Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/b3d25c-45ba-433f-8824-17e0a6869ced/1/dcuRtTn9feisVTjK9Tu_L6wbslk.mft
File: dcuRtTn9feisVTjK9Tu_L6wbslk.mft (raw, json)
Hash identifier: 9+bE22EPocdbWsNAjazTwEnLf7oR7UOkTcDDvz4MN6o=
Subject key identifier: 38:C5:E8:1E:B1:B0:E1:8D:71:A3:CB:87:28:E2:9E:89:CD:CA:A5:23
Authority key identifier: 75:CB:91:B5:39:FD:7D:E8:AC:55:38:CA:F5:3B:BF:2F:AC:1B:B2:59
Certificate issuer: /CN=75cb91b539fd7de8ac5538caf53bbf2fac1bb259
Certificate serial: 01977609D3B52E631413CD091A443BB2088D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dcuRtTn9feisVTjK9Tu_L6wbslk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/b3d25c-45ba-433f-8824-17e0a6869ced/1/dcuRtTn9feisVTjK9Tu_L6wbslk.mft
Manifest number: 0645
Signing time: Mon 16 Jun 2025 00:00:44 +0000
Manifest this update: Mon 16 Jun 2025 00:00:44 +0000
Manifest next update: Tue 17 Jun 2025 00:00:44 +0000
Files and hashes: 1: dcuRtTn9feisVTjK9Tu_L6wbslk.crl (hash: GtzXA4ERrOIDAg0mQHbiJia9hiGYCR/kuwN6RLiWIT8=)
2: wmFwOwWe4TE9uLkEByUtzshEopU.roa (hash: QBlI2HpuFwgzwXYHTq+pMuExi7xAAtXFZ+n0JdzIy8U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/b3d25c-45ba-433f-8824-17e0a6869ced/1/dcuRtTn9feisVTjK9Tu_L6wbslk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/b3d25c-45ba-433f-8824-17e0a6869ced/1/dcuRtTn9feisVTjK9Tu_L6wbslk.mft
rsync://rpki.ripe.net/repository/DEFAULT/dcuRtTn9feisVTjK9Tu_L6wbslk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 20:59:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:76:09:d3:b5:2e:63:14:13:cd:09:1a:44:3b:b2:08:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75cb91b539fd7de8ac5538caf53bbf2fac1bb259
Validity
Not Before: Jun 16 00:00:44 2025 GMT
Not After : Jun 17 00:00:44 2025 GMT
Subject: CN=38c5e81eb1b0e18d71a3cb8728e29e89cdcaa523
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:7b:78:19:b3:ef:a5:27:fd:8c:56:73:18:b2:
81:59:79:b0:54:42:e0:d5:7f:b1:f7:3f:b2:c9:87:
1a:53:73:76:60:ad:c4:8d:44:f5:03:bf:89:ae:56:
e9:82:d1:3e:82:06:ab:b3:3f:17:d4:ad:bb:e2:7e:
00:5c:23:fc:d2:05:f7:95:f0:01:18:8e:12:d6:c4:
87:bd:40:4e:d4:66:fc:1a:7a:17:87:ed:52:ae:e8:
91:09:85:05:84:b1:be:9b:a3:91:d3:35:aa:dc:f7:
6e:68:0c:96:d1:73:bc:7c:29:8e:c8:ea:dd:5b:99:
cd:69:7f:69:35:d5:a5:98:2f:38:48:88:03:f5:20:
dc:02:60:a4:52:51:14:23:fc:db:04:7b:45:60:27:
00:17:82:66:0f:20:2d:8f:05:54:cc:0e:af:d5:18:
05:92:65:eb:62:8d:c8:eb:c1:8a:5d:78:3a:d5:9d:
29:10:79:bc:2a:85:35:e7:bc:95:1e:a4:d7:2b:39:
d4:0f:90:4c:a4:a4:06:37:42:1d:c3:af:e7:58:a1:
3e:a2:4d:ce:98:b0:fc:bd:21:a4:72:25:79:f3:e1:
88:08:6f:04:04:7e:2b:db:e3:5a:c8:c5:2a:6a:c5:
67:3d:62:09:3f:b8:62:68:49:eb:bd:6b:32:12:fe:
d3:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:C5:E8:1E:B1:B0:E1:8D:71:A3:CB:87:28:E2:9E:89:CD:CA:A5:23
X509v3 Authority Key Identifier:
keyid:75:CB:91:B5:39:FD:7D:E8:AC:55:38:CA:F5:3B:BF:2F:AC:1B:B2:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dcuRtTn9feisVTjK9Tu_L6wbslk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/b3d25c-45ba-433f-8824-17e0a6869ced/1/dcuRtTn9feisVTjK9Tu_L6wbslk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/b3d25c-45ba-433f-8824-17e0a6869ced/1/dcuRtTn9feisVTjK9Tu_L6wbslk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:bb:8c:f9:9b:10:e3:55:5f:2b:ff:61:0e:b1:e0:34:ee:fc:
1a:d1:e2:21:58:73:c5:96:36:b8:29:80:45:c6:5a:c0:05:02:
6e:c0:46:f4:07:ef:b5:3d:2e:26:ce:0f:27:62:8f:a9:08:d8:
59:ec:ba:92:20:0b:27:01:23:55:6e:01:b4:94:53:9b:b1:ea:
49:1d:09:ae:7a:72:ab:90:11:a7:76:9c:cc:64:ff:69:05:dc:
92:fe:4b:75:56:2e:da:9e:7c:6b:e7:82:a2:e9:e0:79:f4:1d:
20:60:15:63:3f:8a:ad:f8:99:f8:bb:56:b5:3f:c3:7a:09:b1:
b7:b1:2c:fd:2a:f4:b5:2e:0b:db:01:d0:bf:33:07:52:3c:f7:
66:cf:f4:13:0a:bf:d5:9d:b8:fc:be:6d:3d:c6:b8:cb:21:c7:
a8:5a:e0:d6:35:49:e2:57:cb:50:5f:26:62:f0:ef:cd:3a:70:
6d:48:57:80:93:81:f5:c9:3e:b3:9f:ce:c4:21:e7:89:31:84:
84:93:db:47:04:bb:1d:ab:14:51:4a:e4:db:44:f1:f4:46:c9:
df:6f:06:fc:00:5a:6b:d8:dd:0e:02:90:88:4f:61:e5:c2:84:
dd:c4:4d:7f:6e:ae:6d:f1:d9:95:2a:fe:5c:67:3d:19:46:30:
bb:a2:6b:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 05:15:14 2025 by rpki-client