Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/8941f8-9fb6-4d0f-b495-93385f805655/1/dAId0eJ80ed44tu9YKoYSxY7zv4.mft
File: dAId0eJ80ed44tu9YKoYSxY7zv4.mft (raw, json)
Hash identifier: ugCov9VRqgY39njETv7+DbaD/uVRRzPOUUCoFyE1+tc=
Subject key identifier: 37:2E:13:F5:2C:8C:28:44:F4:58:C3:A5:51:C5:A7:81:12:66:AA:FB
Authority key identifier: 74:02:1D:D1:E2:7C:D1:E7:78:E2:DB:BD:60:AA:18:4B:16:3B:CE:FE
Certificate issuer: /CN=74021dd1e27cd1e778e2dbbd60aa184b163bcefe
Certificate serial: 01974779709EB428A19FA5304C7C3603BE58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dAId0eJ80ed44tu9YKoYSxY7zv4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/8941f8-9fb6-4d0f-b495-93385f805655/1/dAId0eJ80ed44tu9YKoYSxY7zv4.mft
Manifest number: D1
Signing time: Fri 06 Jun 2025 23:00:30 +0000
Manifest this update: Fri 06 Jun 2025 23:00:30 +0000
Manifest next update: Sat 07 Jun 2025 23:00:30 +0000
Files and hashes: 1: SFufe6GxPr18jUulsobsVcJNabA.roa (hash: BS7brnhU1ziQ1RkRsO80taFEBA/xtbs+mzY1lj67wlg=)
2: dAId0eJ80ed44tu9YKoYSxY7zv4.crl (hash: vC0KDYP3m4SOIYroVpY79CHOHvjkSwyIEuhvLLrfJwE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/8941f8-9fb6-4d0f-b495-93385f805655/1/dAId0eJ80ed44tu9YKoYSxY7zv4.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/8941f8-9fb6-4d0f-b495-93385f805655/1/dAId0eJ80ed44tu9YKoYSxY7zv4.mft
rsync://rpki.ripe.net/repository/DEFAULT/dAId0eJ80ed44tu9YKoYSxY7zv4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 23:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:79:70:9e:b4:28:a1:9f:a5:30:4c:7c:36:03:be:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74021dd1e27cd1e778e2dbbd60aa184b163bcefe
Validity
Not Before: Jun 6 23:00:30 2025 GMT
Not After : Jun 7 23:00:30 2025 GMT
Subject: CN=372e13f52c8c2844f458c3a551c5a7811266aafb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:87:91:69:4d:6d:a3:42:af:5c:d5:cc:c7:14:
ba:ea:13:2e:95:f9:fb:1f:e7:28:7c:00:fa:44:22:
28:d7:92:91:de:7a:ff:dc:30:2e:c1:3e:95:b0:84:
54:b3:57:74:31:d4:65:a2:a8:0c:e3:ad:2a:bf:a5:
3b:34:16:7b:59:89:d1:7d:51:62:e3:d0:0b:03:51:
51:38:41:52:8c:2f:3b:2b:a7:c7:ee:ef:89:d5:46:
04:ff:c1:29:26:53:33:6f:10:d0:b6:83:70:34:83:
ea:7a:bc:dc:0b:eb:05:2f:0b:00:04:e8:cd:f2:f7:
41:2e:55:d3:36:c0:fe:16:27:92:6a:7e:7c:0e:89:
6f:f7:c1:20:23:20:ca:b3:ff:37:ee:a7:4b:4a:ec:
90:f0:b2:a1:7b:3f:e8:05:ae:db:5c:1d:48:e7:00:
3e:d0:e2:43:10:f3:05:41:90:25:2f:cc:4c:ad:d9:
06:b3:8e:00:ea:5c:43:7c:81:d7:8d:be:19:f1:2e:
99:0c:37:bd:05:c8:78:82:ed:b3:a4:8a:16:15:41:
86:9f:2d:d5:f3:2d:5e:f9:be:cd:dd:b0:a1:5d:d3:
ab:10:55:f5:fa:8d:c3:d6:42:4f:f1:43:73:4f:18:
1a:0c:13:31:5b:43:60:77:d6:59:90:28:f1:33:e3:
5a:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:2E:13:F5:2C:8C:28:44:F4:58:C3:A5:51:C5:A7:81:12:66:AA:FB
X509v3 Authority Key Identifier:
keyid:74:02:1D:D1:E2:7C:D1:E7:78:E2:DB:BD:60:AA:18:4B:16:3B:CE:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dAId0eJ80ed44tu9YKoYSxY7zv4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/8941f8-9fb6-4d0f-b495-93385f805655/1/dAId0eJ80ed44tu9YKoYSxY7zv4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/8941f8-9fb6-4d0f-b495-93385f805655/1/dAId0eJ80ed44tu9YKoYSxY7zv4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:38:ff:b9:d8:18:80:51:81:70:0c:11:a7:60:c2:e6:f0:c3:
57:7e:e4:07:25:b4:6e:f8:19:2d:82:0c:c0:4e:8b:10:e7:70:
59:be:ee:23:09:03:fc:db:b7:db:4f:13:78:b1:e0:84:38:f3:
1f:b0:18:90:95:aa:90:aa:61:4e:11:b0:fe:09:d6:bf:b6:44:
ff:7a:e2:1a:46:b9:6f:e1:95:65:ba:48:b1:c0:2e:41:8c:ba:
01:d4:f4:bf:d1:40:d9:59:c2:55:6a:ee:1e:7d:e4:65:b0:0d:
3b:e1:22:97:37:ce:81:ea:da:99:a7:0c:e8:d5:18:87:1c:fe:
46:d1:38:dd:6b:a4:26:55:9c:b3:2d:8b:8c:ed:44:95:ca:15:
99:89:c6:9b:a8:0d:90:32:74:da:66:dd:07:66:b5:77:95:06:
47:f4:10:84:de:23:1f:dd:db:02:ba:7c:37:f5:0b:e2:36:98:
90:e0:09:de:1d:de:af:2d:bf:29:2d:ce:ab:80:06:d7:da:d8:
97:13:1d:2d:fa:43:30:13:10:a7:63:54:1b:2f:68:9b:06:11:
8e:c4:5d:c0:4b:ee:a3:2f:81:0a:12:dd:50:78:cb:51:fd:ed:
4f:59:1c:74:3a:b5:8b:d0:a2:a5:1e:20:1a:b9:7c:b3:dc:9e:
17:02:5f:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:10:05 2025 by rpki-client