Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/2a2164-1656-44cb-9294-0b1dec375554/1/dciLHEH7612r73Q8V6zf_E-nRpk.mft
File: dciLHEH7612r73Q8V6zf_E-nRpk.mft (raw, json)
Hash identifier: TYWdB4DwZ/wah3212ZY24onAhc7LrlIuIPL2w762gdo=
Subject key identifier: 87:EF:18:21:5E:06:FD:E3:AD:83:88:43:FD:DF:FF:59:E9:36:DE:28
Authority key identifier: 75:C8:8B:1C:41:FB:EB:5D:AB:EF:74:3C:57:AC:DF:FC:4F:A7:46:99
Certificate issuer: /CN=75c88b1c41fbeb5dabef743c57acdffc4fa74699
Certificate serial: 01977B66D57A09D009FF3DE39CE5C03D253B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dciLHEH7612r73Q8V6zf_E-nRpk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/2a2164-1656-44cb-9294-0b1dec375554/1/dciLHEH7612r73Q8V6zf_E-nRpk.mft
Manifest number: 1025
Signing time: Tue 17 Jun 2025 01:00:26 +0000
Manifest this update: Tue 17 Jun 2025 01:00:26 +0000
Manifest next update: Wed 18 Jun 2025 01:00:26 +0000
Files and hashes: 1: 2bqsQsJql_hwoFMeZ0nmgZGmbEw.roa (hash: e5rzAihzL4LX4PAPTH0rwfwcZpBTQn6I0oUQG0cd6f8=)
2: dciLHEH7612r73Q8V6zf_E-nRpk.crl (hash: ImsC2HtFU08AqF2b55hnIaDO2rG5+cgOnTGwqQ0i/5k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/2a2164-1656-44cb-9294-0b1dec375554/1/dciLHEH7612r73Q8V6zf_E-nRpk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/2a2164-1656-44cb-9294-0b1dec375554/1/dciLHEH7612r73Q8V6zf_E-nRpk.mft
rsync://rpki.ripe.net/repository/DEFAULT/dciLHEH7612r73Q8V6zf_E-nRpk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 21:51:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7b:66:d5:7a:09:d0:09:ff:3d:e3:9c:e5:c0:3d:25:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75c88b1c41fbeb5dabef743c57acdffc4fa74699
Validity
Not Before: Jun 17 01:00:26 2025 GMT
Not After : Jun 18 01:00:26 2025 GMT
Subject: CN=87ef18215e06fde3ad838843fddfff59e936de28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ba:a8:18:a5:68:cc:8f:0d:d1:ff:bc:1f:e5:
3c:31:dc:97:d3:4a:e9:71:ce:58:86:c9:e3:a6:f8:
3e:f3:08:fa:49:18:9b:75:2e:d7:fc:15:e5:b8:9f:
87:27:e6:b2:82:59:20:0f:ce:ca:b3:f9:de:8f:82:
b1:13:6e:19:fc:1d:55:b0:1b:47:0f:08:07:63:17:
57:95:21:d7:1b:a7:76:57:55:cc:1c:3b:9d:8e:b3:
12:8f:56:f4:96:b8:a8:c1:76:58:5b:f6:68:0d:5b:
d5:46:c4:92:92:0a:f9:9e:d2:0d:7e:59:42:ae:9f:
1d:ed:a0:19:6b:59:aa:b6:dd:5c:e2:4b:bc:63:b6:
ff:c2:66:0f:08:f7:19:65:da:31:21:51:06:5a:81:
03:b2:7e:88:1d:16:f1:94:5f:61:64:f9:a2:78:b1:
d3:ff:33:4f:5b:3d:a1:d0:78:37:0e:cb:a5:3d:2b:
75:b9:5a:79:71:24:8d:24:b1:d9:a0:a4:45:0d:f4:
51:4b:29:26:ff:2a:bf:37:77:23:98:02:2a:69:50:
6b:c9:93:b3:2e:17:4a:19:59:0e:e6:c7:ed:83:0e:
12:22:4d:49:cc:12:5c:7d:13:88:05:f6:bf:0e:70:
f3:ff:e2:e5:86:90:04:75:50:d8:6a:e6:d0:2f:c1:
84:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:EF:18:21:5E:06:FD:E3:AD:83:88:43:FD:DF:FF:59:E9:36:DE:28
X509v3 Authority Key Identifier:
keyid:75:C8:8B:1C:41:FB:EB:5D:AB:EF:74:3C:57:AC:DF:FC:4F:A7:46:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dciLHEH7612r73Q8V6zf_E-nRpk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/2a2164-1656-44cb-9294-0b1dec375554/1/dciLHEH7612r73Q8V6zf_E-nRpk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/2a2164-1656-44cb-9294-0b1dec375554/1/dciLHEH7612r73Q8V6zf_E-nRpk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:22:93:53:48:82:54:d9:3e:cf:74:12:f3:2b:a1:eb:87:8b:
ac:bd:7d:4e:7a:6e:ed:08:f3:86:40:86:2f:54:46:00:5f:05:
e2:3d:27:75:08:99:0a:bb:a6:55:68:38:7a:21:f9:d4:6f:1a:
fe:a7:0e:aa:1d:18:f1:75:03:b8:30:da:2a:b5:49:46:57:c5:
30:96:64:eb:1c:b1:9a:bc:73:6f:01:f5:c4:20:1e:e9:35:94:
ac:d8:2e:6f:1b:54:82:52:00:e7:e5:0c:23:0e:83:f8:2c:96:
38:88:10:9f:12:74:83:c0:72:48:79:55:f9:e0:9f:67:c4:b1:
4b:45:f0:10:71:da:67:e1:17:16:34:2b:f9:4b:43:19:91:c3:
c2:03:08:dc:ef:fd:bf:ea:a4:ce:f0:e1:30:ec:a4:9b:6e:ca:
e5:34:9b:4d:98:6d:3f:34:29:13:b0:e4:b3:25:3e:23:6e:bd:
16:2f:a8:03:4b:f3:3d:62:9d:65:8d:e7:3d:97:b7:8a:0c:6f:
d5:4a:43:a1:78:4d:b5:7c:02:19:f7:c1:a1:4a:f5:46:41:7c:
3a:c1:90:ef:47:c1:83:99:6c:3f:ac:d1:60:67:c8:73:e6:68:
ed:f1:ed:e0:e4:c1:42:8b:5a:c0:1d:f8:1a:84:55:6a:da:08:
23:ff:4e:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 04:34:30 2025 by rpki-client