Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/2cc283-9357-4c95-84d4-35cf770dc8b9/1/DF6HDTHKcBmVE3DLIh8Y8fCfpYo.mft
File: DF6HDTHKcBmVE3DLIh8Y8fCfpYo.mft (raw, json)
Hash identifier: 4irk6LuG1ciSfx7+ejUfGRbgEmSaQrs4i3AHXOks1Xg=
Subject key identifier: 1B:48:FB:2F:9E:36:62:2F:90:97:56:BD:21:4D:DC:03:DE:6D:0A:1F
Authority key identifier: 0C:5E:87:0D:31:CA:70:19:95:13:70:CB:22:1F:18:F1:F0:9F:A5:8A
Certificate issuer: /CN=0c5e870d31ca7019951370cb221f18f1f09fa58a
Certificate serial: 019745C23DABEBCCD39425D08259BAE5A92D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DF6HDTHKcBmVE3DLIh8Y8fCfpYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/2cc283-9357-4c95-84d4-35cf770dc8b9/1/DF6HDTHKcBmVE3DLIh8Y8fCfpYo.mft
Manifest number: 157B
Signing time: Fri 06 Jun 2025 15:00:47 +0000
Manifest this update: Fri 06 Jun 2025 15:00:47 +0000
Manifest next update: Sat 07 Jun 2025 15:00:47 +0000
Files and hashes: 1: DF6HDTHKcBmVE3DLIh8Y8fCfpYo.crl (hash: ACBpnBxujtazKVDHcbyOQ2jHYbQkXijK34nTmIns7UI=)
2: ej_BjAFbZm6hQCW3kEzJ6VoPdPc.roa (hash: U8mMSnb2Uo3FLs8ZgRPpDiQ27ni+P67f58AC/CHMeBI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/2cc283-9357-4c95-84d4-35cf770dc8b9/1/DF6HDTHKcBmVE3DLIh8Y8fCfpYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/2cc283-9357-4c95-84d4-35cf770dc8b9/1/DF6HDTHKcBmVE3DLIh8Y8fCfpYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/DF6HDTHKcBmVE3DLIh8Y8fCfpYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:45:c2:3d:ab:eb:cc:d3:94:25:d0:82:59:ba:e5:a9:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c5e870d31ca7019951370cb221f18f1f09fa58a
Validity
Not Before: Jun 6 15:00:47 2025 GMT
Not After : Jun 7 15:00:47 2025 GMT
Subject: CN=1b48fb2f9e36622f909756bd214ddc03de6d0a1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b4:96:56:6d:eb:1a:00:6d:0c:aa:8d:5f:19:
7e:14:a2:dd:c7:13:a2:a9:fe:4b:44:dd:65:d3:67:
d6:ba:c5:11:c2:d8:14:5c:8f:e4:44:93:28:5d:86:
c3:26:80:59:c7:d7:af:bf:25:6b:8a:da:9d:87:a7:
2d:a9:ab:d9:65:ad:2f:12:85:77:9f:bd:26:b1:d4:
63:96:48:79:85:d0:44:2c:33:4c:09:bf:4c:77:b7:
ab:16:e2:8d:76:c7:f7:a0:74:a7:e6:8e:5b:e1:ed:
cd:5f:1f:70:7a:89:ae:39:5a:21:f2:27:84:39:b0:
6f:25:81:9c:b6:4e:71:eb:82:76:e3:58:95:da:54:
b4:d9:0c:ec:3c:18:d7:85:96:58:a8:95:42:44:09:
95:4f:e7:e3:96:1b:9e:09:2c:85:6a:ac:14:b1:ab:
68:73:12:00:3e:fa:6d:7c:d2:a4:24:c5:8e:43:39:
9c:d9:22:af:c3:b6:b8:7a:74:85:71:f3:9d:e4:be:
e2:84:ec:ce:b4:b2:ee:95:06:c9:61:31:a3:cb:1d:
ca:22:aa:dd:d5:7d:e9:08:57:d1:63:4c:cc:81:d5:
a7:a6:40:de:9b:a7:32:a0:03:8e:6e:0c:17:96:28:
46:2b:6e:a9:76:6c:f4:c9:54:fe:a7:a9:a6:25:a2:
3b:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:48:FB:2F:9E:36:62:2F:90:97:56:BD:21:4D:DC:03:DE:6D:0A:1F
X509v3 Authority Key Identifier:
keyid:0C:5E:87:0D:31:CA:70:19:95:13:70:CB:22:1F:18:F1:F0:9F:A5:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DF6HDTHKcBmVE3DLIh8Y8fCfpYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/2cc283-9357-4c95-84d4-35cf770dc8b9/1/DF6HDTHKcBmVE3DLIh8Y8fCfpYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/2cc283-9357-4c95-84d4-35cf770dc8b9/1/DF6HDTHKcBmVE3DLIh8Y8fCfpYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:e7:2e:9f:4a:f2:c0:db:4e:58:64:7e:44:10:76:98:dc:d3:
37:d8:5a:dc:a5:36:d4:f5:b1:0e:ee:6c:a7:e8:78:70:ad:cb:
0d:40:4a:8e:7d:f2:6e:4f:14:cc:9d:2a:cb:cf:4c:2b:ad:93:
b4:38:e1:bc:0f:ab:29:ac:d0:36:45:41:42:65:d3:9a:7a:70:
0a:a4:94:eb:38:33:12:0b:03:ba:99:fd:de:83:a1:20:6b:06:
e4:49:ac:08:da:96:45:75:c8:5f:56:0f:b0:36:2f:15:33:6c:
94:43:1b:12:73:81:ac:05:47:93:55:0f:58:18:95:dc:a5:12:
6b:c6:27:23:21:11:3b:bb:17:8e:9b:4e:40:38:6f:b9:5f:fb:
5b:a4:38:d0:ea:3a:f0:ec:15:d2:2b:1c:fa:84:7d:fd:b8:f0:
35:8d:26:93:2f:b5:ac:49:07:64:df:7d:96:65:ef:db:0e:5a:
1e:c3:a1:95:d8:a3:2c:94:fa:04:da:d5:cf:41:09:0a:f8:cc:
59:e0:45:67:d1:07:bf:80:fe:33:78:9c:10:96:2a:e0:91:bd:
d2:48:27:23:ba:a3:b6:fb:0c:7a:1e:33:60:92:2e:33:c2:e0:
a4:c8:da:eb:80:17:fb:2c:ad:f4:8f:37:dc:26:96:03:b7:73:
ba:7f:fc:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:23:51 2025 by rpki-client