Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/999dd3-88f7-42c2-aff5-81d5aac03496/1/DvJQ9m3TDDt1RDCoXVMjbxczG38.mft
File: DvJQ9m3TDDt1RDCoXVMjbxczG38.mft (raw, json)
Hash identifier: KJywcUlzsoLRFwY5S7O6FVIp8Z3JctxeXAKtnll+nBc=
Subject key identifier: 22:95:3D:7A:06:01:6C:84:69:E0:9D:BB:58:CE:52:E4:64:93:FA:B1
Authority key identifier: 0E:F2:50:F6:6D:D3:0C:3B:75:44:30:A8:5D:53:23:6F:17:33:1B:7F
Certificate issuer: /CN=0ef250f66dd30c3b754430a85d53236f17331b7f
Certificate serial: 01976D06CC24F003E3E17A91995826D88E62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DvJQ9m3TDDt1RDCoXVMjbxczG38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/999dd3-88f7-42c2-aff5-81d5aac03496/1/DvJQ9m3TDDt1RDCoXVMjbxczG38.mft
Manifest number: 022D
Signing time: Sat 14 Jun 2025 06:00:51 +0000
Manifest this update: Sat 14 Jun 2025 06:00:51 +0000
Manifest next update: Sun 15 Jun 2025 06:00:51 +0000
Files and hashes: 1: DvJQ9m3TDDt1RDCoXVMjbxczG38.crl (hash: 4efFRaB4Q9PaBvU8MZqPLcolNbEngEJC2eXS2A1+X8Y=)
2: wz1d87RRsH1wKxGmJq_DN0PXswY.roa (hash: UbFzX/CxroLQPhe2c4ynViKTu15Zs0MKcqpj4a9goDk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/999dd3-88f7-42c2-aff5-81d5aac03496/1/DvJQ9m3TDDt1RDCoXVMjbxczG38.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/999dd3-88f7-42c2-aff5-81d5aac03496/1/DvJQ9m3TDDt1RDCoXVMjbxczG38.mft
rsync://rpki.ripe.net/repository/DEFAULT/DvJQ9m3TDDt1RDCoXVMjbxczG38.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:06:cc:24:f0:03:e3:e1:7a:91:99:58:26:d8:8e:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ef250f66dd30c3b754430a85d53236f17331b7f
Validity
Not Before: Jun 14 06:00:51 2025 GMT
Not After : Jun 15 06:00:51 2025 GMT
Subject: CN=22953d7a06016c8469e09dbb58ce52e46493fab1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:96:87:e3:6f:84:dc:b9:ef:08:9b:13:b2:6f:
f2:a2:25:8e:e9:16:43:25:41:30:c4:77:9c:11:7f:
c4:fd:5c:e5:03:43:07:d5:d0:5e:f8:45:a1:1b:91:
9f:57:fd:f8:1f:ba:2f:ca:f8:9d:2f:d3:f0:e5:a7:
93:df:b1:49:e9:18:a9:f8:92:92:cb:c1:8e:89:90:
7c:57:bf:51:50:c2:dd:4f:2c:2f:f0:11:e5:e6:b0:
81:7d:32:19:81:a8:0b:f2:25:f3:22:72:49:f7:f9:
f7:1c:15:82:36:3c:1e:33:39:0a:39:9d:8b:ed:22:
ac:41:36:bc:97:33:8e:39:68:b7:00:e7:52:a1:c0:
29:b1:bd:42:4d:36:2f:24:d2:60:b6:aa:43:b8:68:
74:4a:01:b3:25:d8:13:30:40:09:5e:c0:08:c2:e6:
bb:3d:ad:c4:13:46:a5:1c:e1:34:58:9a:ed:e0:2a:
d7:82:13:a4:74:57:6b:9d:55:da:cc:2b:5f:53:d5:
b2:46:00:45:5c:2d:e3:89:61:9c:77:c4:b7:1d:33:
60:ac:1c:d5:67:1f:4f:50:31:0e:81:e9:9e:e4:fa:
98:ff:79:db:21:5c:05:0f:9a:b8:f0:30:c5:d3:78:
a3:aa:bc:65:c8:ad:07:ab:b7:c3:8b:eb:1d:bb:b8:
00:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:95:3D:7A:06:01:6C:84:69:E0:9D:BB:58:CE:52:E4:64:93:FA:B1
X509v3 Authority Key Identifier:
keyid:0E:F2:50:F6:6D:D3:0C:3B:75:44:30:A8:5D:53:23:6F:17:33:1B:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DvJQ9m3TDDt1RDCoXVMjbxczG38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/999dd3-88f7-42c2-aff5-81d5aac03496/1/DvJQ9m3TDDt1RDCoXVMjbxczG38.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/999dd3-88f7-42c2-aff5-81d5aac03496/1/DvJQ9m3TDDt1RDCoXVMjbxczG38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:6c:f7:3c:03:aa:11:2d:32:96:fb:5c:69:e9:d2:71:f3:9e:
b6:5e:72:70:64:61:2a:cc:49:d2:7a:d5:d0:02:9c:d4:c9:1f:
ea:53:5e:83:3c:d6:eb:e9:ca:a7:b8:b5:f6:e1:fe:19:34:9a:
54:31:6e:b9:f6:c2:a3:df:f0:98:63:13:41:66:58:5b:b6:b7:
15:1a:38:4e:11:ec:5d:37:f1:96:68:75:a5:61:6a:a3:43:3e:
46:36:10:21:4f:e7:3b:95:7b:04:99:1d:6e:20:99:23:e1:06:
c2:c2:ab:94:1a:91:0b:76:21:d6:9e:f5:2a:dd:0e:c1:09:76:
4f:93:90:82:2b:8c:01:c4:46:4a:7f:59:a9:2e:de:43:da:83:
f2:f8:f3:60:c6:07:96:ab:58:36:0d:3a:5d:24:1b:58:ba:f6:
b6:91:2c:19:8e:4b:c8:d9:d5:23:9d:3d:ad:af:11:92:ad:1f:
17:76:a3:18:c5:76:f4:07:df:65:95:f2:6e:0d:c3:f7:f7:0d:
12:8a:96:04:c7:db:65:a1:41:6e:20:6d:8b:81:90:1f:d5:8c:
f9:81:32:a6:f2:cd:28:da:8a:53:b1:5c:95:69:28:3a:68:61:
67:dd:56:ca:c8:e7:5a:22:98:01:05:e8:38:2a:32:ff:36:17:
c5:5f:d5:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:43:24 2025 by rpki-client