Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/36d70c-58f0-45bb-a8f1-77eeab28be26/1/DgXmzqSzk0XOKQLJeh26vLRtKjs.mft
File: DgXmzqSzk0XOKQLJeh26vLRtKjs.mft (raw, json)
Hash identifier: 3kQ/SM1Ce6AI0QOFujTToWOn88rad+XrpDvz2jxuJeI=
Subject key identifier: 9D:2B:45:11:B3:15:64:54:08:17:53:98:76:CE:8E:B6:23:53:8A:A4
Authority key identifier: 0E:05:E6:CE:A4:B3:93:45:CE:29:02:C9:7A:1D:BA:BC:B4:6D:2A:3B
Certificate issuer: /CN=0e05e6cea4b39345ce2902c97a1dbabcb46d2a3b
Certificate serial: 0197688530BD09474C3C44E099B402275119
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DgXmzqSzk0XOKQLJeh26vLRtKjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/36d70c-58f0-45bb-a8f1-77eeab28be26/1/DgXmzqSzk0XOKQLJeh26vLRtKjs.mft
Manifest number: 151D
Signing time: Fri 13 Jun 2025 09:00:48 +0000
Manifest this update: Fri 13 Jun 2025 09:00:48 +0000
Manifest next update: Sat 14 Jun 2025 09:00:48 +0000
Files and hashes: 1: DgXmzqSzk0XOKQLJeh26vLRtKjs.crl (hash: EvHZ6JFtOnMzB9JNXhoKEfgMaSg8rwm86bnbMTkPwFQ=)
2: ShuJCzTETjuD4IZyp5iTy1w6Ut8.roa (hash: fk95k0odtKaBXDPO6LkbFL/8lMCWYiJ12TM7p4C2lgU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/36d70c-58f0-45bb-a8f1-77eeab28be26/1/DgXmzqSzk0XOKQLJeh26vLRtKjs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/36d70c-58f0-45bb-a8f1-77eeab28be26/1/DgXmzqSzk0XOKQLJeh26vLRtKjs.mft
rsync://rpki.ripe.net/repository/DEFAULT/DgXmzqSzk0XOKQLJeh26vLRtKjs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 09:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:85:30:bd:09:47:4c:3c:44:e0:99:b4:02:27:51:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e05e6cea4b39345ce2902c97a1dbabcb46d2a3b
Validity
Not Before: Jun 13 09:00:48 2025 GMT
Not After : Jun 14 09:00:48 2025 GMT
Subject: CN=9d2b4511b31564540817539876ce8eb623538aa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:a4:ab:2c:62:4c:ff:eb:2d:e5:5f:52:08:ba:
35:df:31:9f:13:74:98:6a:d7:ab:a6:98:82:8a:3d:
0c:5b:65:f2:e9:3f:2a:37:77:f9:10:c5:f1:40:d6:
e6:80:5b:45:c7:c7:7e:da:77:dd:e4:a5:39:8a:fd:
5f:cf:6d:3a:fe:1a:3e:4a:41:be:c9:0d:a3:fb:a5:
80:aa:75:6a:a9:fd:70:b0:92:b5:00:c3:a6:0f:24:
48:19:57:16:f4:3c:d7:08:92:a9:fc:a2:cb:15:a0:
b8:1e:df:60:8c:ae:40:2b:9c:1e:fa:c2:b2:ab:f3:
4d:3c:c3:c9:9c:26:34:23:b4:19:6c:b5:0f:13:b4:
b9:be:1f:07:4f:e5:26:fa:6d:3a:54:ec:84:26:4f:
43:3a:b0:b1:c3:5c:c7:ce:6a:a3:c9:80:10:e8:f3:
88:3d:2b:62:3c:1d:2c:d0:fc:51:5f:ee:f1:fe:9c:
53:88:c7:7f:59:7e:a5:30:55:88:4a:67:d1:5b:37:
2d:ca:ca:8d:88:e6:cc:e9:b4:14:04:1b:a1:b8:c6:
74:24:40:fe:36:90:02:48:6c:b6:a9:4b:65:09:73:
5b:f3:7f:56:90:52:6f:86:ee:b5:60:9a:4e:bd:23:
47:7f:05:fc:8b:6c:d9:36:8b:d9:d0:1d:d4:e7:65:
01:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:2B:45:11:B3:15:64:54:08:17:53:98:76:CE:8E:B6:23:53:8A:A4
X509v3 Authority Key Identifier:
keyid:0E:05:E6:CE:A4:B3:93:45:CE:29:02:C9:7A:1D:BA:BC:B4:6D:2A:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DgXmzqSzk0XOKQLJeh26vLRtKjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/36d70c-58f0-45bb-a8f1-77eeab28be26/1/DgXmzqSzk0XOKQLJeh26vLRtKjs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/36d70c-58f0-45bb-a8f1-77eeab28be26/1/DgXmzqSzk0XOKQLJeh26vLRtKjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:b2:ca:cb:9f:0a:ce:f3:85:7c:ce:32:1f:f4:91:fb:eb:a0:
7f:e6:c5:ff:61:a5:54:bb:39:ba:60:a9:e0:ea:6b:f5:3c:ab:
b2:c7:28:d5:9d:d5:24:ff:3a:c7:9e:3b:7a:6a:86:ea:e3:8e:
9d:6d:e6:d9:78:e7:2e:51:35:ea:46:37:aa:fe:47:b0:fe:a3:
81:86:e2:d2:53:33:5b:c3:4e:fc:23:e4:50:88:8e:f2:09:e4:
32:02:2f:a2:cc:38:88:dd:2a:07:75:4a:48:21:3a:4c:d8:88:
3b:45:da:d9:d1:9d:66:54:58:44:50:d6:8b:5c:52:5d:8f:ac:
92:b0:91:ec:c0:2c:a1:96:e7:47:4d:e6:29:60:b7:41:2f:98:
6a:fb:07:a7:fc:c8:06:34:d1:3a:a8:5a:82:5a:bc:16:c6:97:
d1:6e:aa:f0:f8:f7:e9:0e:17:04:e4:6e:b3:0a:d1:35:b5:2f:
cc:88:5b:4b:ce:8d:e0:06:d7:7d:f9:95:d6:52:77:4f:61:b5:
f1:57:d4:f7:60:3d:a4:1f:cd:2f:c7:c8:12:f2:a2:5d:37:2c:
eb:c6:4a:bb:71:8e:cb:5a:e7:00:a0:80:75:d4:a6:70:50:83:
25:e0:f2:f8:11:40:58:37:36:86:0b:31:20:aa:47:f5:fd:1d:
ae:f5:d7:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:09:52 2025 by rpki-client