Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/af282b-f597-407a-bef5-132f99cfaa53/1/D_z8NFoGRqfPIlkFR34hg1dIhuA.mft
File: D_z8NFoGRqfPIlkFR34hg1dIhuA.mft (raw, json)
Hash identifier: 40u7okDb2otT7+8f0FK7Qw7Nh40I891zuiVS4emTnHI=
Subject key identifier: 71:8B:17:6C:CD:A7:8A:1D:53:79:5A:62:B3:12:3C:7D:73:76:E4:66
Authority key identifier: 0F:FC:FC:34:5A:06:46:A7:CF:22:59:05:47:7E:21:83:57:48:86:E0
Certificate issuer: /CN=0ffcfc345a0646a7cf225905477e2183574886e0
Certificate serial: 01977E9F0A92C64A64F37E514E5213B24E70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_z8NFoGRqfPIlkFR34hg1dIhuA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/af282b-f597-407a-bef5-132f99cfaa53/1/D_z8NFoGRqfPIlkFR34hg1dIhuA.mft
Manifest number: 12D7
Signing time: Tue 17 Jun 2025 16:00:41 +0000
Manifest this update: Tue 17 Jun 2025 16:00:41 +0000
Manifest next update: Wed 18 Jun 2025 16:00:41 +0000
Files and hashes: 1: D_z8NFoGRqfPIlkFR34hg1dIhuA.crl (hash: STsW8x5IbgopWKLFDHVfBOX7uw0pl6mwQGYaOIKTMY0=)
2: Md8iGia1MbUzqtIWwDExWkmRVgM.roa (hash: 9TNv7T0YESkDbmJU8WmVBlvb3hJYh8sZp0R9zt0P83g=)
3: zzfWrdnIm-Z-w7o1PR68Qstk9VY.roa (hash: kTwVtQXhrNaWPZylIvh+tacEo9MdRsMxrNowU5p51wY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/af282b-f597-407a-bef5-132f99cfaa53/1/D_z8NFoGRqfPIlkFR34hg1dIhuA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/af282b-f597-407a-bef5-132f99cfaa53/1/D_z8NFoGRqfPIlkFR34hg1dIhuA.mft
rsync://rpki.ripe.net/repository/DEFAULT/D_z8NFoGRqfPIlkFR34hg1dIhuA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 16:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7e:9f:0a:92:c6:4a:64:f3:7e:51:4e:52:13:b2:4e:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ffcfc345a0646a7cf225905477e2183574886e0
Validity
Not Before: Jun 17 16:00:41 2025 GMT
Not After : Jun 18 16:00:41 2025 GMT
Subject: CN=718b176ccda78a1d53795a62b3123c7d7376e466
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:93:7c:e8:9f:3b:d4:9f:0c:9f:78:73:dd:b6:
d0:e5:76:b7:f7:9f:d8:55:a8:30:7f:db:43:d0:16:
a9:3b:20:5b:56:02:89:af:f1:67:7f:23:88:1e:65:
6f:ea:8e:7d:48:a1:2f:03:f1:55:cc:15:08:c3:8e:
7a:48:90:09:96:2e:9d:de:6a:65:4e:7e:b9:5f:be:
1a:ef:c7:77:a0:4c:f4:43:3d:d4:35:dc:e4:f5:af:
c0:f4:cd:17:1b:7f:63:69:b6:3a:10:4c:58:30:97:
1c:61:25:63:ef:f6:d2:ad:1e:32:b8:0b:dd:08:f3:
a1:c5:84:1b:70:f1:42:12:e9:1f:6c:c8:96:4f:25:
a3:2c:1b:87:23:4b:0b:57:fa:0b:1d:94:23:d0:f1:
7c:b1:b0:e5:bb:58:04:0e:28:6e:ce:07:62:9b:47:
86:33:ed:bf:cc:77:cc:0e:be:45:10:5f:18:40:bc:
bb:b9:2a:a6:b8:56:ec:4f:ba:76:f5:43:76:bb:eb:
e4:90:ea:4b:86:88:c2:c0:59:44:35:d1:dc:6a:55:
bb:73:4d:63:41:2b:7f:36:6a:1f:8c:ed:b0:f2:f5:
e0:d9:27:52:dd:03:e7:0d:ce:38:fe:df:17:9b:d4:
81:1c:73:59:98:20:4f:bc:11:96:6e:d7:7c:f8:dd:
e8:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:8B:17:6C:CD:A7:8A:1D:53:79:5A:62:B3:12:3C:7D:73:76:E4:66
X509v3 Authority Key Identifier:
keyid:0F:FC:FC:34:5A:06:46:A7:CF:22:59:05:47:7E:21:83:57:48:86:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_z8NFoGRqfPIlkFR34hg1dIhuA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/af282b-f597-407a-bef5-132f99cfaa53/1/D_z8NFoGRqfPIlkFR34hg1dIhuA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/af282b-f597-407a-bef5-132f99cfaa53/1/D_z8NFoGRqfPIlkFR34hg1dIhuA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:57:b7:d5:87:c6:58:42:c3:37:39:5d:fe:da:3d:da:59:69:
d7:83:79:d6:c4:5c:13:9b:0e:d1:bf:fa:4d:29:e6:23:06:61:
f7:fc:d2:84:19:07:a1:00:9b:5d:35:a6:25:85:65:73:29:ee:
a3:0f:f1:e6:05:89:07:92:a5:a1:9e:d6:cb:2d:8f:42:bf:0e:
e4:8f:4f:66:79:42:8a:47:38:4f:33:44:3d:26:bb:7b:b2:40:
9c:b7:55:1b:46:7c:49:90:0c:7e:ec:fe:42:72:59:f7:03:07:
5f:9d:e7:06:9c:e4:78:9d:b2:f7:a8:ef:1e:6d:91:6e:62:57:
32:76:4c:91:7e:28:d1:db:04:e5:a6:96:89:a1:be:5e:ec:3c:
47:f4:64:5c:05:52:e0:96:63:69:1f:05:77:6a:dc:b0:7c:2a:
29:12:29:68:7d:eb:97:ad:fb:42:fa:4d:b2:2b:ab:40:57:9c:
fa:c0:9d:99:03:2a:ce:63:33:6b:95:cb:95:bb:c0:a9:08:fd:
32:3a:00:d7:07:d1:5a:57:58:e1:05:e0:94:57:3f:cd:69:b6:
9b:ad:b6:a8:70:48:b0:93:93:b3:c6:79:ae:6b:61:7d:60:a5:
d2:4e:35:07:0c:e5:8a:f9:e3:85:7f:f9:32:90:9a:2b:ae:ff:
e0:b5:cd:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 02:27:53 2025 by rpki-client