Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/f41fbf-4e8d-4aaa-9db1-626bbfee0b31/1/dHquXSSwyXpCAx81EKFOL5W72Dg.mft
File: dHquXSSwyXpCAx81EKFOL5W72Dg.mft (raw, json)
Hash identifier: BxKXwYGPrAEdCyQmzcP6yhmzkQTP66rwviM85SDK/5Q=
Subject key identifier: F2:12:82:67:92:66:A1:8E:4D:B5:91:15:FD:C7:2A:6C:48:B2:06:E2
Authority key identifier: 74:7A:AE:5D:24:B0:C9:7A:42:03:1F:35:10:A1:4E:2F:95:BB:D8:38
Certificate issuer: /CN=747aae5d24b0c97a42031f3510a14e2f95bbd838
Certificate serial: 0197518F2BA3CC5D5CE23E45B6C5D8FF8AF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dHquXSSwyXpCAx81EKFOL5W72Dg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/f41fbf-4e8d-4aaa-9db1-626bbfee0b31/1/dHquXSSwyXpCAx81EKFOL5W72Dg.mft
Manifest number: 0716
Signing time: Sun 08 Jun 2025 22:00:26 +0000
Manifest this update: Sun 08 Jun 2025 22:00:26 +0000
Manifest next update: Mon 09 Jun 2025 22:00:26 +0000
Files and hashes: 1: dHquXSSwyXpCAx81EKFOL5W72Dg.crl (hash: cVEraSjwV1WZO9iiXyVjMlyqZSc2OhzDXMBZFCiRezI=)
2: zQKrXmW9bWHdUqBWvY33a8SbMCE.roa (hash: HT0Uv7b54sK7sP7mnHeROBQjHCb1P8YG6jJ1hRPnfL8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/f41fbf-4e8d-4aaa-9db1-626bbfee0b31/1/dHquXSSwyXpCAx81EKFOL5W72Dg.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/f41fbf-4e8d-4aaa-9db1-626bbfee0b31/1/dHquXSSwyXpCAx81EKFOL5W72Dg.mft
rsync://rpki.ripe.net/repository/DEFAULT/dHquXSSwyXpCAx81EKFOL5W72Dg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 17:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:51:8f:2b:a3:cc:5d:5c:e2:3e:45:b6:c5:d8:ff:8a:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=747aae5d24b0c97a42031f3510a14e2f95bbd838
Validity
Not Before: Jun 8 22:00:26 2025 GMT
Not After : Jun 9 22:00:26 2025 GMT
Subject: CN=f21282679266a18e4db59115fdc72a6c48b206e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:48:24:9a:fb:cd:11:46:16:80:d2:55:d8:70:
c1:f6:53:db:8e:71:ce:d1:b5:24:5d:91:c2:32:13:
5a:71:3f:03:3d:51:78:f8:6d:f4:e1:e3:9c:89:c1:
0f:b6:46:65:11:ef:c3:f7:86:39:49:16:eb:9c:2f:
37:b5:1a:d5:60:ac:3a:e0:e6:40:af:4e:d1:78:72:
4c:16:9d:32:35:2a:9f:70:b0:a9:12:82:d6:34:4c:
10:ec:21:e5:16:a9:93:c3:c5:8f:0f:2a:c9:eb:2f:
ad:ef:70:6d:58:84:02:c3:fc:47:23:62:2d:31:92:
b9:a3:af:5d:15:e0:c3:ae:cd:e5:e0:e3:39:18:66:
e3:0c:a3:3f:63:20:0d:99:7d:65:99:5b:21:33:5e:
96:7c:f0:a0:ad:59:79:84:4c:40:7e:c7:4d:d8:ce:
4e:cb:bf:5d:a2:92:09:5a:2f:e4:b5:a4:ef:4b:86:
44:25:c8:f7:26:da:e5:dd:ab:63:46:8a:9d:b4:82:
4b:c6:2f:ff:84:fd:82:f1:6b:c7:72:be:b0:cf:ac:
17:1a:75:79:f6:93:96:1b:25:db:ca:4f:7a:ef:06:
6a:bc:0c:96:55:e1:3f:53:be:a1:79:58:f1:8c:b1:
b8:f6:dd:0a:e8:38:3c:8b:ca:7b:e4:36:ad:af:59:
7f:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:12:82:67:92:66:A1:8E:4D:B5:91:15:FD:C7:2A:6C:48:B2:06:E2
X509v3 Authority Key Identifier:
keyid:74:7A:AE:5D:24:B0:C9:7A:42:03:1F:35:10:A1:4E:2F:95:BB:D8:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dHquXSSwyXpCAx81EKFOL5W72Dg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/f41fbf-4e8d-4aaa-9db1-626bbfee0b31/1/dHquXSSwyXpCAx81EKFOL5W72Dg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/f41fbf-4e8d-4aaa-9db1-626bbfee0b31/1/dHquXSSwyXpCAx81EKFOL5W72Dg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:a3:69:61:18:15:4a:53:03:7b:77:12:44:d5:cd:a2:73:f6:
fa:8a:dc:ae:ec:24:9a:cb:a3:e0:dc:33:ea:73:e0:8a:67:90:
b5:42:a0:97:cf:ab:f9:9c:ca:3d:bf:5d:93:c2:f4:78:b4:28:
8b:c3:ab:61:2a:c6:b1:12:c2:64:8d:35:f7:81:0f:d6:e7:27:
16:99:23:8d:80:9e:51:6e:45:8b:c0:ee:a5:d5:6a:dc:1c:04:
d2:19:0b:fe:60:56:00:9a:2f:c2:a5:da:a6:f7:46:fa:98:c0:
a0:a1:33:b4:98:06:1b:34:63:a2:75:87:be:46:c9:7d:ba:3d:
06:a3:58:dc:94:31:10:32:83:b4:1f:d9:e6:5b:8c:d2:9f:e6:
a4:a7:d9:3c:37:7c:f9:00:d2:30:1d:7d:96:42:2e:73:fe:92:
68:43:2a:ea:a7:5d:53:38:46:60:17:71:bf:b1:d1:93:4e:08:
a9:37:97:21:d0:72:62:ab:d8:da:ef:75:43:6f:05:17:5b:15:
3c:0c:24:41:97:fb:b5:74:b0:2c:5f:cb:30:a1:75:99:d1:af:
b1:4d:3f:94:15:b5:3e:89:d9:8f:c6:ef:87:28:e1:1c:c9:0f:
98:4c:ea:e6:68:1d:d3:2e:bc:42:bd:b9:64:ea:9a:b1:f1:c3:
44:f2:ad:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 02:08:10 2025 by rpki-client