Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/dd8bc5-86ef-4135-bf1f-a4c8d9895a43/1/DvR9dT0lKJ_Zh5SXSqBTYBBWe9k.mft
File: DvR9dT0lKJ_Zh5SXSqBTYBBWe9k.mft (raw, json)
Hash identifier: 98ZMjBLTIk7OoDcCtePwqq4yDjmZWR53TVfEAttVokA=
Subject key identifier: 20:A8:3E:99:84:E4:4B:6C:32:92:24:93:4C:D3:F7:99:BE:79:23:22
Authority key identifier: 0E:F4:7D:75:3D:25:28:9F:D9:87:94:97:4A:A0:53:60:10:56:7B:D9
Certificate issuer: /CN=0ef47d753d25289fd98794974aa0536010567bd9
Certificate serial: 0197395023A4DD8AB2EC10419B3FE20619E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DvR9dT0lKJ_Zh5SXSqBTYBBWe9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/dd8bc5-86ef-4135-bf1f-a4c8d9895a43/1/DvR9dT0lKJ_Zh5SXSqBTYBBWe9k.mft
Manifest number: 1522
Signing time: Wed 04 Jun 2025 05:00:42 +0000
Manifest this update: Wed 04 Jun 2025 05:00:42 +0000
Manifest next update: Thu 05 Jun 2025 05:00:42 +0000
Files and hashes: 1: DvR9dT0lKJ_Zh5SXSqBTYBBWe9k.crl (hash: Dp73fhzD0Xlo/SX6ujre5/UTMdsmvdbOGB/gpiWqFzE=)
2: Ep2Tt2fI9ZnXq9dEoGDimlfX8vk.roa (hash: Yxb+HnJ6SVbEvdXrvuy0S0wlJigO7ITirWOkyZwJCfc=)
3: NsbQLlxjRX4R8d6qC52Mg0zJJ8I.roa (hash: 8GOI4hJ7xP6rg0LIYF04KTpO9lNuSPc9P1fdRwgO288=)
4: _Sk86eGU6RbYb2vHgW0Ui6wMfs0.roa (hash: Avs1rLJgkMJRxv1FINcH2aH5zw28kBN1QbSOsvT0vZA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/dd8bc5-86ef-4135-bf1f-a4c8d9895a43/1/DvR9dT0lKJ_Zh5SXSqBTYBBWe9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/dd8bc5-86ef-4135-bf1f-a4c8d9895a43/1/DvR9dT0lKJ_Zh5SXSqBTYBBWe9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/DvR9dT0lKJ_Zh5SXSqBTYBBWe9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Jun 2025 05:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:39:50:23:a4:dd:8a:b2:ec:10:41:9b:3f:e2:06:19:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ef47d753d25289fd98794974aa0536010567bd9
Validity
Not Before: Jun 4 05:00:42 2025 GMT
Not After : Jun 5 05:00:42 2025 GMT
Subject: CN=20a83e9984e44b6c329224934cd3f799be792322
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:0d:a7:cf:66:14:ff:e3:bd:79:07:a2:cd:b5:
a5:b7:6a:e2:7b:3f:5b:af:6a:a9:f0:8f:db:fa:b5:
df:8d:dd:6c:02:b4:e1:eb:92:2e:14:79:f9:6c:42:
99:c7:5e:00:3b:29:1e:3b:93:f9:8b:5f:82:34:4a:
dc:3b:47:43:24:37:59:57:f4:87:90:cf:48:ef:b9:
43:92:44:1c:83:ec:3a:b7:92:e6:d1:b8:21:60:0a:
db:f7:72:81:98:d3:f4:70:4b:c8:ef:47:ce:14:fd:
46:4d:1d:df:7f:c8:e6:71:c1:48:e1:26:ec:5f:80:
0d:09:65:72:68:28:ac:d3:56:71:bb:b6:76:ff:a4:
fb:e1:62:33:d0:2c:75:84:04:fa:b9:f1:8a:2b:f6:
9c:8c:b9:de:1e:1c:79:e8:39:7a:53:46:bb:15:7f:
7f:b9:31:b2:57:ef:40:6a:5b:34:61:45:48:8c:ee:
a9:44:ae:f5:36:eb:ba:65:cc:ae:31:aa:5e:27:7b:
87:50:2c:9b:fc:f4:aa:c2:e0:ec:16:6a:3f:ee:fc:
93:eb:26:f2:2c:ac:76:bc:0f:60:0f:6b:cc:ba:87:
25:35:ed:8b:57:54:92:b5:04:a1:26:cf:e1:4c:85:
eb:c7:61:43:0f:11:42:74:df:81:a8:9c:27:1e:f1:
db:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:A8:3E:99:84:E4:4B:6C:32:92:24:93:4C:D3:F7:99:BE:79:23:22
X509v3 Authority Key Identifier:
keyid:0E:F4:7D:75:3D:25:28:9F:D9:87:94:97:4A:A0:53:60:10:56:7B:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DvR9dT0lKJ_Zh5SXSqBTYBBWe9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/dd8bc5-86ef-4135-bf1f-a4c8d9895a43/1/DvR9dT0lKJ_Zh5SXSqBTYBBWe9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/dd8bc5-86ef-4135-bf1f-a4c8d9895a43/1/DvR9dT0lKJ_Zh5SXSqBTYBBWe9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:bb:5e:05:ff:86:3d:19:b3:68:44:51:d1:65:92:7e:cf:27:
9e:c4:a7:f5:22:99:b5:a1:5d:16:c6:59:f4:e3:df:3a:cf:4c:
fa:cc:0e:ab:12:c4:72:85:69:93:03:c5:ca:ae:8f:fe:45:e0:
99:80:8a:f5:d3:f8:87:03:6c:f7:e1:09:81:4b:f7:71:8e:50:
00:b8:bc:94:53:f0:f7:aa:b6:91:4d:15:8a:2a:2d:59:2f:09:
fa:77:a0:84:81:e6:4b:e5:fd:6f:88:c3:d9:80:ff:83:42:4e:
f8:2b:c3:a5:86:33:d5:36:53:4e:29:e5:c7:c8:c9:35:e5:b8:
c9:72:4c:07:d5:19:5d:c5:b8:2f:ae:00:17:9b:f1:70:b6:49:
f0:50:3f:49:7d:1d:e5:24:24:9b:62:29:42:86:3e:22:1c:c0:
8c:59:b0:61:64:43:d6:b5:16:80:78:fa:29:a9:64:5d:70:90:
ab:f4:56:55:a4:de:26:c2:3e:28:08:3b:7d:97:38:9a:8d:16:
df:f2:c0:5e:7e:e3:5a:72:b9:74:70:91:8d:af:b0:ac:32:c7:
a3:d7:20:2d:60:df:cd:6a:91:03:ac:e4:39:34:25:7c:34:ae:
9c:c1:ff:e5:10:2b:d0:59:af:ea:77:34:00:f6:0b:92:0f:3b:
2a:bf:91:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 10:39:10 2025 by rpki-client