Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/3ab55d-852f-495b-b2b3-e02d730fe84e/1/dHyzZv9uI99sCX9grcf6gHVZgZE.mft
File: dHyzZv9uI99sCX9grcf6gHVZgZE.mft (raw, json)
Hash identifier: Enzqa85OPsRpaPB9jeQHf5Ev70+huNjbOHzSfzvyZqw=
Subject key identifier: B6:FD:08:D1:78:D0:A9:3F:84:E2:9B:60:77:FC:D1:50:2C:52:5F:B7
Authority key identifier: 74:7C:B3:66:FF:6E:23:DF:6C:09:7F:60:AD:C7:FA:80:75:59:81:91
Certificate issuer: /CN=747cb366ff6e23df6c097f60adc7fa8075598191
Certificate serial: 01974F32F340BD6A72EE4F4E867FAB232AAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dHyzZv9uI99sCX9grcf6gHVZgZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/3ab55d-852f-495b-b2b3-e02d730fe84e/1/dHyzZv9uI99sCX9grcf6gHVZgZE.mft
Manifest number: 0947
Signing time: Sun 08 Jun 2025 11:00:28 +0000
Manifest this update: Sun 08 Jun 2025 11:00:28 +0000
Manifest next update: Mon 09 Jun 2025 11:00:28 +0000
Files and hashes: 1: _yLmchLwIYVTnPdJc9fw9h7BqNI.roa (hash: jQg4aqJLhfqC2o9cWdzjV4aGpmH8JtaZPWEi/oExAo8=)
2: dHyzZv9uI99sCX9grcf6gHVZgZE.crl (hash: PBs0jjcvX+w7tjtfRseNhRAnQfa9pYG0u7jU2ygJDAs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/3ab55d-852f-495b-b2b3-e02d730fe84e/1/dHyzZv9uI99sCX9grcf6gHVZgZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/3ab55d-852f-495b-b2b3-e02d730fe84e/1/dHyzZv9uI99sCX9grcf6gHVZgZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/dHyzZv9uI99sCX9grcf6gHVZgZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 11:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4f:32:f3:40:bd:6a:72:ee:4f:4e:86:7f:ab:23:2a:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=747cb366ff6e23df6c097f60adc7fa8075598191
Validity
Not Before: Jun 8 11:00:28 2025 GMT
Not After : Jun 9 11:00:28 2025 GMT
Subject: CN=b6fd08d178d0a93f84e29b6077fcd1502c525fb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:6d:b5:98:8f:c6:a7:19:06:3f:b5:96:ac:ab:
1a:66:1c:e4:0d:f0:14:3a:c6:71:05:32:7b:f2:bf:
0f:15:c0:8e:88:6c:1c:6c:d1:0d:9f:a4:12:a3:42:
53:33:55:3b:31:c2:82:44:6f:c4:63:90:9d:dc:6f:
ff:0b:5d:8c:37:95:e4:09:57:54:00:a8:48:70:6b:
ef:6e:41:5e:a5:1e:97:a8:37:a3:0a:8d:81:81:5a:
e0:c8:9e:77:f7:01:13:9f:5d:43:b7:80:af:aa:31:
47:95:74:2a:20:89:5c:5b:4d:f5:48:33:d9:79:c6:
79:ba:be:97:57:8c:34:70:35:a5:96:9a:3a:d8:5b:
ca:63:90:77:18:0e:24:e4:28:5a:83:d4:a8:d9:1b:
ae:d2:96:5d:f3:87:82:58:6c:4b:b1:c2:9f:eb:21:
eb:a0:cb:fb:b3:c8:d3:cd:da:50:b8:3e:a0:1e:7c:
a7:ed:2e:92:36:96:5e:24:79:af:f1:fa:46:fd:e0:
35:69:5f:11:60:70:81:25:69:31:4c:61:05:83:69:
18:16:8a:de:77:d0:44:1d:c2:4f:6c:00:c1:b4:6a:
c8:1f:af:2d:ca:4d:72:e8:2e:70:30:75:9a:51:fa:
ba:61:f6:84:bf:98:6c:3d:9c:0b:c7:99:05:d6:4f:
d9:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:FD:08:D1:78:D0:A9:3F:84:E2:9B:60:77:FC:D1:50:2C:52:5F:B7
X509v3 Authority Key Identifier:
keyid:74:7C:B3:66:FF:6E:23:DF:6C:09:7F:60:AD:C7:FA:80:75:59:81:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dHyzZv9uI99sCX9grcf6gHVZgZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/3ab55d-852f-495b-b2b3-e02d730fe84e/1/dHyzZv9uI99sCX9grcf6gHVZgZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/3ab55d-852f-495b-b2b3-e02d730fe84e/1/dHyzZv9uI99sCX9grcf6gHVZgZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:38:1f:6a:09:a2:e1:0f:ea:e3:22:9a:be:4a:57:13:1e:4b:
bf:00:55:22:34:5d:d7:81:39:2f:4d:95:72:31:62:72:eb:60:
ea:92:1d:41:f6:30:29:a8:77:62:52:e2:da:24:ab:ea:df:5c:
e7:37:02:fd:af:cf:6d:1a:b2:ae:f3:e2:28:d2:01:5e:12:1a:
4c:89:7d:d4:7e:6e:d0:af:62:49:f7:3a:c6:f8:95:c6:38:3c:
fa:cf:9c:29:c2:02:dc:52:91:78:4b:68:30:57:f6:9d:f8:15:
6f:1b:a7:04:4b:cc:cf:21:56:6a:b0:69:42:21:51:e1:35:24:
31:c5:4a:42:d6:0f:58:0a:63:86:95:52:d5:82:12:04:3c:b5:
a5:94:d7:eb:0c:aa:0a:7c:d9:b4:53:ed:be:55:91:ab:24:06:
b8:61:c8:4d:56:7e:33:12:33:77:a4:0d:7a:2a:2e:ba:ed:49:
f6:a5:97:11:79:66:4d:68:bc:05:ff:b7:89:4d:1f:e3:84:9e:
23:46:b2:3d:c5:f4:d9:4d:50:73:aa:e0:53:81:26:cd:b4:28:
b4:77:04:d9:d4:87:23:ab:15:eb:cc:d6:b7:30:b9:de:3c:61:
47:f9:ee:b6:41:88:2e:5c:dc:77:58:42:f9:04:fb:b1:d2:e0:
b8:45:f9:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 15:27:56 2025 by rpki-client