Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/93d460-368c-46d7-8e7a-cdbd3b6ce777/1/Dw-fBE4rkph410fF_7uArRDj1r0.mft
File: Dw-fBE4rkph410fF_7uArRDj1r0.mft (raw, json)
Hash identifier: l1ueNubI+G+QkSLXUb7sXZnqYBuT1619UNjieusBCxs=
Subject key identifier: FC:E7:71:A5:CC:12:F8:85:D8:C2:3B:CB:0D:3C:80:07:67:50:8D:6B
Authority key identifier: 0F:0F:9F:04:4E:2B:92:98:78:D7:47:C5:FF:BB:80:AD:10:E3:D6:BD
Certificate issuer: /CN=0f0f9f044e2b929878d747c5ffbb80ad10e3d6bd
Certificate serial: 0197556BECA75121A2C2E6047B9DC6D85640
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dw-fBE4rkph410fF_7uArRDj1r0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/93d460-368c-46d7-8e7a-cdbd3b6ce777/1/Dw-fBE4rkph410fF_7uArRDj1r0.mft
Manifest number: 0A1A
Signing time: Mon 09 Jun 2025 16:00:25 +0000
Manifest this update: Mon 09 Jun 2025 16:00:25 +0000
Manifest next update: Tue 10 Jun 2025 16:00:25 +0000
Files and hashes: 1: Dw-fBE4rkph410fF_7uArRDj1r0.crl (hash: TJHLV8zzkt+z+AF4DvWaWqUlLBjl/8naW++9i126ZiQ=)
2: tnIMWehV7-s3YFdByca6v2OZEG0.roa (hash: NWfOiZrn7Md8Y/fglpHdXuMUMsLmCrcIFNvYQcevZ/0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/93d460-368c-46d7-8e7a-cdbd3b6ce777/1/Dw-fBE4rkph410fF_7uArRDj1r0.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/93d460-368c-46d7-8e7a-cdbd3b6ce777/1/Dw-fBE4rkph410fF_7uArRDj1r0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dw-fBE4rkph410fF_7uArRDj1r0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:55:6b:ec:a7:51:21:a2:c2:e6:04:7b:9d:c6:d8:56:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f0f9f044e2b929878d747c5ffbb80ad10e3d6bd
Validity
Not Before: Jun 9 16:00:25 2025 GMT
Not After : Jun 10 16:00:25 2025 GMT
Subject: CN=fce771a5cc12f885d8c23bcb0d3c800767508d6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:72:12:08:62:20:03:5c:bf:35:bf:d3:96:3b:
39:66:da:50:9c:17:78:a5:ee:83:64:5b:3c:ae:1d:
ac:2d:95:40:19:87:19:bb:ba:f2:a9:f9:20:d1:50:
62:87:68:a3:e5:ae:79:d1:dd:14:b0:2f:7c:4e:25:
1e:9b:86:8a:d3:6f:08:d5:87:b1:b4:44:cb:b8:d8:
9d:a4:16:f7:69:7c:5e:47:1e:9d:be:aa:6a:31:38:
b1:8e:a7:be:bd:d6:a9:3a:93:ff:1d:26:ce:ca:43:
36:72:81:d1:31:96:89:f6:c4:41:3b:52:de:44:2a:
ee:db:2c:1e:a5:28:f4:3d:f7:26:3a:e5:7c:cb:62:
95:35:07:30:42:11:cf:d4:c1:0e:ec:85:f3:32:dc:
e2:69:73:29:d0:1a:3c:84:47:4a:b2:64:1c:c9:49:
3f:00:d6:40:dd:76:90:b7:10:92:5b:97:74:ee:6d:
e1:51:47:31:d7:d5:d3:19:b2:e4:14:fa:7c:32:5e:
2b:d5:8a:ce:13:75:c1:cd:39:bd:3b:e1:85:9b:c7:
d2:56:7a:14:d7:85:59:30:ae:62:b8:3a:79:8f:42:
21:c9:59:62:8e:b6:a1:5b:aa:e7:98:0c:04:12:2f:
81:df:19:0b:09:de:8d:fc:49:e3:db:08:49:b7:6d:
63:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:E7:71:A5:CC:12:F8:85:D8:C2:3B:CB:0D:3C:80:07:67:50:8D:6B
X509v3 Authority Key Identifier:
keyid:0F:0F:9F:04:4E:2B:92:98:78:D7:47:C5:FF:BB:80:AD:10:E3:D6:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dw-fBE4rkph410fF_7uArRDj1r0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/93d460-368c-46d7-8e7a-cdbd3b6ce777/1/Dw-fBE4rkph410fF_7uArRDj1r0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/93d460-368c-46d7-8e7a-cdbd3b6ce777/1/Dw-fBE4rkph410fF_7uArRDj1r0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:b0:aa:3d:44:02:f3:72:03:2b:a4:aa:d5:05:04:be:06:78:
40:28:c1:1c:ef:89:a3:5b:a0:8c:ab:07:bd:3a:cb:15:08:3c:
15:58:2c:90:bb:a1:78:c7:e2:68:0d:0e:e0:7d:28:2f:55:b6:
e9:78:5d:d7:92:b5:26:d5:33:fb:dd:09:a2:2f:3f:a1:7a:41:
eb:85:41:8a:b3:51:84:ce:c4:e6:7f:24:24:d6:4e:6f:e6:6a:
96:40:89:db:19:6d:c1:e7:98:e8:ef:de:6e:69:a2:09:ff:75:
a4:b1:9d:56:aa:18:0b:1f:98:c3:14:54:5c:6d:a8:00:24:c0:
b1:14:0d:11:da:2f:2e:d1:0c:38:a5:d7:2b:93:23:f0:6c:79:
80:9a:ca:43:7a:0a:93:f8:f1:2c:6a:1e:a6:bd:12:b1:6d:f6:
60:73:93:40:d9:98:fa:4f:53:13:c0:83:85:7c:78:a4:80:26:
2e:88:89:23:6e:c7:9c:0d:8c:d1:57:d3:f8:6d:4d:56:d7:a3:
73:8e:00:c5:a4:68:40:ec:ca:20:eb:b1:89:dd:f2:57:b3:e3:
f8:53:70:5f:5c:c1:01:fd:99:8e:c4:49:92:e1:36:bf:c6:0f:
c6:3e:94:99:c7:b8:46:85:ba:8f:a8:55:f8:d0:9d:0a:1e:7a:
a1:4b:2d:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 23:08:59 2025 by rpki-client