Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/0219c1-a551-4b91-9ca3-032b3b614dd8/1/D3jqRswh1F7WEmjUqfVnMsheIVA.mft
File: D3jqRswh1F7WEmjUqfVnMsheIVA.mft (raw, json)
Hash identifier: xkhMEAtiLOeLNv3wbC8djSD77r/12/zuUh9vYuWoZ8A=
Subject key identifier: DB:83:1C:B0:EC:47:4C:32:5F:BC:5D:12:49:D1:B2:E3:77:BD:68:EE
Authority key identifier: 0F:78:EA:46:CC:21:D4:5E:D6:12:68:D4:A9:F5:67:32:C8:5E:21:50
Certificate issuer: /CN=0f78ea46cc21d45ed61268d4a9f56732c85e2150
Certificate serial: 019782B2BE1616AD1189CF64A87DE82096B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D3jqRswh1F7WEmjUqfVnMsheIVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/0219c1-a551-4b91-9ca3-032b3b614dd8/1/D3jqRswh1F7WEmjUqfVnMsheIVA.mft
Manifest number: 1599
Signing time: Wed 18 Jun 2025 11:00:41 +0000
Manifest this update: Wed 18 Jun 2025 11:00:41 +0000
Manifest next update: Thu 19 Jun 2025 11:00:41 +0000
Files and hashes: 1: 8SQTxy_p8cY9en9UR93vjFnnH74.roa (hash: LPCNfHY24fbVR2x4GxfhYD0c8Fxi97g9FBcWFfU2h/o=)
2: D3jqRswh1F7WEmjUqfVnMsheIVA.crl (hash: JEXrtv6vScXxdctGqSuOTPgD7nB+4EWVSRFzs3p2plg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/0219c1-a551-4b91-9ca3-032b3b614dd8/1/D3jqRswh1F7WEmjUqfVnMsheIVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/0219c1-a551-4b91-9ca3-032b3b614dd8/1/D3jqRswh1F7WEmjUqfVnMsheIVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/D3jqRswh1F7WEmjUqfVnMsheIVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:82:b2:be:16:16:ad:11:89:cf:64:a8:7d:e8:20:96:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f78ea46cc21d45ed61268d4a9f56732c85e2150
Validity
Not Before: Jun 18 11:00:41 2025 GMT
Not After : Jun 19 11:00:41 2025 GMT
Subject: CN=db831cb0ec474c325fbc5d1249d1b2e377bd68ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:2f:ee:a0:39:fa:da:7d:7e:95:00:66:3e:f1:
4b:34:58:83:34:cc:e7:56:69:e3:f8:70:c6:bd:ba:
4c:1b:83:6d:45:78:8f:40:8c:32:ea:7f:d3:f0:44:
72:06:dd:5c:57:0a:f9:1e:aa:b9:58:52:fa:68:45:
86:77:61:44:1b:97:90:5c:84:e3:7c:f7:52:d3:c6:
92:8f:73:df:df:c3:b9:72:1b:ed:2c:46:9d:fd:3f:
59:c7:b1:8c:a0:70:9d:ac:7a:d8:a1:ee:3c:52:fc:
2a:e2:e2:58:1a:e2:cc:23:5c:06:2e:3d:3d:30:ac:
ec:f4:9e:1f:ee:2b:1d:17:78:b2:7d:cc:98:db:1a:
c4:96:89:d8:fe:04:54:80:8c:cb:6b:14:e5:a1:ee:
af:ed:f8:d4:57:9a:54:fb:9d:37:22:77:82:eb:e3:
a0:3c:50:7a:f5:46:a4:5a:4f:c2:0e:84:0e:3b:61:
4a:70:a4:ea:1a:78:1c:08:45:9c:9b:ed:bb:d6:5a:
0e:71:ea:15:3f:9f:b6:58:dd:cf:5b:0e:d8:a3:cc:
0b:4b:9c:44:3b:d3:5c:ed:1b:bb:9f:c3:ed:bd:52:
75:2e:2d:19:00:22:8f:d0:33:4d:c5:13:73:48:00:
8b:e7:11:f1:05:a0:5c:30:f2:b5:d4:20:3d:14:5b:
b4:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:83:1C:B0:EC:47:4C:32:5F:BC:5D:12:49:D1:B2:E3:77:BD:68:EE
X509v3 Authority Key Identifier:
keyid:0F:78:EA:46:CC:21:D4:5E:D6:12:68:D4:A9:F5:67:32:C8:5E:21:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D3jqRswh1F7WEmjUqfVnMsheIVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0219c1-a551-4b91-9ca3-032b3b614dd8/1/D3jqRswh1F7WEmjUqfVnMsheIVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0219c1-a551-4b91-9ca3-032b3b614dd8/1/D3jqRswh1F7WEmjUqfVnMsheIVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:8c:61:09:c5:d6:f7:f0:db:71:87:c1:73:11:17:a7:93:5c:
fb:8d:1b:27:e7:22:a0:23:97:98:15:eb:2a:9c:b3:0a:20:1c:
25:85:4b:23:76:5d:ba:58:98:ae:33:88:4b:70:8c:a0:72:5b:
9a:52:39:6d:c7:e3:e2:c0:fd:c4:9f:a6:0e:3b:f4:0a:af:79:
05:15:90:03:96:b1:1b:fc:da:fd:c5:16:b9:c9:0c:ea:e9:30:
d2:4c:7b:76:e8:c8:ab:b3:4d:8c:25:60:e8:65:92:54:3c:f0:
a3:06:68:5e:2a:07:54:1d:32:40:f4:3f:fa:02:18:8f:10:d1:
bf:66:f4:b5:bb:da:b7:8c:cf:d1:d6:f5:30:25:12:8c:4d:85:
84:c1:08:0b:c3:98:af:2c:73:f7:d6:89:25:55:b6:2c:e7:08:
47:51:d2:21:dd:22:49:58:6a:da:ee:02:c0:64:41:b8:72:4b:
3f:ff:a0:31:2e:a9:71:92:7b:3d:06:d3:f8:60:fe:2c:e5:ad:
c4:ef:34:10:30:bc:45:7d:05:d5:da:fd:69:cb:e2:f9:76:14:
8f:ca:91:c1:3a:c5:cf:43:ac:cd:92:52:b9:6d:b2:44:81:41:
4e:2b:4c:a0:6c:53:3a:87:89:d3:4d:7e:17:22:33:d1:83:b0:
7b:e6:70:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 14:58:47 2025 by rpki-client