Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/729210-d720-4f38-b6be-acf66f78b2b7/1/D33TJ3nBqbKX4oywNf1nmrsZFtE.mft
File: D33TJ3nBqbKX4oywNf1nmrsZFtE.mft (raw, json)
Hash identifier: RnO9sGzeOqY6QoXq5JwoBqQ448gHUgvVrazWW9YhM1Y=
Subject key identifier: 6A:C0:F8:5D:E1:B0:50:FC:B4:15:0A:4C:F6:48:81:13:30:04:6C:4A
Authority key identifier: 0F:7D:D3:27:79:C1:A9:B2:97:E2:8C:B0:35:FD:67:9A:BB:19:16:D1
Certificate issuer: /CN=0f7dd32779c1a9b297e28cb035fd679abb1916d1
Certificate serial: 019768F322238D661AE641635CC256302845
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D33TJ3nBqbKX4oywNf1nmrsZFtE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/729210-d720-4f38-b6be-acf66f78b2b7/1/D33TJ3nBqbKX4oywNf1nmrsZFtE.mft
Manifest number: 02F0
Signing time: Fri 13 Jun 2025 11:00:53 +0000
Manifest this update: Fri 13 Jun 2025 11:00:53 +0000
Manifest next update: Sat 14 Jun 2025 11:00:53 +0000
Files and hashes: 1: D33TJ3nBqbKX4oywNf1nmrsZFtE.crl (hash: aY0G/t2LXF/e+BfNokLXJKdj+3OITODiuHGwrchR0hU=)
2: n5HWKOnZqMf_HeJzgOhByI-5MCw.roa (hash: YxqtLi8VJbl+yyfM6G5PrLuDd8IPpzOnurqCTIlxay8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/729210-d720-4f38-b6be-acf66f78b2b7/1/D33TJ3nBqbKX4oywNf1nmrsZFtE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/729210-d720-4f38-b6be-acf66f78b2b7/1/D33TJ3nBqbKX4oywNf1nmrsZFtE.mft
rsync://rpki.ripe.net/repository/DEFAULT/D33TJ3nBqbKX4oywNf1nmrsZFtE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 11:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:f3:22:23:8d:66:1a:e6:41:63:5c:c2:56:30:28:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f7dd32779c1a9b297e28cb035fd679abb1916d1
Validity
Not Before: Jun 13 11:00:53 2025 GMT
Not After : Jun 14 11:00:53 2025 GMT
Subject: CN=6ac0f85de1b050fcb4150a4cf648811330046c4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:f6:eb:b1:dc:7e:31:5b:8f:a9:a5:bc:56:1b:
bd:9c:e2:db:94:22:df:29:46:c7:e5:f9:ba:c0:4a:
8a:c8:53:73:28:38:57:2a:fa:df:9f:46:9e:8c:2d:
93:b8:b3:9d:45:89:58:71:dc:dc:31:86:cb:32:22:
7e:89:1c:c5:e8:56:6b:7a:97:40:6b:eb:0e:35:07:
f0:f9:26:1b:4a:66:95:b4:34:b2:19:d4:29:d0:e4:
30:ea:70:a2:d3:09:42:9e:28:4a:cb:ba:a1:09:1d:
2c:9b:01:98:ef:c6:5f:5d:28:ee:08:31:4b:fb:9d:
a1:c0:8e:5c:53:6f:1c:e3:29:8b:0b:cd:19:ce:a5:
b7:f1:64:65:26:fd:c3:97:23:86:27:71:c3:46:d0:
8a:f2:c6:8d:67:a0:8d:c9:1a:b9:04:9d:cf:4b:4e:
8a:d7:bf:1f:15:67:c3:1e:6b:8d:30:3e:3d:b6:7e:
b7:b8:31:8f:e9:01:5b:e0:69:5e:a1:f7:55:00:60:
38:91:79:76:4c:20:89:09:4a:07:3c:8a:8f:15:6e:
22:af:9d:ed:33:61:d9:c4:04:a6:fc:92:84:30:ff:
bd:a4:63:91:53:14:75:f0:f2:e1:0f:82:04:96:8c:
5d:58:5a:e9:3a:b7:e7:e9:60:0c:26:82:ed:05:99:
15:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:C0:F8:5D:E1:B0:50:FC:B4:15:0A:4C:F6:48:81:13:30:04:6C:4A
X509v3 Authority Key Identifier:
keyid:0F:7D:D3:27:79:C1:A9:B2:97:E2:8C:B0:35:FD:67:9A:BB:19:16:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D33TJ3nBqbKX4oywNf1nmrsZFtE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/729210-d720-4f38-b6be-acf66f78b2b7/1/D33TJ3nBqbKX4oywNf1nmrsZFtE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/729210-d720-4f38-b6be-acf66f78b2b7/1/D33TJ3nBqbKX4oywNf1nmrsZFtE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:32:b6:d5:f8:06:b4:9a:3b:69:6f:43:7c:8d:9c:51:d0:09:
a2:48:e2:cf:3b:50:79:05:b0:d4:f8:35:81:77:66:c0:64:4b:
e6:ea:43:bb:ec:e0:b8:af:4d:c6:01:d6:fb:11:49:66:67:b7:
04:f0:c8:cf:e3:7e:47:99:a4:0b:c8:95:c8:99:74:a5:f8:f6:
e7:94:e4:aa:85:2a:af:e0:1b:ab:8d:57:53:88:82:6a:e4:6d:
26:f3:d3:bf:44:f0:6a:f0:dc:09:3e:12:24:45:c3:83:8d:7f:
6b:d4:17:7c:c4:e0:37:8c:05:5d:2a:a0:7f:e3:83:87:88:7b:
72:12:67:ec:15:3d:b1:81:b1:ff:77:be:61:43:d8:6e:cd:50:
d5:b9:46:7f:ae:10:4a:e4:9e:21:43:dc:e5:1d:58:dd:9c:eb:
35:bd:b0:b9:0a:c6:f5:d0:51:e3:46:81:cc:c1:88:6f:63:5a:
f4:9d:03:db:e9:e1:cd:ac:7d:72:3f:dc:74:04:11:04:03:5b:
dd:2c:9f:49:3a:c6:07:a6:ac:c8:08:79:9d:39:d3:cc:e9:bb:
77:b5:06:a9:80:79:69:e7:e0:dc:31:b5:89:ed:ff:f0:34:e2:
5c:1d:04:81:c5:e6:c5:f9:8d:ab:5d:62:c5:a7:fd:5d:a7:60:
f7:25:8f:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:25:51 2025 by rpki-client