Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/596120-b25d-4279-8ea1-6f7c0ec91d8a/1/Df9Jns244Vczu3EQlZlZrA4WYAg.mft
File: Df9Jns244Vczu3EQlZlZrA4WYAg.mft (raw, json)
Hash identifier: vkq0mPla6khltOHoBUqr94zBtAb+q0zbURpKy9sKwg4=
Subject key identifier: 60:D4:7A:D2:F5:14:D4:AF:AD:F7:52:98:EF:13:4D:3C:28:84:DF:5A
Authority key identifier: 0D:FF:49:9E:CD:B8:E1:57:33:BB:71:10:95:99:59:AC:0E:16:60:08
Certificate issuer: /CN=0dff499ecdb8e15733bb7110959959ac0e166008
Certificate serial: 0197639550D83CBA1CAAEA9E1CEB3BE2CFF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Df9Jns244Vczu3EQlZlZrA4WYAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/596120-b25d-4279-8ea1-6f7c0ec91d8a/1/Df9Jns244Vczu3EQlZlZrA4WYAg.mft
Manifest number: 0D01
Signing time: Thu 12 Jun 2025 10:00:19 +0000
Manifest this update: Thu 12 Jun 2025 10:00:19 +0000
Manifest next update: Fri 13 Jun 2025 10:00:19 +0000
Files and hashes: 1: Df9Jns244Vczu3EQlZlZrA4WYAg.crl (hash: jvGVh260wEkLvj2w+VziMvFDE7/V4v83JddF7z7Jz2w=)
2: u2KSOkA9Tk7vaFv7OCby2G46AIs.roa (hash: QpVj8Qnda9R0uaJPbddZ05OYdtwL9DiuDJMuscNQj0k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/596120-b25d-4279-8ea1-6f7c0ec91d8a/1/Df9Jns244Vczu3EQlZlZrA4WYAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/596120-b25d-4279-8ea1-6f7c0ec91d8a/1/Df9Jns244Vczu3EQlZlZrA4WYAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Df9Jns244Vczu3EQlZlZrA4WYAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 10:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:63:95:50:d8:3c:ba:1c:aa:ea:9e:1c:eb:3b:e2:cf:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dff499ecdb8e15733bb7110959959ac0e166008
Validity
Not Before: Jun 12 10:00:19 2025 GMT
Not After : Jun 13 10:00:19 2025 GMT
Subject: CN=60d47ad2f514d4afadf75298ef134d3c2884df5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:9b:ce:54:8d:ce:9c:65:68:66:44:24:26:56:
29:06:b9:ef:0c:0a:c2:58:a4:14:99:7d:00:65:b9:
7b:27:8f:4f:40:23:ca:bc:25:ce:7e:50:dc:d1:b6:
d4:1d:51:19:e7:5e:9f:2d:ea:2f:25:17:2e:42:0c:
77:f4:54:be:57:33:30:3a:80:f7:dc:6f:ba:ee:e3:
f9:e3:b8:00:c6:94:8b:e6:9a:94:67:2f:d5:15:fb:
8f:1d:c0:aa:7b:04:a7:f2:a3:31:df:fe:9b:78:50:
dc:5a:a9:4a:ad:65:3a:b2:e0:77:b6:74:47:4a:10:
d9:08:87:46:81:84:5b:ca:be:c7:87:67:9d:f8:30:
a9:32:02:fd:2d:5f:48:66:a4:49:69:92:c3:bd:f7:
57:67:6d:d9:69:ee:f7:9b:0a:e4:fd:89:3d:21:09:
c5:b8:df:cf:6a:96:6b:f0:ca:3a:72:06:61:d3:f7:
1d:72:8b:7a:bf:b4:c2:32:3e:ea:61:fe:04:d4:ff:
cd:dd:78:63:b2:33:02:c3:df:4e:15:d1:25:bc:be:
1d:89:31:39:5a:bc:86:6c:22:2e:e1:9a:16:93:ce:
b3:f4:0c:8d:90:1c:88:64:c2:1d:e7:98:4a:3f:5b:
2b:14:43:7a:26:24:3a:7d:2a:e1:92:85:e9:b3:23:
90:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:D4:7A:D2:F5:14:D4:AF:AD:F7:52:98:EF:13:4D:3C:28:84:DF:5A
X509v3 Authority Key Identifier:
keyid:0D:FF:49:9E:CD:B8:E1:57:33:BB:71:10:95:99:59:AC:0E:16:60:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Df9Jns244Vczu3EQlZlZrA4WYAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/596120-b25d-4279-8ea1-6f7c0ec91d8a/1/Df9Jns244Vczu3EQlZlZrA4WYAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/596120-b25d-4279-8ea1-6f7c0ec91d8a/1/Df9Jns244Vczu3EQlZlZrA4WYAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:64:c1:9c:31:b6:f7:bb:c5:6a:7d:85:2d:dc:0f:25:cd:f3:
cf:09:c2:44:83:3f:f4:ba:d0:b1:1f:52:46:0d:87:b7:69:8a:
93:7d:85:36:df:6f:35:a3:68:a5:7b:86:43:f8:72:05:bc:fe:
18:58:30:43:ef:ac:d8:96:18:25:27:70:e0:68:7b:35:18:f8:
3a:52:b0:37:6e:b6:f1:c8:86:b2:6e:0c:02:ba:40:48:72:a7:
db:83:a6:6d:20:9b:30:c1:85:06:c9:ca:19:f1:13:7e:1a:e1:
c7:f6:fb:eb:28:42:8f:59:73:43:0c:0a:51:36:fd:98:de:09:
a6:f4:13:ff:56:08:28:53:c6:84:8b:88:cf:79:99:19:53:12:
f7:78:f0:7a:40:77:d6:73:39:19:93:35:02:78:4e:8d:ef:1d:
ce:fe:5b:8b:0a:1b:bb:7b:8c:fe:ed:4c:25:8a:2e:11:df:52:
5e:5b:a7:f9:da:50:ee:c8:1f:45:06:b6:d6:1d:95:bd:63:61:
d2:c6:5f:30:69:ae:0d:b3:9a:4e:03:6d:5a:e9:34:a8:07:f8:
bf:55:08:94:48:a4:88:87:1a:94:5a:9f:32:88:0e:b5:c4:19:
91:a1:54:ed:af:4e:06:65:7e:9e:36:e2:a6:cd:d3:7c:73:10:
df:3c:81:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 17:53:46 2025 by rpki-client