Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/aad27b-69ba-49ed-bb7e-a990f9064a57/1/DqPJxEl8H6SF6d0XWK-fAA4r1L8.mft
File: DqPJxEl8H6SF6d0XWK-fAA4r1L8.mft (raw, json)
Hash identifier: TTtNpsqa/eQOwTelg90ltGoCuEylMnu7oYQEON14bMs=
Subject key identifier: F9:39:41:CA:E8:09:1B:B6:7E:C1:4F:CA:62:F0:66:F2:93:DF:34:CE
Authority key identifier: 0E:A3:C9:C4:49:7C:1F:A4:85:E9:DD:17:58:AF:9F:00:0E:2B:D4:BF
Certificate issuer: /CN=0ea3c9c4497c1fa485e9dd1758af9f000e2bd4bf
Certificate serial: 01976C2B34B415877D34E5702551ACA1A6BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DqPJxEl8H6SF6d0XWK-fAA4r1L8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/aad27b-69ba-49ed-bb7e-a990f9064a57/1/DqPJxEl8H6SF6d0XWK-fAA4r1L8.mft
Manifest number: 137E
Signing time: Sat 14 Jun 2025 02:01:00 +0000
Manifest this update: Sat 14 Jun 2025 02:01:00 +0000
Manifest next update: Sun 15 Jun 2025 02:01:00 +0000
Files and hashes: 1: 28XK2LntrxapfWOiuemErSbP0S4.roa (hash: sgkhd13yQAtGGrSC01wHgB/gMMTuEmwDtGIbpMD74NM=)
2: DqPJxEl8H6SF6d0XWK-fAA4r1L8.crl (hash: whXh3SwA2j+lOWKXpq7TpDq43CYyOVD5y2D53hexgIQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/aad27b-69ba-49ed-bb7e-a990f9064a57/1/DqPJxEl8H6SF6d0XWK-fAA4r1L8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/aad27b-69ba-49ed-bb7e-a990f9064a57/1/DqPJxEl8H6SF6d0XWK-fAA4r1L8.mft
rsync://rpki.ripe.net/repository/DEFAULT/DqPJxEl8H6SF6d0XWK-fAA4r1L8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:2b:34:b4:15:87:7d:34:e5:70:25:51:ac:a1:a6:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ea3c9c4497c1fa485e9dd1758af9f000e2bd4bf
Validity
Not Before: Jun 14 02:01:00 2025 GMT
Not After : Jun 15 02:01:00 2025 GMT
Subject: CN=f93941cae8091bb67ec14fca62f066f293df34ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f6:d4:21:c8:80:b7:25:df:79:bd:6a:3d:2a:
17:bf:c1:81:32:8f:b1:8f:32:9d:96:46:19:2f:1b:
4e:88:1d:e1:c5:26:fa:64:83:61:ed:da:7b:b7:ab:
3d:49:e4:47:82:6e:44:93:ba:bd:d4:59:7f:ee:d3:
3c:4f:3f:2d:5e:44:e4:73:79:7d:81:5e:be:25:5e:
57:36:9b:67:fe:aa:65:53:7c:71:67:22:eb:c3:b2:
cb:26:6e:e7:f5:38:97:75:a7:66:4c:22:ae:6c:45:
b7:f2:83:20:85:c7:11:de:e1:49:4c:21:c0:2c:30:
69:09:3d:ab:3d:bc:7b:31:a8:89:4a:1a:cc:a0:21:
34:a2:92:51:57:ca:90:b4:91:a2:63:1c:da:80:1a:
39:b5:4b:21:93:8a:21:16:82:fa:be:a1:08:06:f8:
5a:2c:63:4d:97:22:cd:46:66:45:44:36:d1:f4:90:
d8:c5:87:7d:ba:20:c1:a4:ed:2c:c0:1d:16:57:11:
fa:b9:cd:0f:6e:4e:79:cc:59:ce:b6:21:a0:1d:e0:
0e:90:f3:29:1a:38:d3:e7:ba:c6:4a:56:42:c1:66:
6f:12:59:58:83:e1:f0:4a:4f:65:95:b3:32:cc:17:
67:43:1b:98:d3:c8:84:86:19:2a:b9:39:01:9f:90:
62:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:39:41:CA:E8:09:1B:B6:7E:C1:4F:CA:62:F0:66:F2:93:DF:34:CE
X509v3 Authority Key Identifier:
keyid:0E:A3:C9:C4:49:7C:1F:A4:85:E9:DD:17:58:AF:9F:00:0E:2B:D4:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DqPJxEl8H6SF6d0XWK-fAA4r1L8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/aad27b-69ba-49ed-bb7e-a990f9064a57/1/DqPJxEl8H6SF6d0XWK-fAA4r1L8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/aad27b-69ba-49ed-bb7e-a990f9064a57/1/DqPJxEl8H6SF6d0XWK-fAA4r1L8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:e7:ee:05:df:2b:ed:58:17:4f:0f:67:3f:be:6d:c2:1a:e8:
7d:95:4b:46:93:ef:45:2f:61:bc:a8:48:9d:eb:e6:91:ba:6e:
e5:a6:6d:4f:10:27:b2:53:45:47:ab:2d:ea:f4:f7:d7:a1:e2:
12:7c:34:f7:e9:32:88:0e:b2:29:99:0d:d9:9c:72:3f:f6:b4:
09:1b:ce:59:f3:f4:13:7d:40:bf:c5:dd:35:fa:b4:f8:26:b6:
8d:a7:16:b4:f4:90:4e:c8:d1:b3:cd:6f:03:70:e3:ec:7c:59:
fc:16:fd:21:16:2a:04:55:be:05:8c:1f:c3:35:e1:4a:2e:5e:
d5:82:16:af:86:43:75:78:be:b2:84:1c:08:ca:1e:e6:25:d5:
8a:bf:09:8e:84:0e:44:f1:9c:08:ba:a1:77:65:49:e9:4f:ce:
c1:bd:a0:5c:6d:5d:4a:3a:56:54:92:c7:58:c8:96:a1:87:12:
14:9a:36:9a:c8:48:a9:2b:c8:57:57:8a:6d:a7:7e:8b:ae:1f:
0f:a2:ab:a2:c0:ba:13:e9:89:c8:3d:7c:60:80:2a:bd:f1:96:
f6:25:86:33:28:ee:40:74:7d:d2:3d:5e:7e:ef:77:df:a0:9e:
5f:8d:6a:da:14:2c:2e:15:d6:65:49:67:b1:47:58:fd:15:02:
b2:48:fb:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:10:52 2025 by rpki-client