Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/235fec-afc9-4d2f-8b59-a99ea91cb5b9/1/dqNyt1TkkgjWRqp4WeNItHXlJtI.mft
File: dqNyt1TkkgjWRqp4WeNItHXlJtI.mft (raw, json)
Hash identifier: iqfq5M3flmPADcfSo+FleG+3Hw6YNuF4jeSOZyVJWdw=
Subject key identifier: 5B:2D:D8:B2:4F:9D:86:D1:65:31:F9:B4:BF:50:DC:B2:B6:D0:FA:8C
Authority key identifier: 76:A3:72:B7:54:E4:92:08:D6:46:AA:78:59:E3:48:B4:75:E5:26:D2
Certificate issuer: /CN=76a372b754e49208d646aa7859e348b475e526d2
Certificate serial: 019751FD47AECB7DA431AF81D6163387F010
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dqNyt1TkkgjWRqp4WeNItHXlJtI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/235fec-afc9-4d2f-8b59-a99ea91cb5b9/1/dqNyt1TkkgjWRqp4WeNItHXlJtI.mft
Manifest number: 1580
Signing time: Mon 09 Jun 2025 00:00:42 +0000
Manifest this update: Mon 09 Jun 2025 00:00:42 +0000
Manifest next update: Tue 10 Jun 2025 00:00:42 +0000
Files and hashes: 1: dqNyt1TkkgjWRqp4WeNItHXlJtI.crl (hash: c+SprokQ4cQ0Pvg+tETm/gLxJlekuaE4Cok8pS2tgxc=)
2: jNyaGdXh72CU4r0BXdX9NFKAwCI.roa (hash: KWU48qyL5wzO3wv8boVqiKFZ7+HfPReZF5Tc1JfbGeU=)
3: rU-a1L62W9yvQkesfV9xmSsuDH0.roa (hash: TGk/DUYw8VVmGx/evhfxGKscBfdKDMhClJqHTZwdFIQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/235fec-afc9-4d2f-8b59-a99ea91cb5b9/1/dqNyt1TkkgjWRqp4WeNItHXlJtI.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/235fec-afc9-4d2f-8b59-a99ea91cb5b9/1/dqNyt1TkkgjWRqp4WeNItHXlJtI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dqNyt1TkkgjWRqp4WeNItHXlJtI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 17:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:51:fd:47:ae:cb:7d:a4:31:af:81:d6:16:33:87:f0:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76a372b754e49208d646aa7859e348b475e526d2
Validity
Not Before: Jun 9 00:00:42 2025 GMT
Not After : Jun 10 00:00:42 2025 GMT
Subject: CN=5b2dd8b24f9d86d16531f9b4bf50dcb2b6d0fa8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:da:20:e3:1f:b0:e3:2d:a7:18:52:08:0a:d1:
2e:8d:0b:04:de:3e:ed:a0:eb:77:39:1e:62:71:99:
24:ba:51:db:13:40:76:2f:12:de:93:05:39:5d:a7:
f0:3d:91:15:2a:e2:d7:e1:ee:a4:da:aa:60:6a:8f:
f0:1b:f2:a2:65:09:9a:72:70:ed:94:46:89:43:ba:
0a:6e:61:f4:4a:bd:61:1e:19:9f:bf:16:f6:ff:92:
9b:7d:8b:b1:19:ab:64:4e:c6:29:41:b1:e7:44:c0:
08:bb:72:bb:36:cd:28:6c:e5:b7:b6:65:8a:d5:db:
cd:03:c4:ea:f1:c2:ac:fc:4f:1e:39:c0:b7:a1:47:
7a:54:d8:21:e1:54:47:a9:fd:59:de:5b:18:8b:15:
6a:ea:03:1f:5f:2b:64:78:9f:01:a5:23:8b:f9:71:
6e:fe:e0:9f:f1:4c:1c:02:8c:7a:72:6a:c9:3c:44:
59:a0:1e:63:da:82:fd:e5:1b:10:2f:fc:ad:d4:75:
af:0b:fb:a5:10:1c:e0:a8:7b:a0:8d:c6:66:d9:fa:
cd:41:44:5a:de:49:3f:09:3d:a6:d7:28:5e:db:1d:
5e:db:04:42:6e:84:38:d0:a9:92:ba:00:04:db:1a:
58:2c:e4:09:45:fc:9a:14:b0:62:90:bc:3a:71:99:
1c:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:2D:D8:B2:4F:9D:86:D1:65:31:F9:B4:BF:50:DC:B2:B6:D0:FA:8C
X509v3 Authority Key Identifier:
keyid:76:A3:72:B7:54:E4:92:08:D6:46:AA:78:59:E3:48:B4:75:E5:26:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dqNyt1TkkgjWRqp4WeNItHXlJtI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/235fec-afc9-4d2f-8b59-a99ea91cb5b9/1/dqNyt1TkkgjWRqp4WeNItHXlJtI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/235fec-afc9-4d2f-8b59-a99ea91cb5b9/1/dqNyt1TkkgjWRqp4WeNItHXlJtI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:9c:6f:28:63:74:34:7f:d3:a4:3f:5f:31:c9:05:9d:6d:58:
81:b5:b1:70:cd:19:11:52:05:24:11:33:bb:6a:c5:81:b2:6b:
a6:69:5a:61:dd:0b:d4:de:f9:26:07:20:79:b5:27:55:b3:fb:
3e:fa:5d:d1:70:3b:54:a2:69:a1:69:45:68:c6:c4:67:0b:26:
31:99:65:6d:4a:45:1d:30:13:d7:5f:aa:f2:67:b1:4e:e9:0a:
d8:3d:d7:e1:2c:a4:10:21:ba:ba:25:79:a4:ae:33:93:1b:94:
8a:9b:b0:d7:87:07:f5:05:27:5d:87:68:8f:4e:2c:94:2b:a7:
c2:f2:4d:89:4b:c5:ec:0f:56:30:b3:09:55:fc:ab:22:c0:0f:
17:f9:2f:0d:e9:54:a8:44:24:de:76:e9:1c:cf:53:76:92:13:
80:b4:df:7d:b7:f5:3d:6f:62:86:20:c2:5e:75:09:58:fd:5a:
5f:4b:ab:43:51:c7:46:5d:76:50:1e:da:24:b0:f4:51:09:f4:
5e:cc:e6:4e:54:61:a3:3d:67:cf:ba:e9:94:c1:ca:f9:bc:73:
7b:26:90:c7:45:83:67:fe:70:e3:c2:52:f7:fc:cf:e9:a2:11:
04:66:b7:28:36:74:15:ad:f2:d3:b9:38:61:e7:67:42:e0:11:
fb:c9:43:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 02:39:18 2025 by rpki-client