Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/a821df-6b49-4489-8a77-d1246cc2c34e/1/DgE0-vunLgYznK3FXV8TuuSCsS0.mft
File: DgE0-vunLgYznK3FXV8TuuSCsS0.mft (raw, json)
Hash identifier: b067NzVvfXJo5afptneKmCsTdYO38y/xkRw3PB7z2l8=
Subject key identifier: 53:6F:95:72:4E:70:5E:F5:15:F1:59:AF:B9:88:65:CB:3E:5A:E0:B9
Authority key identifier: 0E:01:34:FA:FB:A7:2E:06:33:9C:AD:C5:5D:5F:13:BA:E4:82:B1:2D
Certificate issuer: /CN=0e0134fafba72e06339cadc55d5f13bae482b12d
Certificate serial: 0197733FBCA6917F77A25A927F0F0E8F0525
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DgE0-vunLgYznK3FXV8TuuSCsS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/a821df-6b49-4489-8a77-d1246cc2c34e/1/DgE0-vunLgYznK3FXV8TuuSCsS0.mft
Manifest number: 1594
Signing time: Sun 15 Jun 2025 11:00:46 +0000
Manifest this update: Sun 15 Jun 2025 11:00:46 +0000
Manifest next update: Mon 16 Jun 2025 11:00:46 +0000
Files and hashes: 1: DgE0-vunLgYznK3FXV8TuuSCsS0.crl (hash: fji9PCQ3STfBUCKCwC8MEOTdiSjFSaOAXH3nclQmzIA=)
2: PGpk2qjaEHATBO5WJqpwQvvo-t4.roa (hash: sxUY6k6RZnsEb5wstWgn4/zoH8gCs5vVrsT2wup6jP0=)
3: flUmY1UuhQ4umekHZTdOQbHf_3c.roa (hash: +LH2doQCe/pHrWkfv/54Ur54xmP0ZJEt0aBXtrY/eUQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/a821df-6b49-4489-8a77-d1246cc2c34e/1/DgE0-vunLgYznK3FXV8TuuSCsS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/a821df-6b49-4489-8a77-d1246cc2c34e/1/DgE0-vunLgYznK3FXV8TuuSCsS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/DgE0-vunLgYznK3FXV8TuuSCsS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 11:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:73:3f:bc:a6:91:7f:77:a2:5a:92:7f:0f:0e:8f:05:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e0134fafba72e06339cadc55d5f13bae482b12d
Validity
Not Before: Jun 15 11:00:46 2025 GMT
Not After : Jun 16 11:00:46 2025 GMT
Subject: CN=536f95724e705ef515f159afb98865cb3e5ae0b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b7:5d:36:bc:78:bd:4c:4e:8d:e6:0d:92:80:
af:ae:c5:79:75:b4:f3:f9:c7:98:21:b8:c2:36:14:
c3:88:ea:5e:0f:f5:95:3b:ac:de:37:d5:b5:87:23:
db:4b:c7:cb:1e:d5:55:18:d2:ff:14:84:d1:fb:89:
13:23:98:a5:41:48:61:76:48:67:2d:08:7c:6a:f2:
65:56:9f:23:e5:3a:9c:04:8a:8a:17:2e:33:de:21:
e3:7e:27:d0:64:24:73:02:3f:16:da:e1:f1:05:66:
87:cb:90:d5:5d:21:36:d8:02:a9:47:7d:27:2f:7f:
69:db:b3:c4:e4:0f:7b:b1:2a:11:46:6e:d3:dd:5b:
67:f6:3e:b7:b7:10:27:c9:ad:97:f0:e6:24:51:bc:
fa:0a:f3:57:c2:7d:b8:db:bc:e8:0b:41:f0:f7:9b:
cd:67:f0:c2:ff:ae:89:2f:e7:e1:db:cb:d3:2f:62:
38:2f:2f:e2:48:90:d8:d3:de:3a:49:03:f7:89:48:
a0:de:67:cb:bb:be:35:6d:93:a8:53:a1:fc:d1:7b:
cc:73:7e:8e:29:2a:96:8a:fe:4c:4c:ef:93:ca:38:
ee:af:c7:2b:b8:be:c6:91:c8:f0:8f:e2:f7:ca:ce:
dc:e3:f8:d8:21:a0:88:a9:d8:f2:2d:95:79:02:cb:
9c:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:6F:95:72:4E:70:5E:F5:15:F1:59:AF:B9:88:65:CB:3E:5A:E0:B9
X509v3 Authority Key Identifier:
keyid:0E:01:34:FA:FB:A7:2E:06:33:9C:AD:C5:5D:5F:13:BA:E4:82:B1:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DgE0-vunLgYznK3FXV8TuuSCsS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/a821df-6b49-4489-8a77-d1246cc2c34e/1/DgE0-vunLgYznK3FXV8TuuSCsS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/a821df-6b49-4489-8a77-d1246cc2c34e/1/DgE0-vunLgYznK3FXV8TuuSCsS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:07:a9:8d:d6:fa:fc:df:eb:c0:f0:4a:64:69:40:a3:4f:5a:
0a:0f:68:70:10:45:f6:91:05:80:93:ae:f7:b7:95:e2:68:12:
bf:44:68:a7:52:09:d2:cd:35:7d:48:a4:cb:3c:88:a6:50:58:
81:84:e6:c7:1d:51:18:00:71:e6:12:7f:4c:2d:6f:fc:27:0c:
5e:30:5e:74:63:7b:df:b0:f7:8b:39:23:e5:d6:16:a8:2d:04:
5d:ba:f6:cd:8e:72:10:7c:61:55:13:5c:5c:fa:89:2a:17:63:
de:6e:85:9d:7c:e0:49:50:51:f7:27:0d:63:f7:0a:12:03:96:
df:b9:59:26:64:06:5b:61:f4:db:65:fb:1c:05:dd:7f:30:e8:
f4:98:ab:42:8c:eb:26:d3:d9:98:8d:b0:59:87:a0:cf:49:10:
05:ae:15:c0:e6:07:91:26:8b:38:81:36:fb:5f:8a:61:30:e9:
05:5a:b9:f4:99:fa:db:b6:d6:6d:b1:c2:1c:b5:f5:43:28:86:
9e:9a:84:6b:58:72:03:dc:4d:71:5c:a7:4e:dc:ad:66:32:3d:
03:4d:0a:2f:37:2a:98:71:26:21:8b:6a:a3:7b:f9:2a:4f:b6:
df:ef:db:e1:15:80:a9:a9:c6:eb:89:66:31:c1:f7:9d:9a:f0:
bb:8a:65:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 20:42:25 2025 by rpki-client