Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/8a3ee9-4f37-45be-8aac-798ab773eafa/1/0627YSN4H_DjVBNEaseTHP9KSQ0.mft
File: 0627YSN4H_DjVBNEaseTHP9KSQ0.mft (raw, json)
Hash identifier: dFXV74Pq7lMJZXRrycFZ9De2/VwSDF3v5sHqzSZDGPA=
Subject key identifier: DC:7B:80:28:50:0C:8E:24:3E:F4:AA:BE:23:24:62:E2:06:C8:36:63
Authority key identifier: D3:AD:BB:61:23:78:1F:F0:E3:54:13:44:6A:C7:93:1C:FF:4A:49:0D
Certificate issuer: /CN=d3adbb6123781ff0e35413446ac7931cff4a490d
Certificate serial: 01976884BF682F04FB13375A2FB569C07816
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0627YSN4H_DjVBNEaseTHP9KSQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/8a3ee9-4f37-45be-8aac-798ab773eafa/1/0627YSN4H_DjVBNEaseTHP9KSQ0.mft
Manifest number: 158D
Signing time: Fri 13 Jun 2025 09:00:19 +0000
Manifest this update: Fri 13 Jun 2025 09:00:19 +0000
Manifest next update: Sat 14 Jun 2025 09:00:19 +0000
Files and hashes: 1: 0627YSN4H_DjVBNEaseTHP9KSQ0.crl (hash: n3dhYpmfYtdo3aSenETMjCPcTyZHmPb13SbHx7kc9f4=)
2: yWi1Y-nakOmyfRqesRZIzBZCSpo.roa (hash: XIYZfLdl8kZlRiSAj90PT17pvRJ8h9U9zRjI6i+BCkM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/8a3ee9-4f37-45be-8aac-798ab773eafa/1/0627YSN4H_DjVBNEaseTHP9KSQ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/8a3ee9-4f37-45be-8aac-798ab773eafa/1/0627YSN4H_DjVBNEaseTHP9KSQ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/0627YSN4H_DjVBNEaseTHP9KSQ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 09:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:84:bf:68:2f:04:fb:13:37:5a:2f:b5:69:c0:78:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3adbb6123781ff0e35413446ac7931cff4a490d
Validity
Not Before: Jun 13 09:00:19 2025 GMT
Not After : Jun 14 09:00:19 2025 GMT
Subject: CN=dc7b8028500c8e243ef4aabe232462e206c83663
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:67:9b:64:bd:fb:5d:2e:76:24:0d:a4:2b:fe:
fd:c6:88:55:08:4d:16:61:66:16:f6:69:43:84:35:
6c:32:de:b6:b8:b7:a3:e2:ec:22:48:d2:c5:7c:dd:
93:ba:68:9b:3a:26:a2:4b:d8:a1:bc:8f:42:18:d6:
b1:86:72:ca:a3:45:c1:87:0c:37:5d:40:25:f9:17:
e7:98:c2:7c:e9:96:c4:d2:0c:94:c8:db:2c:72:3e:
a4:d9:ed:a3:85:6c:0d:e6:31:a3:8f:7d:ba:c7:5d:
c5:30:55:60:dd:5f:61:bb:9a:76:52:49:37:43:a3:
fa:76:30:58:a3:b9:17:90:8e:5f:18:80:02:f4:99:
40:ed:ef:b8:14:22:ae:fe:01:d9:1d:cc:f4:47:f6:
19:8d:a6:00:8f:6d:d4:7e:ba:80:f9:30:bf:04:3d:
f4:36:37:c0:e6:48:c2:7a:bf:68:40:19:9f:ac:f7:
2f:f0:12:94:ca:2d:0e:0a:e0:f2:51:be:bf:7c:56:
77:97:29:9c:e5:61:19:d2:dd:86:55:99:8a:a0:9e:
ac:83:7c:cb:ea:d9:66:f9:14:54:89:b4:a8:2c:09:
d7:f9:85:43:6c:cd:33:fb:35:59:3a:e7:a3:74:17:
7a:c5:40:48:21:30:9f:16:95:ee:0e:4c:66:b2:f4:
57:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:7B:80:28:50:0C:8E:24:3E:F4:AA:BE:23:24:62:E2:06:C8:36:63
X509v3 Authority Key Identifier:
keyid:D3:AD:BB:61:23:78:1F:F0:E3:54:13:44:6A:C7:93:1C:FF:4A:49:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0627YSN4H_DjVBNEaseTHP9KSQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/8a3ee9-4f37-45be-8aac-798ab773eafa/1/0627YSN4H_DjVBNEaseTHP9KSQ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/8a3ee9-4f37-45be-8aac-798ab773eafa/1/0627YSN4H_DjVBNEaseTHP9KSQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:b2:03:c2:c2:5d:54:dd:1b:bf:f1:f4:8c:01:52:08:c0:0a:
50:9e:82:12:26:8e:7b:cd:85:45:da:76:b7:4a:57:51:15:11:
00:0c:ff:05:a7:85:90:44:c4:f6:ba:e9:50:89:07:9a:32:b6:
c8:18:d5:ec:c6:5b:bd:be:59:d2:5b:15:8e:da:70:c8:ec:11:
a0:c0:1a:8d:25:3b:22:91:9c:90:9c:8b:d4:c2:55:c1:16:4a:
08:ac:b8:53:4c:b4:39:30:cb:15:2f:e6:24:ee:40:68:5f:4f:
d1:d4:6b:ba:a2:ff:1f:18:b3:e1:1b:c2:3c:09:94:1e:cc:ba:
a3:74:91:9f:37:02:fb:c4:12:9d:52:9e:7e:3f:94:a6:f5:1f:
0f:95:92:6e:8f:a8:b2:82:f6:cf:e1:fd:1f:9c:8c:9e:cf:ab:
3c:2a:56:34:18:f6:95:ea:9b:59:49:b6:84:32:a2:29:69:c3:
a7:a8:69:ed:a1:21:2c:30:9b:c8:43:b6:c4:40:02:08:78:03:
c1:31:56:34:e5:43:16:5b:51:71:f5:6e:4c:27:da:89:0e:b5:
6f:e3:9c:fc:89:b4:d3:13:f4:3e:09:2a:6f:2b:0f:a4:6f:85:
c4:9e:b9:2b:42:4c:90:41:e8:d0:fa:72:2c:39:34:9b:11:69:
11:30:89:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:22:38 2025 by rpki-client