Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/1532c6-a2f5-48e6-b037-18c5ebef27a8/1/dAThbzM9iWUMZhOsbJXTSNxLeVA.mft
File: dAThbzM9iWUMZhOsbJXTSNxLeVA.mft (raw, json)
Hash identifier: x0pDLG7tWE8OZaAGKtCxL6Wkr23Ky5fkunuFbR7uCFU=
Subject key identifier: 9A:70:37:2D:01:0D:36:30:17:A3:62:2A:5E:AA:3D:73:F4:C4:AC:4B
Authority key identifier: 74:04:E1:6F:33:3D:89:65:0C:66:13:AC:6C:95:D3:48:DC:4B:79:50
Certificate issuer: /CN=7404e16f333d89650c6613ac6c95d348dc4b7950
Certificate serial: 01976EBE4241C03731291FAC379FE065C880
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dAThbzM9iWUMZhOsbJXTSNxLeVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/1532c6-a2f5-48e6-b037-18c5ebef27a8/1/dAThbzM9iWUMZhOsbJXTSNxLeVA.mft
Manifest number: 0119
Signing time: Sat 14 Jun 2025 14:00:51 +0000
Manifest this update: Sat 14 Jun 2025 14:00:51 +0000
Manifest next update: Sun 15 Jun 2025 14:00:51 +0000
Files and hashes: 1: USYf1bw7MHizcISPSt3QDNx57-c.roa (hash: hlppK+U0LprItNasoWls7BUhYE5DrUbPlgUCcoN0Ou8=)
2: dAThbzM9iWUMZhOsbJXTSNxLeVA.crl (hash: ROy/RPddgjuKpfaMrj3U2dZl20PuvOiYVOc4skX87FA=)
3: mPel-Ky4KTw-yipTpTX6XFn1X6g.roa (hash: N5pE0c5lXs23W7feBcxuowFluJhlp7T2zf0Dpvw7muA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/1532c6-a2f5-48e6-b037-18c5ebef27a8/1/dAThbzM9iWUMZhOsbJXTSNxLeVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/1532c6-a2f5-48e6-b037-18c5ebef27a8/1/dAThbzM9iWUMZhOsbJXTSNxLeVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/dAThbzM9iWUMZhOsbJXTSNxLeVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 14:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:be:42:41:c0:37:31:29:1f:ac:37:9f:e0:65:c8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7404e16f333d89650c6613ac6c95d348dc4b7950
Validity
Not Before: Jun 14 14:00:51 2025 GMT
Not After : Jun 15 14:00:51 2025 GMT
Subject: CN=9a70372d010d363017a3622a5eaa3d73f4c4ac4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:61:61:ae:59:e2:dd:f6:2a:83:e6:d8:e6:75:
ce:9e:b7:33:b2:30:6b:a1:ad:19:6f:27:de:57:e0:
9f:de:e3:26:e3:5f:91:f9:66:3b:58:ba:19:48:13:
f9:ad:b0:40:c4:81:68:05:3a:d4:c2:18:44:91:b8:
24:02:c0:18:ac:c2:60:84:0d:35:8d:5e:9a:bf:d0:
df:69:f2:77:01:64:5a:b8:ff:fd:9c:01:28:94:73:
a9:0a:24:ed:34:3f:47:e7:b7:eb:27:3f:82:8f:06:
38:b0:d3:ce:04:64:f9:66:ae:20:e7:fc:15:16:29:
1d:9a:53:57:0c:b8:f4:0f:53:83:e2:0d:23:0d:6a:
29:e1:0a:9f:0c:b6:79:b9:3f:51:f4:11:a1:d8:7e:
c8:00:95:b9:f8:9b:04:b0:17:33:57:32:fb:62:81:
a9:da:0f:50:16:d2:5b:02:c7:3d:d5:19:da:fb:47:
19:65:91:93:ee:fd:30:ce:16:2c:6f:c3:ff:83:c6:
82:93:41:ff:28:65:3a:f6:d3:28:cf:64:2f:b2:58:
aa:d7:57:71:fd:ac:36:f0:3a:ab:1a:c9:36:2b:36:
ef:5d:03:cf:87:94:d8:50:65:8e:de:d5:a8:73:a8:
fe:7f:2b:60:8e:e6:7e:8e:73:40:6c:03:b5:80:16:
9d:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:70:37:2D:01:0D:36:30:17:A3:62:2A:5E:AA:3D:73:F4:C4:AC:4B
X509v3 Authority Key Identifier:
keyid:74:04:E1:6F:33:3D:89:65:0C:66:13:AC:6C:95:D3:48:DC:4B:79:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dAThbzM9iWUMZhOsbJXTSNxLeVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1532c6-a2f5-48e6-b037-18c5ebef27a8/1/dAThbzM9iWUMZhOsbJXTSNxLeVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1532c6-a2f5-48e6-b037-18c5ebef27a8/1/dAThbzM9iWUMZhOsbJXTSNxLeVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:87:7e:d7:c3:cc:e0:ed:38:25:ba:eb:a1:4c:68:ba:e5:7b:
fe:72:01:08:fe:73:7a:c3:d7:96:94:56:72:b0:18:fd:7f:bf:
d6:a7:1a:e6:f6:58:7e:0e:01:73:ce:44:99:c0:78:7e:d5:52:
ed:20:a3:f3:80:bb:ac:b1:24:27:9c:90:3d:ca:ba:4a:24:ee:
e2:fc:a6:47:ed:28:1f:39:7c:cd:01:04:48:92:e8:14:12:c3:
c4:f6:cc:23:38:7a:b6:ef:35:f1:93:c9:36:06:a9:c1:55:91:
53:31:95:68:1c:ab:2b:57:07:23:95:15:2a:14:82:bd:b2:05:
ac:cd:64:6d:ad:6e:74:8e:c5:dc:2e:fc:15:43:cd:91:33:a3:
46:c3:d9:a6:ba:86:fa:73:fb:84:59:28:b9:68:03:37:e8:78:
3d:e4:bf:b5:fa:0d:db:df:ed:2b:f5:63:2d:a5:46:89:8a:24:
45:24:95:a8:88:38:28:e5:e5:a0:3a:89:1a:d7:07:3e:23:fd:
b9:f4:0e:6b:0d:26:8d:1c:c4:a7:99:77:fe:72:2d:17:d3:1d:
a0:2d:3b:fe:f7:71:e1:8b:12:b4:2b:45:4d:ae:ca:fc:c6:49:
e7:87:68:e1:7b:93:f2:83:ed:7b:03:d1:12:d2:01:ed:d4:60:
9e:8f:88:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 23:47:55 2025 by rpki-client