Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/9cd1d7-34e7-47c1-8484-c191410dc889/1/dNnAc7T3BpfiF1walV9sqMOmJGs.mft
File: dNnAc7T3BpfiF1walV9sqMOmJGs.mft (raw, json)
Hash identifier: BZghDCTLMn/dJW1FpnohYiS3VkjYxwILW25LAxeKohY=
Subject key identifier: 9F:DB:13:09:76:C6:4F:48:0C:8B:80:C7:2A:5F:E2:17:22:74:CE:F7
Authority key identifier: 74:D9:C0:73:B4:F7:06:97:E2:17:5C:1A:95:5F:6C:A8:C3:A6:24:6B
Certificate issuer: /CN=74d9c073b4f70697e2175c1a955f6ca8c3a6246b
Certificate serial: 0197500EDE882C211BE278DC3AA03921F5F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dNnAc7T3BpfiF1walV9sqMOmJGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/9cd1d7-34e7-47c1-8484-c191410dc889/1/dNnAc7T3BpfiF1walV9sqMOmJGs.mft
Manifest number: 0EEB
Signing time: Sun 08 Jun 2025 15:00:40 +0000
Manifest this update: Sun 08 Jun 2025 15:00:40 +0000
Manifest next update: Mon 09 Jun 2025 15:00:40 +0000
Files and hashes: 1: Jr22ey1N2NwAUwk5_MnoxmPuMXY.roa (hash: 35l8sKB3wVTvVWmpyHsbhQyl9RJrjRSgJU8YSXiR6gw=)
2: dNnAc7T3BpfiF1walV9sqMOmJGs.crl (hash: R3LoEOYRkpS6w3V0wdmzaUwSSU0aGI7dpQfPsf5vesU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/9cd1d7-34e7-47c1-8484-c191410dc889/1/dNnAc7T3BpfiF1walV9sqMOmJGs.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/9cd1d7-34e7-47c1-8484-c191410dc889/1/dNnAc7T3BpfiF1walV9sqMOmJGs.mft
rsync://rpki.ripe.net/repository/DEFAULT/dNnAc7T3BpfiF1walV9sqMOmJGs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 15:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:0e:de:88:2c:21:1b:e2:78:dc:3a:a0:39:21:f5:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74d9c073b4f70697e2175c1a955f6ca8c3a6246b
Validity
Not Before: Jun 8 15:00:40 2025 GMT
Not After : Jun 9 15:00:40 2025 GMT
Subject: CN=9fdb130976c64f480c8b80c72a5fe2172274cef7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:eb:71:c1:9c:f3:f6:22:62:ad:74:06:4b:e9:
63:eb:cf:01:a8:a2:e2:5e:63:82:f5:6f:91:79:08:
e3:8f:16:49:0a:bb:d5:aa:e5:8d:53:2f:6b:26:73:
bc:b0:3e:50:75:63:8a:b4:a9:13:50:d8:08:fd:ed:
86:00:a9:5c:1d:1e:0a:31:e8:b6:c0:02:bc:0c:1e:
74:cd:43:f9:33:5a:c6:fb:f1:02:49:0c:71:ee:ef:
70:49:3c:93:48:d0:f5:9e:8c:98:d6:96:89:b8:78:
e0:ac:f7:20:d7:b3:d8:03:25:74:67:d9:21:2f:48:
ee:51:ce:80:bf:ff:14:28:12:8b:bc:92:22:9c:82:
29:10:a2:7e:75:5f:6d:96:5e:77:e3:d4:2c:a5:77:
76:3c:92:85:4e:b8:b1:01:82:19:38:bc:fe:c6:13:
c4:db:8e:60:37:27:1b:1c:c6:0a:cc:98:15:51:92:
0d:1d:68:da:da:a7:90:99:ad:85:1e:5e:0f:06:2b:
88:77:27:78:9e:83:f9:8d:4d:e3:ef:0f:ff:a5:93:
5b:3e:16:f4:4b:f2:19:7c:6a:02:35:2f:6a:5a:31:
09:c2:72:9b:56:b8:71:98:33:fe:6f:e5:dc:30:80:
97:9d:f2:bd:56:28:33:91:92:3c:3e:d5:11:8f:5f:
8c:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:DB:13:09:76:C6:4F:48:0C:8B:80:C7:2A:5F:E2:17:22:74:CE:F7
X509v3 Authority Key Identifier:
keyid:74:D9:C0:73:B4:F7:06:97:E2:17:5C:1A:95:5F:6C:A8:C3:A6:24:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dNnAc7T3BpfiF1walV9sqMOmJGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/9cd1d7-34e7-47c1-8484-c191410dc889/1/dNnAc7T3BpfiF1walV9sqMOmJGs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/9cd1d7-34e7-47c1-8484-c191410dc889/1/dNnAc7T3BpfiF1walV9sqMOmJGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:24:f7:1a:37:f7:53:65:c4:3b:f5:5b:32:e4:db:cb:22:50:
d7:22:fb:e0:96:dd:e8:7b:b1:e0:d6:f0:a7:91:54:4d:aa:93:
b7:a2:db:9a:95:de:5c:a6:6c:d5:7d:6e:51:58:1f:be:d5:df:
20:5e:1a:91:ce:74:39:59:4a:e6:e6:14:13:8c:f2:41:a3:6b:
9e:5f:ba:62:ab:a2:dc:d9:41:0e:36:5a:b1:a1:75:84:f0:9d:
46:f2:7c:e4:ce:a1:7b:07:4d:2e:0f:52:7c:38:c6:b9:e7:1f:
ff:f3:c2:6a:83:08:e5:35:9a:a9:9c:e9:23:29:ff:9d:75:d1:
47:35:42:33:71:28:73:28:34:f7:1e:21:47:c6:3f:e5:fb:13:
74:e2:37:6e:c6:b3:9f:45:ed:92:b9:fb:85:01:62:df:f7:ac:
d8:dd:99:65:44:88:3e:56:f0:bf:94:06:89:ec:c6:b4:97:8b:
6f:44:fb:fe:62:c4:05:bf:ab:9b:6b:91:73:4a:0e:e2:40:c1:
af:4e:33:ef:07:2d:97:e7:6d:a9:a2:11:f0:97:01:6e:72:c1:
c9:b7:d9:db:69:a8:f7:da:e7:ca:dc:fc:bf:d0:43:b9:3f:91:
39:36:c1:a9:24:bb:57:1b:d7:e9:d4:27:7f:5a:73:64:a1:81:
5e:23:e4:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 02:08:05 2025 by rpki-client