Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/596120-b25d-4279-8ea1-6f7c0ec91d8a/1/Df9Jns244Vczu3EQlZlZrA4WYAg.mft
File: Df9Jns244Vczu3EQlZlZrA4WYAg.mft (raw, json)
Hash identifier: c8U/GOcM8TrXwCh7XOfmVNillTZrlCRFPjJmkntxztg=
Subject key identifier: 94:2D:CE:0F:DC:EF:46:8C:65:A0:EE:56:92:28:EC:2A:0C:EF:3A:5B
Authority key identifier: 0D:FF:49:9E:CD:B8:E1:57:33:BB:71:10:95:99:59:AC:0E:16:60:08
Certificate issuer: /CN=0dff499ecdb8e15733bb7110959959ac0e166008
Certificate serial: 01976F2BBF98374DCB69ADE748235D4388DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Df9Jns244Vczu3EQlZlZrA4WYAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/596120-b25d-4279-8ea1-6f7c0ec91d8a/1/Df9Jns244Vczu3EQlZlZrA4WYAg.mft
Manifest number: 0D07
Signing time: Sat 14 Jun 2025 16:00:27 +0000
Manifest this update: Sat 14 Jun 2025 16:00:27 +0000
Manifest next update: Sun 15 Jun 2025 16:00:27 +0000
Files and hashes: 1: Df9Jns244Vczu3EQlZlZrA4WYAg.crl (hash: //4sieH52OyRVombJ/7rPAt3XFmBFgJM7AGFOHvMurw=)
2: u2KSOkA9Tk7vaFv7OCby2G46AIs.roa (hash: QpVj8Qnda9R0uaJPbddZ05OYdtwL9DiuDJMuscNQj0k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/596120-b25d-4279-8ea1-6f7c0ec91d8a/1/Df9Jns244Vczu3EQlZlZrA4WYAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/596120-b25d-4279-8ea1-6f7c0ec91d8a/1/Df9Jns244Vczu3EQlZlZrA4WYAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Df9Jns244Vczu3EQlZlZrA4WYAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:2b:bf:98:37:4d:cb:69:ad:e7:48:23:5d:43:88:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dff499ecdb8e15733bb7110959959ac0e166008
Validity
Not Before: Jun 14 16:00:27 2025 GMT
Not After : Jun 15 16:00:27 2025 GMT
Subject: CN=942dce0fdcef468c65a0ee569228ec2a0cef3a5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:c1:a6:20:26:f7:b8:26:b6:34:8d:65:9d:a0:
d0:78:c6:2c:a0:d2:69:e7:ff:ac:c9:bb:23:7b:5b:
a0:0c:18:3e:8e:2d:0b:f3:89:48:ea:6c:69:03:13:
d4:75:db:09:72:45:e8:1a:ea:6a:68:e2:92:5b:44:
98:aa:3e:39:b6:dd:51:7e:ee:66:21:b1:51:b9:fe:
0b:f2:a4:8e:89:16:9e:36:58:8c:b7:f0:ef:ef:aa:
39:44:e4:83:38:60:3c:0b:47:54:4b:72:54:dc:ea:
6c:1b:5b:46:e4:bd:21:67:ff:67:61:68:5a:de:d7:
7d:aa:e0:85:37:bb:9a:ac:c0:46:13:70:e3:45:36:
e5:c0:33:02:c2:8e:e4:0e:3a:53:69:34:d2:3f:2c:
0b:93:03:be:7c:d3:86:40:ad:ba:cb:e1:bf:db:81:
83:be:65:97:2b:78:27:3e:e9:2c:95:5b:8d:2a:cd:
8c:52:fb:36:0c:5c:60:9f:bd:c4:70:b2:fd:09:1b:
0f:57:bf:82:00:d2:75:34:24:c5:c5:38:8c:4a:08:
7e:1c:4b:87:ea:bf:2d:af:34:c2:3c:31:78:50:a9:
10:0f:06:f3:13:cc:c8:58:cc:5e:67:74:98:25:d6:
d9:ff:a9:d4:06:f2:20:75:18:24:8a:0c:7f:f8:e4:
8a:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:2D:CE:0F:DC:EF:46:8C:65:A0:EE:56:92:28:EC:2A:0C:EF:3A:5B
X509v3 Authority Key Identifier:
keyid:0D:FF:49:9E:CD:B8:E1:57:33:BB:71:10:95:99:59:AC:0E:16:60:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Df9Jns244Vczu3EQlZlZrA4WYAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/596120-b25d-4279-8ea1-6f7c0ec91d8a/1/Df9Jns244Vczu3EQlZlZrA4WYAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/596120-b25d-4279-8ea1-6f7c0ec91d8a/1/Df9Jns244Vczu3EQlZlZrA4WYAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:5b:34:f4:8d:05:6e:30:da:eb:e2:0e:36:f8:3c:c0:ff:0c:
91:47:57:5b:8e:40:b0:0c:ff:ad:b2:34:1a:d6:49:b7:44:b8:
33:32:4d:5b:3e:95:39:d5:f5:50:0c:af:e8:92:92:80:95:63:
a2:ee:34:19:ff:6a:5d:ba:ad:88:3e:41:d3:ae:2e:16:d5:2f:
f7:b6:a6:72:15:8f:ce:0e:fe:73:db:4b:52:9a:4a:cd:d6:d7:
29:76:b1:51:bc:3e:d3:e2:8a:9b:73:66:4a:4f:d2:48:ca:09:
14:0d:16:66:c7:d5:a5:37:43:bd:12:ad:93:5f:22:95:1f:aa:
a9:0e:d3:76:93:a7:1d:91:b6:01:e6:1c:1d:e6:19:e2:66:88:
f5:72:42:36:d1:b7:6b:cb:0a:f6:0e:86:8c:90:b3:cf:e7:d4:
2c:95:a1:d8:69:5b:d0:72:0f:22:8d:9c:0d:b5:77:a2:ba:e1:
e3:31:92:05:0c:f8:03:39:4c:68:04:01:16:82:d6:07:40:7e:
62:b1:a4:45:44:82:d8:5f:c2:6a:d1:6c:2f:a8:34:ff:a1:32:
37:15:4f:75:41:3a:ea:15:7a:05:6f:8c:32:fc:19:28:16:5b:
6e:6d:3e:7d:16:8d:47:49:fc:50:0c:ca:1d:22:1b:82:e9:be:
f5:4b:f5:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 21:07:19 2025 by rpki-client