Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/dd6ea7-bdb8-47c3-964f-2af9178382fb/1/dxvOKaNsveiYrABwfblRQ_hqeSI.mft
File: dxvOKaNsveiYrABwfblRQ_hqeSI.mft (raw, json)
Hash identifier: tcaI/fLmk2PdV8gCnDtoflvrNZfb/cbOOKjM8YzkJXA=
Subject key identifier: 04:5C:79:8A:F5:DB:71:5C:AE:75:D4:05:C3:88:04:37:28:AB:FC:57
Authority key identifier: 77:1B:CE:29:A3:6C:BD:E8:98:AC:00:70:7D:B9:51:43:F8:6A:79:22
Certificate issuer: /CN=771bce29a36cbde898ac00707db95143f86a7922
Certificate serial: 01974F3395F1A7F90124D8E89B1B74D43D9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dxvOKaNsveiYrABwfblRQ_hqeSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/dd6ea7-bdb8-47c3-964f-2af9178382fb/1/dxvOKaNsveiYrABwfblRQ_hqeSI.mft
Manifest number: 0D5E
Signing time: Sun 08 Jun 2025 11:01:10 +0000
Manifest this update: Sun 08 Jun 2025 11:01:10 +0000
Manifest next update: Mon 09 Jun 2025 11:01:10 +0000
Files and hashes: 1: Fu0lK4Mcztssv3LosrHSeGC9v5I.roa (hash: u/9ObfX95800lVIP5yQNITdaQtRd2zqHQxCUamlQIjU=)
2: dxvOKaNsveiYrABwfblRQ_hqeSI.crl (hash: FeysdM0rT3TiGUVBoQxpQff79JuRnNrCK7BvlZ/RLxw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/dd6ea7-bdb8-47c3-964f-2af9178382fb/1/dxvOKaNsveiYrABwfblRQ_hqeSI.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/dd6ea7-bdb8-47c3-964f-2af9178382fb/1/dxvOKaNsveiYrABwfblRQ_hqeSI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dxvOKaNsveiYrABwfblRQ_hqeSI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4f:33:95:f1:a7:f9:01:24:d8:e8:9b:1b:74:d4:3d:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=771bce29a36cbde898ac00707db95143f86a7922
Validity
Not Before: Jun 8 11:01:10 2025 GMT
Not After : Jun 9 11:01:10 2025 GMT
Subject: CN=045c798af5db715cae75d405c388043728abfc57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:25:73:be:03:bd:f1:5c:d9:c0:03:c4:b5:1d:
69:22:b3:c4:f8:ef:48:aa:7b:0d:00:f9:ed:43:69:
b6:5b:f8:49:d2:cf:a2:57:67:33:07:ad:bd:c6:35:
61:1d:6b:9b:3f:41:e5:8c:28:c5:7e:f5:28:c7:90:
6c:b3:3d:bc:d9:17:6b:59:b5:e7:7f:9e:64:e4:53:
8b:9b:d9:ae:65:2e:fc:fe:69:ac:ff:98:3d:56:1d:
b1:15:a5:7d:8a:e6:8f:c0:15:9d:97:7a:03:65:eb:
11:86:1a:d9:8a:86:20:1d:7e:2e:d0:6b:78:12:3e:
74:a6:b5:8b:b7:8d:8b:26:37:c5:c3:68:06:ce:09:
02:fa:bf:62:30:ea:9a:cc:b6:91:b8:8d:2e:a1:c8:
2a:a4:cb:3d:00:02:ad:d9:2f:27:e4:d6:c9:66:3b:
58:60:23:3a:6b:4f:b2:b5:b3:2c:c7:71:90:07:62:
fe:63:be:f7:f3:28:11:10:83:a3:e0:1f:c2:73:b3:
61:3b:01:18:5d:7d:11:81:69:9c:2b:59:d2:81:cb:
ee:b2:9f:0c:2c:41:7c:d5:09:2f:89:07:b8:22:60:
03:98:47:d6:60:5d:c4:24:84:5b:c8:46:31:ac:c7:
94:c5:33:cf:ae:a5:d1:81:72:78:61:05:42:37:4f:
41:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:5C:79:8A:F5:DB:71:5C:AE:75:D4:05:C3:88:04:37:28:AB:FC:57
X509v3 Authority Key Identifier:
keyid:77:1B:CE:29:A3:6C:BD:E8:98:AC:00:70:7D:B9:51:43:F8:6A:79:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dxvOKaNsveiYrABwfblRQ_hqeSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/dd6ea7-bdb8-47c3-964f-2af9178382fb/1/dxvOKaNsveiYrABwfblRQ_hqeSI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/dd6ea7-bdb8-47c3-964f-2af9178382fb/1/dxvOKaNsveiYrABwfblRQ_hqeSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:98:49:c4:95:ca:f4:92:39:9d:06:5b:00:e0:70:8d:b7:4c:
3b:69:2e:0c:0c:78:a4:83:77:66:8d:1b:a8:3d:c6:ea:2e:bd:
1b:56:06:31:df:18:28:ea:cc:6c:84:74:68:a3:77:52:be:8f:
22:24:4b:37:ad:ce:8c:92:0d:97:8e:8d:d7:5c:a1:9e:a3:07:
02:2d:d7:ac:d9:9f:3f:1a:cd:37:60:7b:f8:64:04:e4:6a:3d:
b6:3e:76:d1:dc:12:21:8d:bf:9a:d8:c3:af:0a:19:96:3b:1d:
8a:18:f0:3e:83:b7:51:85:53:92:de:bb:24:e4:b1:41:5e:85:
04:8f:bb:83:1d:a6:85:2e:2f:cd:69:b3:76:c8:68:9f:fe:33:
3b:b3:76:61:9a:66:bd:ed:73:dc:b6:8f:4a:60:dd:39:cc:07:
c7:4a:fe:f5:79:ad:0e:7f:17:ff:71:f4:a2:ab:ca:9b:bc:57:
25:4b:7d:7c:d8:66:77:4a:87:2f:7e:b9:a7:33:b7:69:a3:32:
44:e6:1c:41:81:7b:60:03:6d:2a:89:d3:cd:0a:3d:a0:a2:43:
4d:c1:2e:92:c0:86:e2:25:05:f4:6d:f9:7f:38:d1:d8:1e:ea:
c4:87:ed:35:e2:5e:0e:c0:5e:66:bd:e8:28:3f:02:3b:5b:9d:
13:4b:32:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 13:43:45 2025 by rpki-client