Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/c680bf-9b6c-44d3-837f-88cfa3dca6de/1/dr5GHrn3AE8poX_d3-8uLqBeua8.mft
File: dr5GHrn3AE8poX_d3-8uLqBeua8.mft (raw, json)
Hash identifier: mT+5ExDJEan5lm8CWOJvs7ojKR9z4X8TBA9qtpU3mFI=
Subject key identifier: 83:64:5A:E7:0D:0D:C2:75:68:48:E3:EC:C0:1C:63:5A:88:A2:55:3E
Authority key identifier: 76:BE:46:1E:B9:F7:00:4F:29:A1:7F:DD:DF:EF:2E:2E:A0:5E:B9:AF
Certificate issuer: /CN=76be461eb9f7004f29a17fdddfef2e2ea05eb9af
Certificate serial: 01976C6212D6746576B9B1137C55EDC868FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dr5GHrn3AE8poX_d3-8uLqBeua8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/c680bf-9b6c-44d3-837f-88cfa3dca6de/1/dr5GHrn3AE8poX_d3-8uLqBeua8.mft
Manifest number: 1523
Signing time: Sat 14 Jun 2025 03:00:56 +0000
Manifest this update: Sat 14 Jun 2025 03:00:56 +0000
Manifest next update: Sun 15 Jun 2025 03:00:56 +0000
Files and hashes: 1: SmenFq2eO29wVInO8xQQnEozH4M.roa (hash: NLqfCsW+19ubwmofae6n/UEN1RfOh4ZI/s4/YAFk4k4=)
2: dr5GHrn3AE8poX_d3-8uLqBeua8.crl (hash: 9B9r65CbYQYSm7g5lMQPEauCkAGTIlG8h7Oz2+K9+2Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/c680bf-9b6c-44d3-837f-88cfa3dca6de/1/dr5GHrn3AE8poX_d3-8uLqBeua8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/c680bf-9b6c-44d3-837f-88cfa3dca6de/1/dr5GHrn3AE8poX_d3-8uLqBeua8.mft
rsync://rpki.ripe.net/repository/DEFAULT/dr5GHrn3AE8poX_d3-8uLqBeua8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:62:12:d6:74:65:76:b9:b1:13:7c:55:ed:c8:68:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76be461eb9f7004f29a17fdddfef2e2ea05eb9af
Validity
Not Before: Jun 14 03:00:56 2025 GMT
Not After : Jun 15 03:00:56 2025 GMT
Subject: CN=83645ae70d0dc2756848e3ecc01c635a88a2553e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ff:c2:19:f1:87:e0:be:4e:64:81:8d:2b:4f:
a8:2b:21:d0:81:c2:33:47:ef:1a:c4:42:ea:03:9b:
ba:f8:84:96:80:bc:4d:2f:3b:37:87:d0:d7:b9:23:
6b:fb:a5:47:ca:7a:d9:86:fa:b7:76:ba:af:c7:86:
66:b9:76:46:17:9b:67:d7:ec:32:68:79:1e:b5:ca:
26:91:d7:a0:d4:74:61:a0:19:7e:37:5b:83:79:4a:
89:bb:72:85:18:4e:12:f4:8d:16:13:d1:1d:5e:8b:
43:5d:84:92:41:3c:e3:ac:11:7a:f3:50:e1:ed:6c:
f2:e5:2b:7f:1e:e9:6f:56:95:de:ec:80:a1:df:b3:
ad:66:73:4a:1d:76:dc:dc:f9:8c:b1:74:72:9f:f2:
10:f6:40:79:18:bc:cd:78:b9:5b:45:3a:6b:b7:4c:
4a:8d:f3:a2:bd:17:7b:97:98:42:51:4b:39:44:b8:
b6:6b:9a:4c:b2:5b:37:c5:30:32:31:c1:39:eb:7b:
df:22:d1:bd:12:10:ab:77:b8:df:e1:93:87:58:72:
24:8a:d5:9b:48:e7:04:93:44:01:de:02:dc:e8:8c:
11:1b:9f:95:32:6e:ca:30:06:5b:21:79:02:94:dc:
7a:15:14:f2:a8:72:21:ed:19:33:2c:bd:db:c0:a4:
29:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:64:5A:E7:0D:0D:C2:75:68:48:E3:EC:C0:1C:63:5A:88:A2:55:3E
X509v3 Authority Key Identifier:
keyid:76:BE:46:1E:B9:F7:00:4F:29:A1:7F:DD:DF:EF:2E:2E:A0:5E:B9:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dr5GHrn3AE8poX_d3-8uLqBeua8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/c680bf-9b6c-44d3-837f-88cfa3dca6de/1/dr5GHrn3AE8poX_d3-8uLqBeua8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/c680bf-9b6c-44d3-837f-88cfa3dca6de/1/dr5GHrn3AE8poX_d3-8uLqBeua8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:05:a6:a4:7b:1b:8d:73:bb:4c:b1:29:6f:d8:4c:e7:26:10:
a0:9e:a3:a0:ba:ab:9e:1c:19:2a:43:d3:2a:bc:7c:66:52:84:
b9:b5:ec:4c:d8:fd:f5:7e:4f:e0:f4:21:31:dd:20:5b:6e:b5:
90:32:cb:35:26:dc:4e:83:96:26:30:1f:4c:d5:fa:bc:22:f4:
f0:5c:f2:d6:4b:88:2f:ff:56:e1:48:5d:68:8f:18:64:60:9b:
bb:c0:e9:f8:95:bd:59:07:72:19:d5:0f:4e:80:3f:37:d4:d5:
d7:47:a7:3a:54:d8:19:6d:c8:08:56:9b:0a:3e:83:77:90:cc:
2c:d8:22:f4:7a:0d:ba:40:8c:45:97:a7:82:ab:8f:c6:08:83:
25:01:4c:96:67:f3:3b:54:f1:35:ef:a6:29:ca:c5:0c:8e:0e:
4e:8d:75:c9:2b:d1:02:0f:51:20:6d:92:08:f4:13:50:df:49:
99:b5:78:c7:cd:d2:6b:b1:e4:34:38:47:53:51:cc:62:3d:4b:
b8:d4:68:53:17:a8:64:31:d7:3b:4b:9c:13:0c:19:71:e0:8f:
89:95:19:71:ad:44:14:85:7c:c0:26:8a:2b:fa:0f:aa:70:84:
89:03:bc:ea:bf:fb:7d:93:f5:4f:2f:74:94:66:68:be:e0:bb:
05:98:14:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:31:31 2025 by rpki-client