Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/566932-dea6-4dfc-8616-ba901a5fcb74/1/DDY1dImAYOG2pIysPx8ryzbIbU4.mft
File: DDY1dImAYOG2pIysPx8ryzbIbU4.mft (raw, json)
Hash identifier: pfi6BJlwUm9haOBZrTD19hZ77QmZv+357DSpmhmftEE=
Subject key identifier: 83:06:99:0F:44:F6:86:EC:68:42:C7:FE:DD:F0:64:64:F9:A1:79:77
Authority key identifier: 0C:36:35:74:89:80:60:E1:B6:A4:8C:AC:3F:1F:2B:CB:36:C8:6D:4E
Certificate issuer: /CN=0c363574898060e1b6a48cac3f1f2bcb36c86d4e
Certificate serial: 01976D3E3CBF4A13B595F8F61935B988C673
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DDY1dImAYOG2pIysPx8ryzbIbU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/566932-dea6-4dfc-8616-ba901a5fcb74/1/DDY1dImAYOG2pIysPx8ryzbIbU4.mft
Manifest number: 158F
Signing time: Sat 14 Jun 2025 07:01:24 +0000
Manifest this update: Sat 14 Jun 2025 07:01:24 +0000
Manifest next update: Sun 15 Jun 2025 07:01:24 +0000
Files and hashes: 1: 3_-hgw-hEPZjrdcvbmBPfyZjJX4.roa (hash: 32NxwfNK1ZaYklZXBKeX9wsuxMzcdx3YENya2fUqH/0=)
2: DDY1dImAYOG2pIysPx8ryzbIbU4.crl (hash: /ysxg9Bvy46L2Z9D6SachuxD2N1LbgIKxhhqhDkBi8M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/566932-dea6-4dfc-8616-ba901a5fcb74/1/DDY1dImAYOG2pIysPx8ryzbIbU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/566932-dea6-4dfc-8616-ba901a5fcb74/1/DDY1dImAYOG2pIysPx8ryzbIbU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/DDY1dImAYOG2pIysPx8ryzbIbU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3e:3c:bf:4a:13:b5:95:f8:f6:19:35:b9:88:c6:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c363574898060e1b6a48cac3f1f2bcb36c86d4e
Validity
Not Before: Jun 14 07:01:24 2025 GMT
Not After : Jun 15 07:01:24 2025 GMT
Subject: CN=8306990f44f686ec6842c7feddf06464f9a17977
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:7b:32:b6:29:8c:30:cd:12:71:1c:0e:c2:3c:
8b:40:45:b7:22:1d:bc:e9:2a:64:b6:a4:b4:32:45:
6e:70:6c:86:be:0a:03:37:eb:70:4f:08:a0:97:8a:
69:f8:31:e5:13:a5:00:56:5b:a8:f9:b8:44:73:66:
56:c3:b5:0b:43:1f:08:09:95:00:8a:c8:97:0a:d6:
5b:71:9b:a1:bf:c2:8f:f6:4a:55:cb:89:1d:95:9a:
0c:6c:12:b5:fa:d1:77:48:ff:5a:d7:3b:87:b8:d4:
8a:c8:9f:a5:1a:95:b9:f6:d2:2f:59:e4:b8:63:a4:
6b:17:31:48:2a:1b:ff:69:2a:4b:8a:d5:ac:f0:e8:
29:0f:a2:18:13:50:90:0c:c4:4b:b7:06:48:9e:5f:
b7:58:ae:14:9d:d5:b8:77:09:55:66:cd:c8:01:a3:
de:7a:e6:cf:42:08:33:04:8f:47:76:04:79:a9:f8:
1c:8b:d5:dd:07:97:a0:e5:13:3a:b4:af:9b:84:cd:
62:90:3a:7a:3d:76:57:dc:2e:30:37:2f:4a:61:0d:
84:ce:40:9f:a7:3b:54:c6:b2:e0:e2:c2:b6:f2:88:
24:3b:cd:5b:64:38:ec:af:31:82:17:ae:56:15:f9:
f4:1f:86:24:dc:39:bd:d5:c3:f6:bf:99:79:bc:42:
de:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:06:99:0F:44:F6:86:EC:68:42:C7:FE:DD:F0:64:64:F9:A1:79:77
X509v3 Authority Key Identifier:
keyid:0C:36:35:74:89:80:60:E1:B6:A4:8C:AC:3F:1F:2B:CB:36:C8:6D:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DDY1dImAYOG2pIysPx8ryzbIbU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/566932-dea6-4dfc-8616-ba901a5fcb74/1/DDY1dImAYOG2pIysPx8ryzbIbU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/566932-dea6-4dfc-8616-ba901a5fcb74/1/DDY1dImAYOG2pIysPx8ryzbIbU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:dc:a8:89:6e:76:ac:a8:3d:51:52:19:99:d9:b6:a5:93:90:
fe:08:32:5d:4f:4b:18:92:e1:50:b3:d3:bb:80:e5:d6:fa:0b:
f6:7d:4c:88:2b:93:03:18:ac:6c:2f:11:02:ce:e2:c8:04:26:
b2:6d:0b:b3:29:43:4c:b3:82:a4:f3:b1:3a:9f:32:a9:85:18:
4f:4c:57:c3:d7:b0:d5:a1:50:30:4f:5a:eb:89:e5:75:1e:d5:
2f:03:a5:c1:f3:02:c8:a5:19:01:b3:27:e1:3e:69:65:9b:34:
90:a2:8b:c7:de:fe:c9:4d:aa:57:11:61:bd:a3:e6:fd:96:9c:
33:da:2e:20:28:bf:fb:54:48:c1:73:1a:51:3a:f5:e3:28:f1:
55:21:29:b1:e4:32:d8:0e:d3:21:77:98:9a:96:3e:ff:6f:b7:
7b:41:f7:c2:5e:ec:fb:66:ca:00:16:00:64:67:2d:27:0c:c9:
88:0d:9a:07:6d:85:39:8d:be:d6:54:aa:72:0f:97:49:b3:aa:
67:85:38:29:72:6d:22:ea:fb:1e:6b:e6:9e:bd:6a:28:b6:4c:
98:3f:b3:d6:fd:ab:23:e2:3c:65:0d:ea:73:e2:09:ac:a6:e5:
b9:d3:a8:a4:10:14:25:3d:21:ec:e4:f8:35:50:59:35:05:aa:
3b:56:91:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:28:57 2025 by rpki-client