Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/3dc72e-0861-4316-a4be-a295813f1f82/1/DB5tXnLa9BCM9gvUfpNt8aHpciY.mft
File: DB5tXnLa9BCM9gvUfpNt8aHpciY.mft (raw, json)
Hash identifier: LGnxM3VJp2Ho88nD3jlWt82i8wjyuWqT+m+J1+pSzAE=
Subject key identifier: F8:1B:54:D2:C7:38:97:F0:F4:73:F7:EA:06:12:95:74:94:69:50:91
Authority key identifier: 0C:1E:6D:5E:72:DA:F4:10:8C:F6:0B:D4:7E:93:6D:F1:A1:E9:72:26
Certificate issuer: /CN=0c1e6d5e72daf4108cf60bd47e936df1a1e97226
Certificate serial: 019777C19B8DEDBF3E193E62770AB28AA09F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DB5tXnLa9BCM9gvUfpNt8aHpciY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/3dc72e-0861-4316-a4be-a295813f1f82/1/DB5tXnLa9BCM9gvUfpNt8aHpciY.mft
Manifest number: 0EBD
Signing time: Mon 16 Jun 2025 08:01:06 +0000
Manifest this update: Mon 16 Jun 2025 08:01:06 +0000
Manifest next update: Tue 17 Jun 2025 08:01:06 +0000
Files and hashes: 1: 12Zahr8ypxTDNrQSGTJX87wf4FU.roa (hash: 1xnPEzPjKosfERE7d2w2vVj9bJxLTdzPRRY8ixKvDnU=)
2: DB5tXnLa9BCM9gvUfpNt8aHpciY.crl (hash: bFhv5lkqvnjHzCd3c/3V9tyqPrE9/hh2Yo4pcWaYBpA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/3dc72e-0861-4316-a4be-a295813f1f82/1/DB5tXnLa9BCM9gvUfpNt8aHpciY.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/3dc72e-0861-4316-a4be-a295813f1f82/1/DB5tXnLa9BCM9gvUfpNt8aHpciY.mft
rsync://rpki.ripe.net/repository/DEFAULT/DB5tXnLa9BCM9gvUfpNt8aHpciY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:77:c1:9b:8d:ed:bf:3e:19:3e:62:77:0a:b2:8a:a0:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c1e6d5e72daf4108cf60bd47e936df1a1e97226
Validity
Not Before: Jun 16 08:01:06 2025 GMT
Not After : Jun 17 08:01:06 2025 GMT
Subject: CN=f81b54d2c73897f0f473f7ea0612957494695091
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:0e:ae:1c:40:a6:ce:83:cb:6c:8e:5e:65:9f:
5f:03:d5:f4:ae:2e:2f:b1:17:58:fb:63:40:e3:5e:
f4:96:3f:57:91:41:68:db:f5:5d:f3:9e:29:02:26:
aa:39:9f:44:54:fc:c9:75:e4:bc:ef:22:83:49:86:
a1:66:27:83:4e:0f:fb:97:72:3e:47:79:53:03:17:
45:6b:b4:65:38:66:cb:38:ad:36:bf:06:15:8a:0a:
c7:a1:94:03:a0:a4:35:c8:a1:fd:ec:5f:66:9f:45:
0f:01:6b:27:e7:94:47:cf:81:27:e3:b1:f6:5e:02:
26:45:9f:e9:77:0e:da:00:64:c8:57:b8:f3:aa:8c:
91:e3:2f:e0:01:89:97:2e:60:5a:cf:26:0e:7d:d2:
77:d3:06:a0:c1:e0:01:7e:5e:3e:57:98:a3:f8:a5:
31:63:da:d0:e0:cf:06:e3:56:73:a8:d1:26:31:28:
41:21:d7:af:a3:fa:7b:29:2d:74:d8:7d:96:44:e3:
8f:32:b2:bd:2f:7c:f7:07:1c:d2:2f:27:a7:e3:20:
90:18:59:1a:09:38:bb:b2:45:69:85:13:72:4f:7b:
17:d3:e8:98:d7:ad:01:00:67:aa:2b:b7:7a:74:d3:
d7:be:18:22:2b:4e:09:0a:fd:38:20:1a:06:51:bd:
34:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:1B:54:D2:C7:38:97:F0:F4:73:F7:EA:06:12:95:74:94:69:50:91
X509v3 Authority Key Identifier:
keyid:0C:1E:6D:5E:72:DA:F4:10:8C:F6:0B:D4:7E:93:6D:F1:A1:E9:72:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DB5tXnLa9BCM9gvUfpNt8aHpciY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/3dc72e-0861-4316-a4be-a295813f1f82/1/DB5tXnLa9BCM9gvUfpNt8aHpciY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/3dc72e-0861-4316-a4be-a295813f1f82/1/DB5tXnLa9BCM9gvUfpNt8aHpciY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d0:49:2a:67:6d:30:e4:1e:18:1b:37:7a:2c:4a:4b:e1:5b:71:
70:f1:80:83:4a:14:2d:ab:0d:b6:27:d8:8f:43:bf:a9:3a:53:
3b:0b:bb:42:4c:f7:d0:e6:c9:3d:60:ff:84:ad:95:82:22:a5:
83:1f:73:a9:26:dc:b2:09:a1:d6:a2:1e:b9:92:30:de:70:b8:
85:d4:96:5f:b8:70:51:1a:c8:54:f7:e0:34:41:d9:bb:a0:bd:
bc:3a:a7:df:46:46:8e:cc:e1:7a:c3:be:8d:36:44:a8:3b:53:
8f:40:88:51:b0:eb:1a:c7:23:8e:f2:4b:c3:12:4d:bd:58:b7:
a6:a2:8e:dd:a5:80:e5:71:43:a9:c5:72:0a:4a:2d:3e:b1:62:
9c:d6:0a:3f:57:c9:7a:09:52:76:a1:6a:1a:30:7c:f1:65:22:
16:73:e9:f1:d4:0c:21:7a:b6:f3:ef:5d:93:2a:2a:47:c6:20:
cf:69:c6:c7:18:96:dc:fd:95:b6:1f:65:68:cd:23:6c:29:a0:
39:41:e3:56:0f:33:1c:8e:88:46:4f:33:b5:46:9b:f8:cb:6f:
6f:f7:0b:d8:0c:88:60:06:19:ec:69:f6:83:ad:40:9d:a9:32:
2d:e7:e9:5d:d1:e7:04:8b:6f:b0:8c:55:df:fa:f9:13:19:04:
0a:50:7d:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 14:50:17 2025 by rpki-client