Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/dKqTEq9MPZzuCCyVQaa2WtpWmzw.mft
File: dKqTEq9MPZzuCCyVQaa2WtpWmzw.mft (raw, json)
Hash identifier: WhBy91+8Jv/bA+KCba1h5MYlmyo7YCjMaWhShilzNLQ=
Subject key identifier: E0:69:53:F2:C4:D9:D5:E6:E5:57:63:FB:0D:F4:95:A2:2B:6B:45:45
Authority key identifier: 74:AA:93:12:AF:4C:3D:9C:EE:08:2C:95:41:A6:B6:5A:DA:56:9B:3C
Certificate issuer: /CN=74aa9312af4c3d9cee082c9541a6b65ada569b3c
Certificate serial: 019747B0AE63D6A710539A3E12E61F3F6027
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dKqTEq9MPZzuCCyVQaa2WtpWmzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/dKqTEq9MPZzuCCyVQaa2WtpWmzw.mft
Manifest number: 10FD
Signing time: Sat 07 Jun 2025 00:00:50 +0000
Manifest this update: Sat 07 Jun 2025 00:00:50 +0000
Manifest next update: Sun 08 Jun 2025 00:00:50 +0000
Files and hashes: 1: HD_5B5PkdD6FjC7TkT0hg6RMpR4.roa (hash: edkKQyLMUB/s54h+sVCKB7yaqoodePtajczbUuzbRHE=)
2: dKqTEq9MPZzuCCyVQaa2WtpWmzw.crl (hash: Cb9dqQV3QQMkrju9rOyHX6pfLyD1XscsRDx0fsX2XoU=)
3: f_wGT4AI_ECeedsmGEwBxGaUeL4.roa (hash: uaJcjwmpsOrQII9GbK1eXz3SSaKBT2wK73YD/T5U+Hc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/dKqTEq9MPZzuCCyVQaa2WtpWmzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/dKqTEq9MPZzuCCyVQaa2WtpWmzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/dKqTEq9MPZzuCCyVQaa2WtpWmzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:b0:ae:63:d6:a7:10:53:9a:3e:12:e6:1f:3f:60:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74aa9312af4c3d9cee082c9541a6b65ada569b3c
Validity
Not Before: Jun 7 00:00:50 2025 GMT
Not After : Jun 8 00:00:50 2025 GMT
Subject: CN=e06953f2c4d9d5e6e55763fb0df495a22b6b4545
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:b1:da:ac:db:1e:6b:6a:ee:d6:e2:db:65:c7:
ea:99:dc:96:75:10:f5:61:e7:7d:f4:f4:3e:89:da:
18:96:06:29:13:47:fe:6b:3f:f6:f2:5a:45:2c:3c:
62:67:95:aa:e1:01:18:a1:58:dc:08:e0:4b:74:ce:
57:5e:18:62:7c:8a:88:9f:36:c8:5b:fa:06:24:f4:
87:c1:c3:70:c1:d2:41:9c:38:2d:33:1d:75:d8:be:
e1:78:b1:fb:d3:53:03:46:8a:b1:26:08:27:49:c4:
fe:d3:ad:91:b3:be:fc:8b:d5:10:b0:c1:d4:72:ee:
6c:c5:15:64:33:5f:87:39:7b:a3:f4:5c:6a:18:83:
4f:1e:9b:c6:de:02:61:41:1a:aa:c4:e7:52:40:66:
bb:7f:7e:ec:62:0e:10:b5:39:fb:1f:1d:c1:58:e9:
a7:ec:49:26:28:b4:01:10:5c:ea:40:20:d6:0f:49:
57:9e:ad:d2:a4:2a:f3:47:ab:94:ba:fb:00:0d:5e:
18:1b:2b:a2:34:4e:79:6c:97:1b:ab:b8:38:ee:ce:
a6:3a:92:ac:26:9e:ac:57:2c:51:19:3f:1b:bf:26:
29:75:c0:bc:39:a5:de:50:d0:a7:d0:ad:86:8f:b7:
55:e9:99:db:52:17:a9:c8:b5:9e:ef:0c:2e:5a:6b:
b6:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:69:53:F2:C4:D9:D5:E6:E5:57:63:FB:0D:F4:95:A2:2B:6B:45:45
X509v3 Authority Key Identifier:
keyid:74:AA:93:12:AF:4C:3D:9C:EE:08:2C:95:41:A6:B6:5A:DA:56:9B:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dKqTEq9MPZzuCCyVQaa2WtpWmzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/dKqTEq9MPZzuCCyVQaa2WtpWmzw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/dKqTEq9MPZzuCCyVQaa2WtpWmzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:47:28:24:3b:61:16:e8:6b:b3:f8:56:4f:88:1a:20:74:5c:
69:ba:68:55:bc:19:47:f4:9d:d2:c7:39:78:b8:39:5e:db:a4:
94:50:ed:5f:a1:b1:15:ea:84:2d:73:32:3c:a3:85:da:db:73:
d2:0f:02:b6:ce:f5:94:20:f0:5d:c1:c2:41:a4:95:5c:07:97:
0e:3c:16:dc:c8:3f:5a:ad:05:28:15:e9:14:cd:69:85:2b:12:
37:33:6f:dd:1a:a3:ca:8f:46:fb:1d:f3:5b:1c:8a:9a:b0:00:
89:85:5a:47:9c:0b:88:89:b5:25:5e:c6:47:71:e7:e0:eb:68:
b8:2b:0d:45:1e:61:14:57:9d:d7:a4:a9:6b:26:1f:a6:35:f0:
18:94:e6:c1:3c:b2:85:21:44:06:c7:4e:8a:79:2a:f4:78:e8:
75:c8:a7:89:1d:de:e5:26:0b:9f:bf:7f:21:c0:fc:d1:9d:7f:
e4:1f:c9:48:67:8e:e1:19:3c:50:77:32:50:c0:79:bf:65:32:
a7:4d:c4:5d:1f:38:42:91:09:f0:46:30:de:1c:e0:11:47:7f:
dd:86:c5:c3:25:09:6f:bc:f1:80:88:bd:8b:40:20:f6:88:83:
bb:42:1e:50:e6:0e:b5:79:a2:8a:1c:0a:de:77:98:e2:a8:bb:
6a:fc:c6:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 02:49:56 2025 by rpki-client