Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/1f1ade-e2e6-4d73-96a9-427429fcd74c/1/DDnQStg6rB3lqYzfdiQKlzYsSsY.mft
File: DDnQStg6rB3lqYzfdiQKlzYsSsY.mft (raw, json)
Hash identifier: 1xVLPNuVU/pcQSzJqm+mkMQZGrgt6gKeD0+RfBRn8V4=
Subject key identifier: 38:3F:DB:74:AB:19:5A:24:51:A1:8A:D6:6B:75:C4:FD:28:70:D0:9B
Authority key identifier: 0C:39:D0:4A:D8:3A:AC:1D:E5:A9:8C:DF:76:24:0A:97:36:2C:4A:C6
Certificate issuer: /CN=0c39d04ad83aac1de5a98cdf76240a97362c4ac6
Certificate serial: 019768BC52BE34E3391785985858E0EA2A5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DDnQStg6rB3lqYzfdiQKlzYsSsY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/1f1ade-e2e6-4d73-96a9-427429fcd74c/1/DDnQStg6rB3lqYzfdiQKlzYsSsY.mft
Manifest number: 026F
Signing time: Fri 13 Jun 2025 10:01:01 +0000
Manifest this update: Fri 13 Jun 2025 10:01:01 +0000
Manifest next update: Sat 14 Jun 2025 10:01:01 +0000
Files and hashes: 1: DDnQStg6rB3lqYzfdiQKlzYsSsY.crl (hash: UIgIPLRxpsQr1S8/5hHNgaQbI3AJEGG5UT5Z1jidWAA=)
2: NOYTh7ZlTxAFEDHg6RZrbrrgktU.roa (hash: tsOnlXCMm1Zkvk7dgvDTsJOertYGX+iBxLbtlWab/tk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/1f1ade-e2e6-4d73-96a9-427429fcd74c/1/DDnQStg6rB3lqYzfdiQKlzYsSsY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/1f1ade-e2e6-4d73-96a9-427429fcd74c/1/DDnQStg6rB3lqYzfdiQKlzYsSsY.mft
rsync://rpki.ripe.net/repository/DEFAULT/DDnQStg6rB3lqYzfdiQKlzYsSsY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 07:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:bc:52:be:34:e3:39:17:85:98:58:58:e0:ea:2a:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c39d04ad83aac1de5a98cdf76240a97362c4ac6
Validity
Not Before: Jun 13 10:01:01 2025 GMT
Not After : Jun 14 10:01:01 2025 GMT
Subject: CN=383fdb74ab195a2451a18ad66b75c4fd2870d09b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:07:91:17:aa:12:4c:0f:3e:57:3d:a4:42:91:
30:35:f0:8c:48:d3:c1:b4:eb:cf:3c:10:b9:5e:e1:
3f:01:9e:fc:d7:67:85:d9:66:37:01:c3:0f:8a:3d:
78:ac:8c:54:c6:53:4b:5f:13:c3:7e:fd:9a:1f:15:
5a:4f:ac:a3:79:ad:ad:c8:ee:f7:34:d3:5b:aa:a8:
b4:19:7a:0e:24:15:68:4a:35:08:26:42:f4:81:bb:
5d:a9:82:5b:38:5b:21:ed:fd:43:14:26:e7:5d:d3:
d0:68:b3:a2:5c:8a:3c:a3:db:5e:30:26:07:92:03:
bd:55:51:35:7e:c9:07:c1:16:e0:e0:8e:77:5c:d1:
92:00:ed:57:f9:42:c9:6f:bf:22:63:96:ef:b4:ab:
65:c8:8c:5d:af:21:d3:e8:7a:4a:ac:c3:6b:5c:69:
7b:d9:96:1e:94:a9:1c:e2:3b:0a:02:34:e8:11:67:
c3:c9:53:d6:a3:09:1c:8c:ae:d6:9e:2d:13:d5:99:
75:7c:60:c9:d8:52:88:b9:58:d9:16:f3:55:12:64:
8a:68:fb:be:ca:96:5f:4f:ee:43:f2:96:a8:28:b1:
18:b5:3f:4f:f3:4b:aa:75:2a:3f:5e:a4:10:9d:75:
79:d2:4c:c9:59:aa:2d:6c:5b:62:86:53:b4:5f:cc:
35:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:3F:DB:74:AB:19:5A:24:51:A1:8A:D6:6B:75:C4:FD:28:70:D0:9B
X509v3 Authority Key Identifier:
keyid:0C:39:D0:4A:D8:3A:AC:1D:E5:A9:8C:DF:76:24:0A:97:36:2C:4A:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DDnQStg6rB3lqYzfdiQKlzYsSsY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/1f1ade-e2e6-4d73-96a9-427429fcd74c/1/DDnQStg6rB3lqYzfdiQKlzYsSsY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/1f1ade-e2e6-4d73-96a9-427429fcd74c/1/DDnQStg6rB3lqYzfdiQKlzYsSsY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:62:a8:90:f9:11:70:50:d6:c2:ff:1b:a1:e9:55:ec:0c:a3:
d1:23:47:c9:50:b3:53:4b:0f:bd:69:61:9a:61:7e:3e:1b:f3:
03:83:95:36:7e:9d:53:33:71:7d:75:c0:40:ab:f0:7b:b1:14:
16:11:0e:07:fb:81:f1:b2:15:02:6f:4c:bb:0b:f3:73:d8:92:
52:ff:15:8f:79:75:a3:98:f4:74:66:5a:65:26:60:bd:08:aa:
f1:d2:ee:06:d2:f4:d5:17:6b:8d:f6:3d:28:8b:a0:77:ef:64:
4a:b3:67:d4:04:9b:1e:bd:ff:eb:31:a9:d1:15:79:4a:e6:51:
cc:73:4d:e2:19:b9:08:57:1d:03:b2:9b:a7:ed:72:11:0c:4c:
72:cf:41:e9:08:a9:1f:8d:49:9e:f8:d6:b3:c0:25:98:f5:a7:
fb:5f:df:f6:d2:c3:df:0a:be:10:7a:89:78:28:90:69:e0:a0:
e5:45:96:64:be:ab:7f:59:de:af:d2:40:d5:21:3f:63:c7:13:
ef:08:aa:d7:9c:56:78:cc:64:94:d0:9b:02:3d:65:07:0f:72:
24:4c:5a:70:7c:f2:a2:64:d2:47:d2:77:1a:f5:aa:6c:71:de:
89:64:90:85:d7:5b:96:5e:0c:69:54:ec:ae:42:fa:3f:a5:08:
e7:77:be:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 13:38:27 2025 by rpki-client