Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/92332f-03e0-4116-b6f3-c82f424b6d0d/1/DNpch0NU2Dgm5DwlNbduINW2GwU.mft
File: DNpch0NU2Dgm5DwlNbduINW2GwU.mft (raw, json)
Hash identifier: 5tbTkEmv85aY6F2o/vH0iUjm4nV+MSNdsLVQjNvert4=
Subject key identifier: 32:37:79:0E:B8:F4:14:07:73:AF:1F:C6:4B:BF:32:C7:D0:B0:B6:0F
Authority key identifier: 0C:DA:5C:87:43:54:D8:38:26:E4:3C:25:35:B7:6E:20:D5:B6:1B:05
Certificate issuer: /CN=0cda5c874354d83826e43c2535b76e20d5b61b05
Certificate serial: 01974666D38EA87CE0B25449C90C816DEA8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DNpch0NU2Dgm5DwlNbduINW2GwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/92332f-03e0-4116-b6f3-c82f424b6d0d/1/DNpch0NU2Dgm5DwlNbduINW2GwU.mft
Manifest number: 1586
Signing time: Fri 06 Jun 2025 18:00:33 +0000
Manifest this update: Fri 06 Jun 2025 18:00:33 +0000
Manifest next update: Sat 07 Jun 2025 18:00:33 +0000
Files and hashes: 1: 32CQUiCUfdquX7Jbo_dmPVa4RAU.roa (hash: FAfiLPwl0dHpiVR3Uys5QcBsWLGjmkF+BWAYhU6veIk=)
2: DNpch0NU2Dgm5DwlNbduINW2GwU.crl (hash: N598g8cYKhJ/ykbQ5LOILVzlyolaxK4+LXSzvwrTK60=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/92332f-03e0-4116-b6f3-c82f424b6d0d/1/DNpch0NU2Dgm5DwlNbduINW2GwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/92332f-03e0-4116-b6f3-c82f424b6d0d/1/DNpch0NU2Dgm5DwlNbduINW2GwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DNpch0NU2Dgm5DwlNbduINW2GwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:66:d3:8e:a8:7c:e0:b2:54:49:c9:0c:81:6d:ea:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cda5c874354d83826e43c2535b76e20d5b61b05
Validity
Not Before: Jun 6 18:00:33 2025 GMT
Not After : Jun 7 18:00:33 2025 GMT
Subject: CN=3237790eb8f4140773af1fc64bbf32c7d0b0b60f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:1a:1d:99:48:ad:ee:04:78:8c:52:01:90:76:
cd:5a:12:13:5a:05:38:75:9d:8e:5e:e2:54:4f:7a:
bd:33:f9:ce:be:5f:f6:98:f0:af:19:d8:19:42:c7:
2c:ef:37:40:6a:07:57:7d:5e:ce:ea:57:1b:ca:e5:
a7:1b:36:ef:96:ae:b1:9d:b1:be:f0:1a:c7:bb:b3:
bb:0d:ba:f1:6d:f8:fa:4d:c0:ed:48:05:36:5f:60:
5b:ef:fb:5d:df:1a:ae:f4:31:e2:8b:bd:c8:50:0b:
b3:18:7d:7d:2d:90:b7:53:6f:8a:62:c5:83:e7:29:
37:0f:24:45:da:07:2e:fa:c1:60:bb:f3:66:9d:94:
69:8e:c4:5e:4d:c8:2d:44:b8:d6:68:dc:11:24:4d:
d0:83:3f:eb:24:06:44:28:fc:1b:9d:84:bd:5f:91:
df:d6:40:73:55:77:2b:1c:ef:42:d3:52:e8:fa:5e:
0b:79:93:31:ef:1b:be:c8:c0:6a:f0:94:c6:61:89:
99:31:f6:b0:07:b7:79:fa:b3:fa:17:78:fc:fe:53:
c7:4d:56:4e:86:2b:f0:7f:1b:53:43:0e:cf:7c:e9:
2d:60:d0:c2:a3:55:10:31:d0:78:ff:8b:a4:1a:c8:
7d:5e:e0:37:e1:87:58:cc:68:e8:29:78:7b:25:00:
5d:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:37:79:0E:B8:F4:14:07:73:AF:1F:C6:4B:BF:32:C7:D0:B0:B6:0F
X509v3 Authority Key Identifier:
keyid:0C:DA:5C:87:43:54:D8:38:26:E4:3C:25:35:B7:6E:20:D5:B6:1B:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DNpch0NU2Dgm5DwlNbduINW2GwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/92332f-03e0-4116-b6f3-c82f424b6d0d/1/DNpch0NU2Dgm5DwlNbduINW2GwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/92332f-03e0-4116-b6f3-c82f424b6d0d/1/DNpch0NU2Dgm5DwlNbduINW2GwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:01:71:67:cb:8b:ba:b2:23:32:80:11:c1:54:fa:f5:6a:0b:
10:3a:b2:ce:0c:77:eb:6d:33:d7:ec:30:87:41:4c:97:72:ed:
bd:70:e9:94:54:8d:27:4c:45:9a:09:6d:24:c3:c0:1a:7e:c8:
c4:ae:bf:4f:2c:d1:b2:db:71:a3:11:1a:a2:33:1f:d8:44:37:
ac:df:87:7a:8b:a3:b5:e6:30:8e:72:cc:53:50:3c:61:d8:43:
1f:bc:7b:11:fa:a6:de:2f:16:30:d2:0c:66:ba:a9:1b:b9:20:
f6:b5:33:60:2f:c5:ed:46:30:19:c6:05:ca:3f:d4:6b:22:c6:
1e:95:1f:a8:fa:b3:e6:35:3c:46:04:51:6e:f0:4b:55:c8:a4:
df:7b:9a:9c:23:0f:cf:83:ea:5c:26:43:95:59:e9:97:37:84:
5a:47:00:06:41:52:c6:4e:d1:94:f3:5d:9e:9b:6b:8e:f2:01:
53:e8:4e:a4:70:2b:33:bd:4a:83:d6:75:3c:94:4e:67:e9:1c:
e0:fd:a2:23:57:61:ff:68:18:a5:f7:7a:40:1e:f7:78:db:b2:
3d:8f:ef:d9:a5:09:6a:e7:98:ec:f4:62:01:a7:45:c1:e0:a4:
37:74:ec:11:30:af:39:17:b8:3b:c0:c9:d3:04:94:58:c7:fb:
33:7e:44:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:20:39 2025 by rpki-client