Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/f7f0f2-479e-4f03-baa2-061ed9371475/1/dXXVPbgi0l24J9A3fL6wbSykGss.mft
File: dXXVPbgi0l24J9A3fL6wbSykGss.mft (raw, json)
Hash identifier: nkAVmrBqrnjupdo5QUj/Zqc8f9CIUBvtEOJiQ8L3LcY=
Subject key identifier: DC:20:0B:06:70:92:04:08:75:18:13:4B:C6:C2:68:69:24:8D:99:5A
Authority key identifier: 75:75:D5:3D:B8:22:D2:5D:B8:27:D0:37:7C:BE:B0:6D:2C:A4:1A:CB
Certificate issuer: /CN=7575d53db822d25db827d0377cbeb06d2ca41acb
Certificate serial: 019748F9E32D0F9B6EBEFC34B8952153DE60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dXXVPbgi0l24J9A3fL6wbSykGss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/f7f0f2-479e-4f03-baa2-061ed9371475/1/dXXVPbgi0l24J9A3fL6wbSykGss.mft
Manifest number: 03E8
Signing time: Sat 07 Jun 2025 06:00:25 +0000
Manifest this update: Sat 07 Jun 2025 06:00:25 +0000
Manifest next update: Sun 08 Jun 2025 06:00:25 +0000
Files and hashes: 1: 59Mn6Fq_ztW3ZpObO3_epXiDhpk.roa (hash: cp+rR6j5Vo4FlHwAzBmhQ3KTx+zcyZnQHkQLzqefDBI=)
2: dXXVPbgi0l24J9A3fL6wbSykGss.crl (hash: aQSVwLEHH5k+AT3+7KEY+Eq7oVVdRzwXzKPw5yY+u2c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/f7f0f2-479e-4f03-baa2-061ed9371475/1/dXXVPbgi0l24J9A3fL6wbSykGss.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/f7f0f2-479e-4f03-baa2-061ed9371475/1/dXXVPbgi0l24J9A3fL6wbSykGss.mft
rsync://rpki.ripe.net/repository/DEFAULT/dXXVPbgi0l24J9A3fL6wbSykGss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:f9:e3:2d:0f:9b:6e:be:fc:34:b8:95:21:53:de:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7575d53db822d25db827d0377cbeb06d2ca41acb
Validity
Not Before: Jun 7 06:00:25 2025 GMT
Not After : Jun 8 06:00:25 2025 GMT
Subject: CN=dc200b06709204087518134bc6c26869248d995a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:df:42:56:c0:be:e4:c1:1d:42:78:4e:56:14:
5a:47:e7:3c:4e:29:8e:8c:66:af:33:94:94:e2:e3:
e2:79:24:2a:82:41:70:c8:f3:3a:48:4e:45:bd:ab:
b2:b1:35:20:72:f7:40:50:d2:40:59:ab:f6:0c:94:
43:15:8b:4a:4a:04:d7:46:04:0d:e3:5e:6c:f6:7d:
c1:19:be:5f:48:e0:e5:7a:ab:8c:87:2f:64:7b:b2:
bc:d4:6f:f6:93:45:04:c2:74:fb:26:fe:a1:18:88:
21:27:ea:5f:fc:ef:c8:0b:94:85:57:48:6f:89:3b:
93:fe:54:aa:31:c9:e0:2a:11:97:b1:4c:37:52:d4:
93:f5:d2:b6:1c:1a:03:f7:7a:20:c3:d5:41:97:23:
6d:be:df:2d:93:05:c1:5e:09:ae:f7:19:8b:24:21:
8e:e6:b6:49:50:b8:0e:88:0e:db:0f:88:16:1d:1f:
08:3f:9f:b0:d1:41:dc:af:42:56:f1:a7:13:e7:08:
2f:dd:ee:d1:00:3b:0c:df:d9:eb:dc:01:5f:68:3d:
05:8b:dc:77:f2:4d:1a:2b:2c:ac:cf:28:40:5b:cb:
e9:ef:af:43:78:4a:8e:8b:e1:91:f1:94:7b:2c:d5:
eb:c3:33:3e:ea:6b:55:7e:2d:46:e5:ff:87:66:d9:
29:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:20:0B:06:70:92:04:08:75:18:13:4B:C6:C2:68:69:24:8D:99:5A
X509v3 Authority Key Identifier:
keyid:75:75:D5:3D:B8:22:D2:5D:B8:27:D0:37:7C:BE:B0:6D:2C:A4:1A:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dXXVPbgi0l24J9A3fL6wbSykGss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/f7f0f2-479e-4f03-baa2-061ed9371475/1/dXXVPbgi0l24J9A3fL6wbSykGss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/f7f0f2-479e-4f03-baa2-061ed9371475/1/dXXVPbgi0l24J9A3fL6wbSykGss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:68:43:b0:37:c0:50:c5:53:86:15:9c:45:57:bb:1c:da:53:
50:f1:18:64:a5:5a:91:e5:1c:46:cb:bf:55:94:eb:24:53:e9:
bb:27:26:e6:fd:3a:bc:39:a7:04:11:de:01:e3:a9:99:d5:91:
4c:3a:a7:06:e5:91:8e:d8:04:52:16:fa:34:22:08:fe:af:20:
4d:39:5d:d0:d0:f3:f2:7b:b0:b6:f5:4f:b7:85:63:0d:a4:5a:
37:d2:dc:a3:87:13:c9:e5:69:eb:c5:9c:5e:e3:b0:e1:56:25:
54:58:55:10:67:a2:3b:e1:2f:05:7e:6f:e8:3e:09:3a:1a:bd:
f9:1a:67:1d:08:f9:bc:e0:64:22:1d:07:f7:7e:c6:c1:50:62:
05:8e:08:59:3b:98:91:4a:ef:c3:27:76:f2:ec:fb:00:69:8e:
f4:64:6c:87:1f:6e:99:50:e5:cb:78:4f:60:36:b7:0c:f4:41:
cb:0f:94:a7:1a:ca:c3:95:dd:e1:66:9b:6b:50:b2:fb:37:2d:
ca:7d:7d:ad:3c:af:63:12:e1:22:49:bf:cc:7b:c9:b1:27:1b:
be:eb:b9:d8:1b:91:93:6b:0e:1f:18:a5:ba:20:ad:06:bc:a6:
c1:4d:80:07:4a:9b:e0:eb:3d:ea:ea:47:82:33:4b:8d:c3:09:
0e:74:6d:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:28:50 2025 by rpki-client