Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/3ea478-a503-47d3-88f5-49be8d90f59e/1/DdbvvlRnHXGlkFHimiRIzWr41Gc.mft
File: DdbvvlRnHXGlkFHimiRIzWr41Gc.mft (raw, json)
Hash identifier: BTYxED2Er2zzkYEUbaP4CR5/cnHT/joHh/Ay70g1RWk=
Subject key identifier: 2B:A0:FF:80:5D:76:6C:77:3F:41:1B:85:EC:14:08:A4:35:56:1F:70
Authority key identifier: 0D:D6:EF:BE:54:67:1D:71:A5:90:51:E2:9A:24:48:CD:6A:F8:D4:67
Certificate issuer: /CN=0dd6efbe54671d71a59051e29a2448cd6af8d467
Certificate serial: 019749D5E8FAAC101487F65277BBFB955660
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DdbvvlRnHXGlkFHimiRIzWr41Gc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/3ea478-a503-47d3-88f5-49be8d90f59e/1/DdbvvlRnHXGlkFHimiRIzWr41Gc.mft
Manifest number: 157F
Signing time: Sat 07 Jun 2025 10:00:44 +0000
Manifest this update: Sat 07 Jun 2025 10:00:44 +0000
Manifest next update: Sun 08 Jun 2025 10:00:44 +0000
Files and hashes: 1: DdbvvlRnHXGlkFHimiRIzWr41Gc.crl (hash: AzzUbKemAWf6DorAaErBUfbzY/hFJT2O4PoS3IERFsE=)
2: OjPZ4w3uav1AVJBNGLzE1iWEjns.roa (hash: RZ3Fh/xDlYW1Zzf/BAcP7d2zU9c7pD1bl+u8+XwewFo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/3ea478-a503-47d3-88f5-49be8d90f59e/1/DdbvvlRnHXGlkFHimiRIzWr41Gc.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/3ea478-a503-47d3-88f5-49be8d90f59e/1/DdbvvlRnHXGlkFHimiRIzWr41Gc.mft
rsync://rpki.ripe.net/repository/DEFAULT/DdbvvlRnHXGlkFHimiRIzWr41Gc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:d5:e8:fa:ac:10:14:87:f6:52:77:bb:fb:95:56:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dd6efbe54671d71a59051e29a2448cd6af8d467
Validity
Not Before: Jun 7 10:00:44 2025 GMT
Not After : Jun 8 10:00:44 2025 GMT
Subject: CN=2ba0ff805d766c773f411b85ec1408a435561f70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:f2:cb:43:18:02:56:14:60:30:4b:d6:e8:ed:
fc:16:56:2b:77:f1:5f:bd:63:bc:73:f1:99:4e:5f:
16:a9:84:56:db:6e:c5:de:31:b6:93:94:b5:23:35:
b7:40:4e:5a:74:51:4e:fd:40:d5:e2:de:33:ca:c3:
4a:ed:59:1e:bb:c6:83:61:10:33:d1:73:93:de:c3:
6b:7d:dd:56:c0:54:66:07:bd:78:ef:05:01:3f:06:
6e:b4:72:2a:03:a5:48:9e:b6:8f:d2:88:05:f7:ea:
d9:70:ef:8f:94:34:df:59:af:72:77:6f:c4:a7:f1:
54:9c:b5:3a:e0:ca:b0:01:d8:d8:76:c9:fd:1b:c4:
82:6b:7f:92:48:3c:c1:12:da:c8:87:6c:a0:bb:8f:
24:d6:ed:e9:6c:45:98:93:d3:be:06:24:ce:72:f2:
db:ca:62:2c:88:92:50:2a:01:50:2b:d0:cc:33:37:
05:a4:40:b2:23:d4:23:22:c8:d1:3e:dc:06:03:75:
38:2a:ad:cc:d1:e9:f5:28:aa:9c:a0:b6:89:8f:77:
25:c3:8d:c1:19:16:bd:f3:e1:9d:8b:42:73:ed:9a:
cb:5f:0b:06:86:2e:aa:78:bf:b5:01:a4:7e:d6:9e:
20:ff:3f:b0:95:33:3d:67:63:72:c0:28:85:9e:ab:
d9:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:A0:FF:80:5D:76:6C:77:3F:41:1B:85:EC:14:08:A4:35:56:1F:70
X509v3 Authority Key Identifier:
keyid:0D:D6:EF:BE:54:67:1D:71:A5:90:51:E2:9A:24:48:CD:6A:F8:D4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DdbvvlRnHXGlkFHimiRIzWr41Gc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/3ea478-a503-47d3-88f5-49be8d90f59e/1/DdbvvlRnHXGlkFHimiRIzWr41Gc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/3ea478-a503-47d3-88f5-49be8d90f59e/1/DdbvvlRnHXGlkFHimiRIzWr41Gc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:48:0f:0e:09:6a:8b:f8:b7:0d:7b:36:8b:3f:b1:d0:24:1c:
db:94:63:8e:97:97:2f:2c:3c:00:6f:1c:74:49:a3:4d:e1:80:
8c:5c:b2:97:3e:b2:33:3a:04:1a:c0:39:fd:e8:ac:3a:e9:e1:
1e:12:5b:c9:b1:90:1b:0a:15:68:7a:fe:70:2c:3e:e0:4c:56:
47:6f:6d:d2:f9:2e:b7:08:ed:5e:a5:fb:3c:9d:5f:15:ce:e4:
a8:f3:b3:d7:71:b7:8d:91:11:a3:ad:3c:c6:66:24:16:f1:cb:
0b:90:c9:e6:9f:7f:ae:13:9b:b2:92:cc:89:f9:0a:b2:21:58:
93:07:3c:e4:8b:73:33:d9:ae:35:9f:5b:3f:e9:6b:b7:e9:80:
b9:fa:85:d1:49:19:29:35:9f:a3:92:99:bd:5c:27:ed:c7:e9:
2a:25:00:c6:47:18:74:44:fa:d4:05:94:88:a0:b5:f8:9a:7d:
9c:f9:9a:7c:fe:d7:fa:13:7e:1d:e7:b3:7b:92:2e:f1:0d:b4:
14:1c:ca:a6:6a:b8:67:30:d3:16:a9:06:96:21:9d:9b:09:1a:
b1:b6:28:76:77:7b:57:1a:dd:af:63:28:ab:3b:7c:52:eb:b7:
80:72:c3:fb:63:a7:cf:22:6d:e8:f7:10:5d:d3:32:79:1b:49:
5c:70:76:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:33:42 2025 by rpki-client