Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/0ca4df-2e06-4406-9688-78f02805c709/1/dIZPUCPsYmPvnxb5AYf18oBh0RU.mft
File: dIZPUCPsYmPvnxb5AYf18oBh0RU.mft (raw, json)
Hash identifier: s1hPGQEkb57Kz3I6N4+S/OSF5fvVdF4cQUe3LA9C+l0=
Subject key identifier: 55:14:3D:2B:52:31:B2:32:6D:0A:E8:E9:43:96:2F:59:CB:7E:91:9A
Authority key identifier: 74:86:4F:50:23:EC:62:63:EF:9F:16:F9:01:87:F5:F2:80:61:D1:15
Certificate issuer: /CN=74864f5023ec6263ef9f16f90187f5f28061d115
Certificate serial: 0197556C20DC5EEB0D22BEA9E1BFFF36CF35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dIZPUCPsYmPvnxb5AYf18oBh0RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/0ca4df-2e06-4406-9688-78f02805c709/1/dIZPUCPsYmPvnxb5AYf18oBh0RU.mft
Manifest number: 0B70
Signing time: Mon 09 Jun 2025 16:00:39 +0000
Manifest this update: Mon 09 Jun 2025 16:00:39 +0000
Manifest next update: Tue 10 Jun 2025 16:00:39 +0000
Files and hashes: 1: dIZPUCPsYmPvnxb5AYf18oBh0RU.crl (hash: gRbCXg3rtAa6KPdKCSJlOB1l+cet509qN7EkmvgXmeQ=)
2: vj_VJ7c4UiwkU_5yyGsly7O6qIk.roa (hash: RoD9r1uYXNwcvEQVZCci6nqFAbGm9X9wv8JUg9I5naM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/0ca4df-2e06-4406-9688-78f02805c709/1/dIZPUCPsYmPvnxb5AYf18oBh0RU.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/0ca4df-2e06-4406-9688-78f02805c709/1/dIZPUCPsYmPvnxb5AYf18oBh0RU.mft
rsync://rpki.ripe.net/repository/DEFAULT/dIZPUCPsYmPvnxb5AYf18oBh0RU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:55:6c:20:dc:5e:eb:0d:22:be:a9:e1:bf:ff:36:cf:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74864f5023ec6263ef9f16f90187f5f28061d115
Validity
Not Before: Jun 9 16:00:39 2025 GMT
Not After : Jun 10 16:00:39 2025 GMT
Subject: CN=55143d2b5231b2326d0ae8e943962f59cb7e919a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:23:e7:56:88:be:d2:74:4d:86:3b:64:1c:33:
c5:9d:9f:3f:3c:b0:7d:ca:7e:27:46:55:e7:e0:06:
c8:c5:be:a3:fb:3c:7c:76:04:96:da:b5:cf:3e:57:
26:62:65:a0:b9:56:d7:18:7c:64:d5:b8:94:16:57:
b4:25:68:d3:05:aa:c5:58:fd:dc:9b:a0:b4:6e:d5:
62:30:50:85:9f:65:23:06:c1:2e:56:8e:3c:2f:b4:
30:73:b0:f6:aa:89:54:fb:a3:59:ff:70:21:a0:85:
c3:1b:07:d7:f9:b8:7d:c3:6e:91:76:b4:c5:8b:8c:
31:78:34:d4:d1:cf:ae:b3:11:76:6d:0d:64:a1:ed:
db:38:71:6b:97:f2:53:74:03:ad:71:c4:6a:24:13:
4a:90:61:5d:fa:fa:5a:e6:3f:74:fb:81:27:82:3a:
29:b9:33:b2:de:ef:ca:a5:3d:0f:48:6c:db:5e:27:
a3:a9:47:d1:63:37:f3:9c:df:46:6a:83:3a:e5:a9:
e0:b2:49:6c:fe:54:5b:85:16:96:ec:dc:3b:97:0d:
be:d9:1b:ea:bd:b9:ad:0d:db:75:5a:f7:ca:8e:65:
3f:ba:f9:fd:74:8a:51:ce:f9:20:c8:23:bc:38:19:
2c:1c:f6:36:b7:41:ba:41:7d:d6:47:c5:62:c4:11:
f2:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:14:3D:2B:52:31:B2:32:6D:0A:E8:E9:43:96:2F:59:CB:7E:91:9A
X509v3 Authority Key Identifier:
keyid:74:86:4F:50:23:EC:62:63:EF:9F:16:F9:01:87:F5:F2:80:61:D1:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dIZPUCPsYmPvnxb5AYf18oBh0RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/0ca4df-2e06-4406-9688-78f02805c709/1/dIZPUCPsYmPvnxb5AYf18oBh0RU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/0ca4df-2e06-4406-9688-78f02805c709/1/dIZPUCPsYmPvnxb5AYf18oBh0RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:4e:1c:59:7a:64:56:fc:32:36:0c:83:f5:aa:34:7f:ca:9e:
4d:d4:14:2f:d0:53:36:9e:e8:8b:de:ed:89:ad:de:d2:cb:3a:
eb:3a:96:ed:5a:47:46:90:fe:3a:f9:8b:ea:20:47:ea:54:cc:
8e:06:9f:a3:b7:85:89:c2:ae:3b:8b:2c:14:59:a0:d0:be:77:
a8:6f:70:ba:de:da:19:3f:3e:97:23:25:db:fc:73:b8:4d:f9:
71:ab:cc:8c:cc:8c:83:5e:f3:08:74:3b:1b:8e:1f:ae:3e:be:
f9:79:a9:7e:88:fe:de:17:a2:db:77:6f:5c:fc:8a:a3:4d:ff:
83:a8:c5:37:cc:99:49:38:c9:02:c8:d0:81:7a:7d:d4:43:64:
86:fc:6c:96:3c:99:3c:1f:6d:84:e8:79:60:b4:13:e6:19:74:
95:de:fc:2c:62:b7:c6:6b:a7:7c:45:5f:49:f8:d5:76:86:cc:
61:b5:6e:0b:b1:c8:8a:f4:bd:e1:59:ef:f7:87:f9:97:7b:ad:
1e:bc:0f:d7:b1:fd:0c:13:b3:84:c4:43:38:7a:37:f1:61:df:
05:86:63:2c:ad:4f:46:42:bc:f9:85:8c:df:76:21:b2:e2:48:
0e:e3:f7:41:dd:ee:b2:cf:3c:7b:e2:06:e6:05:5e:e9:34:22:
99:60:d2:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 23:45:47 2025 by rpki-client