Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/9ec134-f04f-4423-8be5-7f5e1759f84e/1/dxBykg2MmitA6zoEXx8qbjNKRJY.mft
File: dxBykg2MmitA6zoEXx8qbjNKRJY.mft (raw, json)
Hash identifier: JFfh63Q+paxtW8xyclL61xHIUuv1TYsHoSItgsnLSZ8=
Subject key identifier: 32:94:0D:22:AC:C2:D1:B9:91:01:5D:B5:F7:49:DC:16:2D:B9:8A:F9
Authority key identifier: 77:10:72:92:0D:8C:9A:2B:40:EB:3A:04:5F:1F:2A:6E:33:4A:44:96
Certificate issuer: /CN=771072920d8c9a2b40eb3a045f1f2a6e334a4496
Certificate serial: 019742C1C44C95636B37A067B3F7B48C65D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dxBykg2MmitA6zoEXx8qbjNKRJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/9ec134-f04f-4423-8be5-7f5e1759f84e/1/dxBykg2MmitA6zoEXx8qbjNKRJY.mft
Manifest number: 157B
Signing time: Fri 06 Jun 2025 01:01:24 +0000
Manifest this update: Fri 06 Jun 2025 01:01:24 +0000
Manifest next update: Sat 07 Jun 2025 01:01:24 +0000
Files and hashes: 1: YkTwnLLBjio1cr_ngfAfzZs1Hh0.roa (hash: Y9RRPtZapEofyZ5MjGOGJpjlqTcZ/UM1TnoKmtwIB40=)
2: dxBykg2MmitA6zoEXx8qbjNKRJY.crl (hash: X09Xp/bS6tmUrYEduw1SBYQuUISPNZceGJS3N4fNRqo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/9ec134-f04f-4423-8be5-7f5e1759f84e/1/dxBykg2MmitA6zoEXx8qbjNKRJY.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/9ec134-f04f-4423-8be5-7f5e1759f84e/1/dxBykg2MmitA6zoEXx8qbjNKRJY.mft
rsync://rpki.ripe.net/repository/DEFAULT/dxBykg2MmitA6zoEXx8qbjNKRJY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 01:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:42:c1:c4:4c:95:63:6b:37:a0:67:b3:f7:b4:8c:65:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=771072920d8c9a2b40eb3a045f1f2a6e334a4496
Validity
Not Before: Jun 6 01:01:24 2025 GMT
Not After : Jun 7 01:01:24 2025 GMT
Subject: CN=32940d22acc2d1b991015db5f749dc162db98af9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:49:47:24:58:74:47:bd:3f:67:ef:59:ec:94:
4d:8c:c5:36:17:e6:0d:e7:f8:4f:23:61:f5:a4:fb:
8d:39:4a:c4:7f:fb:21:9b:65:a6:38:49:25:05:fb:
65:41:27:3c:9a:bc:0b:62:8b:97:14:36:71:13:b8:
45:ec:86:1e:47:22:da:e2:3d:c8:bf:bf:db:b0:87:
c1:37:e7:65:01:92:24:e2:82:3a:ae:3e:64:6c:00:
05:c3:30:af:1c:f1:b5:89:89:e2:e9:9d:1e:ba:05:
da:c4:1e:73:01:6a:71:82:19:68:4f:f3:cc:ca:e2:
48:96:33:9e:a8:09:db:12:93:1e:5f:6a:57:35:81:
bd:af:40:9e:20:27:df:49:94:d1:b4:03:74:fa:a6:
55:37:02:ac:a1:7f:b8:26:e0:a0:16:0a:cc:7f:fc:
05:af:9c:ba:ca:49:7d:27:40:1d:e2:cb:7e:d4:b2:
ef:36:bd:36:68:68:de:db:3c:af:d3:23:c1:8b:46:
32:49:80:49:b6:fd:b4:d2:47:3b:f9:7e:f4:85:78:
d1:8a:d4:75:27:b4:26:35:8a:d9:c5:6f:52:63:79:
90:d0:d8:2d:b6:ab:dd:e4:c1:bd:e8:e0:e6:99:80:
c5:c8:3a:fd:c1:ea:ea:2d:de:1a:89:9b:34:0b:d0:
a6:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:94:0D:22:AC:C2:D1:B9:91:01:5D:B5:F7:49:DC:16:2D:B9:8A:F9
X509v3 Authority Key Identifier:
keyid:77:10:72:92:0D:8C:9A:2B:40:EB:3A:04:5F:1F:2A:6E:33:4A:44:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dxBykg2MmitA6zoEXx8qbjNKRJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/9ec134-f04f-4423-8be5-7f5e1759f84e/1/dxBykg2MmitA6zoEXx8qbjNKRJY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/9ec134-f04f-4423-8be5-7f5e1759f84e/1/dxBykg2MmitA6zoEXx8qbjNKRJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:08:1e:f6:c9:e7:95:5d:dd:c5:54:8e:ad:87:1f:02:48:c8:
91:3a:a6:b5:16:1e:ea:df:9c:8f:0c:59:e6:0a:8c:d9:ee:18:
59:23:5a:48:8f:0a:03:50:73:f2:7e:52:78:b3:6c:be:1e:2c:
e8:e4:8f:e7:3d:7e:6f:8e:97:b8:54:9b:d5:e2:c7:8d:05:a9:
bf:8a:ba:cd:36:31:9e:55:27:71:eb:1d:6a:0a:b1:00:f0:8a:
4c:e9:a4:21:52:52:92:17:c5:6d:5a:c3:f3:99:67:5d:ec:36:
c8:91:36:44:13:20:19:38:b4:98:9c:64:26:75:5d:ba:b8:4d:
3a:74:de:b5:2d:0f:e8:6f:a4:99:83:52:0c:70:be:97:43:70:
fc:b3:74:37:9b:1a:23:bf:08:a0:43:1f:b6:68:ee:98:01:fb:
71:9a:e2:02:65:14:69:ef:13:31:4f:e9:f3:6c:b6:90:48:c0:
87:9c:eb:07:96:41:76:1d:c9:62:9b:b5:cc:97:07:35:52:a9:
14:6b:83:ee:ca:d9:39:58:1b:d4:e9:94:76:4b:ba:1b:81:09:
11:5e:51:7f:e5:83:75:1c:17:d5:fe:c9:39:21:3e:43:1c:97:
6a:75:9a:c1:91:95:f8:1b:b1:e4:99:2d:ad:f1:ac:96:f5:54:
47:eb:5c:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 11:45:58 2025 by rpki-client