Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/b314cb-62b5-4fa6-b445-cbfba459d8f7/1/dBc29lciH8E0MWMjsHQFhanBsgw.mft
File: dBc29lciH8E0MWMjsHQFhanBsgw.mft (raw, json)
Hash identifier: EobSzie/AZp+BUEozTHPUWolRlio7Y8cz6nxBv2Dh1s=
Subject key identifier: F1:D8:87:15:88:B4:4C:3A:41:49:EE:FD:83:EE:34:00:69:01:11:00
Authority key identifier: 74:17:36:F6:57:22:1F:C1:34:31:63:23:B0:74:05:85:A9:C1:B2:0C
Certificate issuer: /CN=741736f657221fc134316323b0740585a9c1b20c
Certificate serial: 01976C98708807AB84000304A3252A9213FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dBc29lciH8E0MWMjsHQFhanBsgw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/b314cb-62b5-4fa6-b445-cbfba459d8f7/1/dBc29lciH8E0MWMjsHQFhanBsgw.mft
Manifest number: 158F
Signing time: Sat 14 Jun 2025 04:00:18 +0000
Manifest this update: Sat 14 Jun 2025 04:00:18 +0000
Manifest next update: Sun 15 Jun 2025 04:00:18 +0000
Files and hashes: 1: c_4VrUZIMtuPlYj4DhW8ouhaRQw.roa (hash: 3ElLAVX1FXo1T4VYhDu+QaMztPbJUQVgeIUdwTADFRI=)
2: dBc29lciH8E0MWMjsHQFhanBsgw.crl (hash: pxjbek2m1Ue3i91I3Eli6KEjEROzKimp2zGuV4UxO4o=)
3: r_WAi-eWzHC7Psr81UVNU3kzOJw.roa (hash: ZETLofVAHwa7kjk2pEcSj1ALX1XE9n9Z4taPD31cXSg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/b314cb-62b5-4fa6-b445-cbfba459d8f7/1/dBc29lciH8E0MWMjsHQFhanBsgw.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/b314cb-62b5-4fa6-b445-cbfba459d8f7/1/dBc29lciH8E0MWMjsHQFhanBsgw.mft
rsync://rpki.ripe.net/repository/DEFAULT/dBc29lciH8E0MWMjsHQFhanBsgw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:98:70:88:07:ab:84:00:03:04:a3:25:2a:92:13:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=741736f657221fc134316323b0740585a9c1b20c
Validity
Not Before: Jun 14 04:00:18 2025 GMT
Not After : Jun 15 04:00:18 2025 GMT
Subject: CN=f1d8871588b44c3a4149eefd83ee340069011100
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ea:4f:04:1a:b7:77:1b:69:fa:8f:e6:2a:b4:
7b:2f:c6:d3:33:51:f3:ac:c1:b4:7a:e2:ad:bf:85:
db:d3:e4:8a:92:35:bb:da:d7:1e:b7:59:e5:d4:1e:
f5:55:72:3f:bf:af:84:8a:b4:c2:ad:45:31:6e:18:
1b:a6:3c:86:85:b4:ca:f1:0c:95:f3:83:8e:23:c6:
2b:ba:18:5a:4c:fb:2d:e9:29:94:94:98:7c:35:27:
53:2b:77:f2:a8:16:28:ca:a7:5f:f9:60:08:cb:83:
86:b6:7d:b2:33:d5:9b:c4:04:e3:bd:f7:94:e0:86:
61:28:4e:90:15:c8:f7:6a:d5:13:a9:48:59:85:dc:
6e:9e:37:b5:81:7b:c7:d7:d9:fd:c3:b0:9c:67:3b:
b0:cd:00:94:74:43:d4:6c:ef:08:2d:0e:0d:47:f4:
ae:e2:09:eb:15:d1:4d:64:36:99:8e:8f:17:87:ae:
68:8c:49:31:4a:d5:9a:18:94:94:03:ca:0e:98:eb:
b1:1e:ee:ee:e3:1b:a3:8d:3a:5d:cd:4a:ab:3e:97:
91:1a:16:de:57:45:87:39:d3:98:83:96:9c:61:34:
7c:01:f7:99:66:10:e8:0f:68:68:83:92:67:39:d7:
b7:dd:4d:11:5c:d7:3f:91:3f:c6:d4:2b:6b:68:4b:
b3:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:D8:87:15:88:B4:4C:3A:41:49:EE:FD:83:EE:34:00:69:01:11:00
X509v3 Authority Key Identifier:
keyid:74:17:36:F6:57:22:1F:C1:34:31:63:23:B0:74:05:85:A9:C1:B2:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dBc29lciH8E0MWMjsHQFhanBsgw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/b314cb-62b5-4fa6-b445-cbfba459d8f7/1/dBc29lciH8E0MWMjsHQFhanBsgw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/b314cb-62b5-4fa6-b445-cbfba459d8f7/1/dBc29lciH8E0MWMjsHQFhanBsgw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:11:74:3e:31:42:46:8d:c7:dd:63:c2:5b:e3:b0:46:72:83:
7d:77:dd:c9:47:e1:7d:d1:48:07:c3:f8:fe:e1:85:9f:f7:94:
6d:bd:5a:4f:51:75:3c:ec:77:dd:8a:ed:92:58:b3:2d:fc:70:
25:34:59:25:41:1b:0e:fa:0b:8f:b6:7f:e6:9f:d2:b6:36:6f:
58:24:66:36:e9:76:bf:c1:33:0f:e9:57:40:23:1e:79:59:95:
f4:b5:e8:e6:89:ae:d7:05:14:5d:57:49:8c:c6:e0:af:56:cd:
84:7e:0b:8c:37:8f:9a:55:cf:e9:35:d9:a8:f2:eb:5b:ae:98:
4d:e0:a4:a2:d5:56:f9:61:c1:42:83:86:98:ec:b2:6a:de:2f:
37:5d:3e:e1:b8:df:4d:cf:ca:9f:ae:d8:a3:b0:74:f7:40:40:
94:fe:21:39:8c:19:6b:e0:12:0d:e1:26:d3:52:8b:f3:de:fd:
7b:0f:fc:a0:04:1e:20:e2:94:c8:4c:c2:26:5a:03:f5:53:eb:
b2:e1:ba:a6:cd:ca:50:b7:30:e0:a0:9f:79:13:1a:d4:5d:6e:
dc:ea:a6:e1:38:df:ec:02:17:4c:72:12:c5:e5:29:c6:d4:06:
93:95:d6:d3:00:33:ed:8f:68:9e:e7:96:29:42:4b:ed:aa:d2:
16:c2:a0:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:32:17 2025 by rpki-client