f6:5d:50:f2:c0:28:f1:88:bb:95:f7:
5e:0c:33:e5:55:a4:11:ba:9a:3a:48:8a:eb:99:11:f4:d5:bd:
1d:cf:72:e3:1a:8f:a0:75:0c:77:09:57:10:47:36:1f:c2:7f:
16:25:91:e3:dc:f3:96:ce:5c:6f:2e:79:66:b0:0c:5f:5c:bb:
5b:79:26:61:98:6d:f9:dd:f4:62:b2:1f:1c:23:b0:16:c8:22:
bf:c4:30:34:4b:f4:9f:38:22:20:a1:7c:9c:85:ee:df:b9:dc:
e1:75:51:62:3a:fe:4b:a2:a5:e2:fa:fc:fd:52:a4:69:7f:be:
b2:97:8f:be:7b:82:5d:00:7f:39:d5:7f:97:55:3e:2c:ea:1d:
b8:1f:fb:f6:c3:f3:2b:26:3d:7d:48:d7:2c:23:9b:18:cd:14:
9e:7f:7d:c4:4c:64:c1:ee:05:8b:34:be:d5:1d:e0:a6:23:b6:
b8:82:9b:b1:a8:12:dc:d4:86:e9:c8:46:cf:39:a8:46:45:95:
1c:dc:93:72:e3:01:81:b7:a2:3d:52:80:e2:4e:41:c5:cf:b7:
36:d8:09:11:62:b3:3e:b9:fa:7b:83:85:7d:db:c8:57:14:c5:
92:0e:01:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:14:46 2025 by rpki-client