Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/1cd907-44d2-46b1-8bec-f53e51c0974f/1/DpXDrONm20G83CVsXVs75JCk92E.mft
File: DpXDrONm20G83CVsXVs75JCk92E.mft (raw, json)
Hash identifier: gg4pUzE8ithG6gqhM/yqTAoYkc+B5PfaNYLUV/CUWPs=
Subject key identifier: 73:24:1B:F0:AE:41:CF:9A:EB:51:B0:E7:B2:2C:79:A9:86:19:CA:09
Authority key identifier: 0E:95:C3:AC:E3:66:DB:41:BC:DC:25:6C:5D:5B:3B:E4:90:A4:F7:61
Certificate issuer: /CN=0e95c3ace366db41bcdc256c5d5b3be490a4f761
Certificate serial: 01974E8E318B15846372E2BEB4F172672508
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DpXDrONm20G83CVsXVs75JCk92E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/1cd907-44d2-46b1-8bec-f53e51c0974f/1/DpXDrONm20G83CVsXVs75JCk92E.mft
Manifest number: 09D7
Signing time: Sun 08 Jun 2025 08:00:31 +0000
Manifest this update: Sun 08 Jun 2025 08:00:31 +0000
Manifest next update: Mon 09 Jun 2025 08:00:31 +0000
Files and hashes: 1: 1ILl-_jBl8vTjilNwWyLb_6kN84.roa (hash: ecF4kJW8L9z29VWA5l2Xp4iuCOJ3lYvBbDFUMxXyKfo=)
2: DpXDrONm20G83CVsXVs75JCk92E.crl (hash: t5ejSdwYNHycYLJhC1kN0ejAeLIne0fXYF2unNzTie8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/1cd907-44d2-46b1-8bec-f53e51c0974f/1/DpXDrONm20G83CVsXVs75JCk92E.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/1cd907-44d2-46b1-8bec-f53e51c0974f/1/DpXDrONm20G83CVsXVs75JCk92E.mft
rsync://rpki.ripe.net/repository/DEFAULT/DpXDrONm20G83CVsXVs75JCk92E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:8e:31:8b:15:84:63:72:e2:be:b4:f1:72:67:25:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e95c3ace366db41bcdc256c5d5b3be490a4f761
Validity
Not Before: Jun 8 08:00:31 2025 GMT
Not After : Jun 9 08:00:31 2025 GMT
Subject: CN=73241bf0ae41cf9aeb51b0e7b22c79a98619ca09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:49:82:14:38:3b:4e:8e:60:32:e0:f2:6d:b1:
1c:06:d4:87:d1:4b:df:be:73:4d:49:5b:32:d2:c9:
50:f5:22:fe:72:64:dc:b7:33:90:4d:39:64:0a:df:
ba:6c:10:91:4d:e4:c4:3d:fa:b6:88:49:98:bf:f9:
e5:8b:85:df:0e:22:c7:ff:9c:c4:60:45:5c:1d:80:
b6:12:41:a7:1c:16:0a:ec:b1:e7:49:6d:63:a5:53:
98:98:47:65:66:4e:34:f1:e3:68:e6:41:17:ee:3b:
3a:9f:02:65:8d:da:c3:47:47:9a:25:19:4d:bb:bf:
40:9d:37:f6:f7:12:19:0b:a4:72:b8:87:5e:f2:46:
bb:a9:88:21:cf:68:2c:f2:a8:d2:a6:c9:c1:35:c9:
91:d1:7b:72:02:e3:a6:80:63:c3:14:e5:8e:28:49:
81:da:97:4e:aa:ff:d2:3a:d6:86:b1:49:3e:cc:7b:
08:90:24:83:1e:d1:a8:01:72:41:95:43:92:bf:b0:
0e:c9:20:e5:40:6b:e1:c3:e8:98:4f:c4:bc:70:4f:
ac:16:5a:26:42:ff:f0:da:64:44:f0:70:49:f8:84:
fd:ac:76:21:f2:3e:a8:76:e2:73:c2:d0:a9:f2:c3:
af:4e:69:6e:8c:71:4b:b8:2a:4d:e9:af:a1:82:19:
cd:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:24:1B:F0:AE:41:CF:9A:EB:51:B0:E7:B2:2C:79:A9:86:19:CA:09
X509v3 Authority Key Identifier:
keyid:0E:95:C3:AC:E3:66:DB:41:BC:DC:25:6C:5D:5B:3B:E4:90:A4:F7:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DpXDrONm20G83CVsXVs75JCk92E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/1cd907-44d2-46b1-8bec-f53e51c0974f/1/DpXDrONm20G83CVsXVs75JCk92E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/1cd907-44d2-46b1-8bec-f53e51c0974f/1/DpXDrONm20G83CVsXVs75JCk92E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:02:40:f0:ba:47:52:54:5e:aa:5c:e0:0a:b7:32:f4:8c:47:
b5:be:e0:6a:60:58:cd:0c:4b:84:ee:2e:7f:ca:e8:7e:a5:a7:
4b:06:9d:36:82:50:d3:e4:d6:bb:b3:e2:0e:83:3f:e1:71:84:
9c:7c:d6:de:0c:d8:72:48:16:c2:e7:c7:6f:d0:06:14:50:21:
32:da:df:f0:10:3b:44:f4:e2:c9:0d:1c:83:53:c7:0d:b5:98:
ca:6b:cc:47:d1:a2:73:42:7e:7b:5c:4d:49:66:a5:dd:5c:02:
25:63:b1:0f:36:87:36:f9:df:d8:13:6d:77:b8:1b:69:66:42:
fe:32:50:e9:a3:04:fa:c1:2b:12:a9:09:1c:6c:b8:03:c3:8e:
03:36:1e:68:35:65:40:8f:74:3f:39:06:74:eb:6f:36:65:05:
c5:73:a6:b5:c2:e9:17:33:95:ba:57:ed:e6:2c:6b:c5:6b:c6:
49:75:c0:0b:dd:61:ac:a7:fc:66:78:ec:3e:b3:40:60:d0:6a:
15:05:1b:1d:81:fa:ac:a9:7e:48:51:ea:04:80:ab:e2:27:ba:
dd:4b:5f:e5:de:18:19:9d:f6:9a:f4:78:04:e9:54:cb:ed:28:
20:1d:ce:ab:63:c1:ce:05:75:18:e6:03:d2:aa:54:d0:a3:7a:
76:6a:bb:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 09:20:15 2025 by rpki-client