Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/a600cf-8238-4471-a1b7-f6ed83e78ef5/1/DDVXITpnJSgrJKaFMI6c-EEHrH0.mft
File: DDVXITpnJSgrJKaFMI6c-EEHrH0.mft (raw, json)
Hash identifier: 4SOacGSLgQd8johDPXrRiYrupr7lNUYGy+UMhG7Dn7w=
Subject key identifier: 9D:F0:9E:7D:4A:E5:EE:98:67:7F:15:F8:85:25:BB:EC:21:65:91:92
Authority key identifier: 0C:35:57:21:3A:67:25:28:2B:24:A6:85:30:8E:9C:F8:41:07:AC:7D
Certificate issuer: /CN=0c3557213a6725282b24a685308e9cf84107ac7d
Certificate serial: 0197470C5A3EE23F4CBFFBCD7EA2555A8FCC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DDVXITpnJSgrJKaFMI6c-EEHrH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/a600cf-8238-4471-a1b7-f6ed83e78ef5/1/DDVXITpnJSgrJKaFMI6c-EEHrH0.mft
Manifest number: 0B8F
Signing time: Fri 06 Jun 2025 21:01:21 +0000
Manifest this update: Fri 06 Jun 2025 21:01:21 +0000
Manifest next update: Sat 07 Jun 2025 21:01:21 +0000
Files and hashes: 1: DDVXITpnJSgrJKaFMI6c-EEHrH0.crl (hash: ALSzX8k+6Z7JD/qti3ObFyCUkx/NstBoOHm1HK7c6ps=)
2: VZiF-Ol32xpPvgDNLsgn8o2ll8Q.roa (hash: jUXaFXCucr/kHxmzz2/hS3PZ0b17pBJZMH+/2Ezk2nE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/a600cf-8238-4471-a1b7-f6ed83e78ef5/1/DDVXITpnJSgrJKaFMI6c-EEHrH0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/a600cf-8238-4471-a1b7-f6ed83e78ef5/1/DDVXITpnJSgrJKaFMI6c-EEHrH0.mft
rsync://rpki.ripe.net/repository/DEFAULT/DDVXITpnJSgrJKaFMI6c-EEHrH0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:0c:5a:3e:e2:3f:4c:bf:fb:cd:7e:a2:55:5a:8f:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c3557213a6725282b24a685308e9cf84107ac7d
Validity
Not Before: Jun 6 21:01:21 2025 GMT
Not After : Jun 7 21:01:21 2025 GMT
Subject: CN=9df09e7d4ae5ee98677f15f88525bbec21659192
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:68:c4:38:2e:1e:e8:c9:1d:26:d3:0e:b0:cd:
21:07:d5:70:8b:f3:0b:1e:9e:3d:67:37:29:41:62:
b9:2c:9e:40:70:c7:19:93:0a:6c:5c:93:2b:1c:c9:
f5:ac:50:4e:53:36:ab:bd:6d:c4:67:96:3d:cb:6a:
7b:28:a0:fc:6f:58:33:b2:2a:7c:f0:c5:75:7c:59:
78:4b:5a:d8:12:fc:39:6f:56:37:2c:ba:e3:0d:f9:
9d:c7:32:d5:57:70:da:20:dc:5c:3c:0a:c5:d7:45:
ae:d4:3d:3f:e2:35:37:4c:a0:35:e8:c0:f4:62:1c:
e8:37:40:75:0d:e4:4f:b5:61:1a:37:f1:25:61:56:
46:b2:19:ad:21:d8:e5:4a:f1:db:54:fe:f9:6e:3a:
0d:3d:c9:ca:9b:2d:8e:d6:fb:99:19:73:24:de:e8:
28:ec:f0:75:59:f3:bb:3e:4f:1f:1b:48:e7:a0:9a:
d4:15:f6:e2:52:3c:ad:b5:ca:19:43:eb:17:44:46:
fd:da:d9:c3:ba:46:d2:b1:2d:d1:45:f0:ca:f7:03:
06:bb:5c:e6:d0:2a:80:87:82:5c:f9:cd:30:16:a1:
d1:c9:d7:dc:f5:43:34:61:84:92:6c:de:9f:6b:e1:
72:90:22:49:6f:c9:a8:8f:c4:ec:f1:c6:17:75:7d:
bb:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:F0:9E:7D:4A:E5:EE:98:67:7F:15:F8:85:25:BB:EC:21:65:91:92
X509v3 Authority Key Identifier:
keyid:0C:35:57:21:3A:67:25:28:2B:24:A6:85:30:8E:9C:F8:41:07:AC:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DDVXITpnJSgrJKaFMI6c-EEHrH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/a600cf-8238-4471-a1b7-f6ed83e78ef5/1/DDVXITpnJSgrJKaFMI6c-EEHrH0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/a600cf-8238-4471-a1b7-f6ed83e78ef5/1/DDVXITpnJSgrJKaFMI6c-EEHrH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:61:6a:7c:e8:75:80:29:60:8b:9a:89:4b:c7:49:cf:78:52:
90:fb:2f:ab:6d:af:56:02:88:a3:e7:e8:87:28:42:5e:67:cb:
65:9a:34:13:c5:7f:73:4f:e6:04:e8:57:ef:f5:f5:ec:9d:7d:
c9:df:53:9d:d6:af:7a:e2:90:4d:aa:74:10:f2:2d:d0:12:7e:
e4:fb:69:26:53:6b:87:1d:4d:08:08:1f:83:65:07:33:41:62:
65:39:8c:93:35:15:8a:6d:60:0f:85:e7:aa:93:f6:9d:b0:9d:
7d:6f:1d:8b:2f:21:ea:03:e0:80:29:2b:04:54:d1:de:23:b2:
33:6b:35:72:38:95:01:9f:6d:eb:09:09:94:ba:7e:15:fe:83:
b8:6f:f3:cd:bb:b4:34:c9:0c:23:6f:0d:8f:24:99:34:65:c8:
0c:c6:21:c1:d5:85:10:75:48:90:17:26:7d:3c:d5:4c:db:46:
a1:a1:4f:0e:7f:69:e4:73:ad:eb:3e:53:a3:d3:88:de:f6:a1:
6d:8e:8e:3a:22:b6:0a:d1:e7:43:fd:54:6d:76:8a:d0:7b:14:
43:d6:2a:ca:13:00:21:0d:3b:4f:d9:ca:05:66:e9:27:6f:84:
43:9a:92:e7:e6:18:d7:f7:08:7a:15:fc:9b:74:2d:09:ea:18:
5f:74:7c:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 00:54:22 2025 by rpki-client