
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/a4f6e4-12e7-421f-aa31-4115bd508284/1/dlBjTE5Bd7kYRLbcCutzKY2LQ_o.mft
File: dlBjTE5Bd7kYRLbcCutzKY2LQ_o.mft (raw, json)
Hash identifier: x+yaoOTzDJI/5YHvuS4W6gXlwfqoMLEAvMjmXBCLiY8=
Subject key identifier: 7C:8A:C7:75:F6:AE:CF:AB:3F:F0:C2:EC:A6:E3:2D:2B:32:B9:59:69
Authority key identifier: 76:50:63:4C:4E:41:77:B9:18:44:B6:DC:0A:EB:73:29:8D:8B:43:FA
Certificate issuer: /CN=7650634c4e4177b91844b6dc0aeb73298d8b43fa
Certificate serial: 019753103905B33379D4CE607D6DC86CBD95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dlBjTE5Bd7kYRLbcCutzKY2LQ_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/a4f6e4-12e7-421f-aa31-4115bd508284/1/dlBjTE5Bd7kYRLbcCutzKY2LQ_o.mft
Manifest number: 04C9
Signing time: Mon 09 Jun 2025 05:01:01 +0000
Manifest this update: Mon 09 Jun 2025 05:01:01 +0000
Manifest next update: Tue 10 Jun 2025 05:01:01 +0000
Files and hashes: 1: bsvx6NPc5wE4z82KVeJlkoJxWms.roa (hash: 6rlBzLZqcg/z+eAbxCr25c2freBfaX3gVlYhMsk4Kok=)
2: dlBjTE5Bd7kYRLbcCutzKY2LQ_o.crl (hash: nQ6pQzd3yUXbQwVyZeD2L4qIv0cPEgXZJpIlb06ho4Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/a4f6e4-12e7-421f-aa31-4115bd508284/1/dlBjTE5Bd7kYRLbcCutzKY2LQ_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/a4f6e4-12e7-421f-aa31-4115bd508284/1/dlBjTE5Bd7kYRLbcCutzKY2LQ_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/dlBjTE5Bd7kYRLbcCutzKY2LQ_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 02:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:53:10:39:05:b3:33:79:d4:ce:60:7d:6d:c8:6c:bd:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7650634c4e4177b91844b6dc0aeb73298d8b43fa
Validity
Not Before: Jun 9 05:01:01 2025 GMT
Not After : Jun 10 05:01:01 2025 GMT
Subject: CN=7c8ac775f6aecfab3ff0c2eca6e32d2b32b95969
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:bb:72:8a:81:09:ce:55:bb:f8:61:6c:2e:0a:
05:1d:ae:04:12:88:72:56:af:d2:0c:a2:67:d9:6f:
3a:e9:3b:04:52:0e:ee:09:42:64:34:80:20:42:dd:
09:7b:0b:06:ef:97:70:f2:e5:8a:0d:4d:aa:77:cd:
43:99:03:a5:ef:6c:76:c2:12:95:97:ee:76:df:c1:
5a:05:3c:09:91:07:71:ec:82:b9:5a:80:55:3e:13:
34:3a:81:fa:cc:7f:c7:ab:2e:0a:37:50:c7:db:cb:
e0:51:8f:c8:70:30:f6:cd:7b:b1:77:91:c2:94:d2:
6d:93:4f:37:e8:99:05:f3:6b:f9:c1:93:a0:a9:55:
76:10:b0:59:80:74:a7:fa:c9:8f:6f:36:96:ef:d1:
dc:c3:df:83:58:be:46:de:55:0f:b4:21:37:af:13:
c7:32:b1:3c:08:7d:ec:fd:cb:eb:6e:07:88:3b:46:
98:14:64:88:42:0f:4e:75:0e:17:9e:6f:0d:be:ee:
16:c0:e5:b1:f2:19:3f:24:d2:5b:9f:69:10:a0:42:
9e:6b:ab:d3:59:6c:b0:86:8b:3f:ad:1e:ed:2c:6b:
8c:20:b2:50:21:33:8a:44:92:fa:10:99:f1:fb:2b:
36:0c:2a:8f:b5:2d:80:1b:b8:e1:53:ff:44:96:57:
67:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:8A:C7:75:F6:AE:CF:AB:3F:F0:C2:EC:A6:E3:2D:2B:32:B9:59:69
X509v3 Authority Key Identifier:
keyid:76:50:63:4C:4E:41:77:B9:18:44:B6:DC:0A:EB:73:29:8D:8B:43:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dlBjTE5Bd7kYRLbcCutzKY2LQ_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/a4f6e4-12e7-421f-aa31-4115bd508284/1/dlBjTE5Bd7kYRLbcCutzKY2LQ_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/a4f6e4-12e7-421f-aa31-4115bd508284/1/dlBjTE5Bd7kYRLbcCutzKY2LQ_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:91:e3:ca:e2:e2:53:bb:7a:a9:da:88:10:39:1d:9a:3d:53:
a5:4e:65:33:fa:75:52:69:cf:6e:6e:a1:a6:bd:b4:d8:c1:d0:
88:f3:08:b7:25:66:03:89:5e:51:f6:44:bf:9f:65:a2:05:ec:
c9:e5:6e:4c:41:fb:bb:d1:03:70:27:9b:48:cf:bc:c9:09:98:
3f:5d:c0:2d:61:a3:7a:c1:9d:22:9d:d4:78:e0:50:67:d1:85:
dc:af:2b:93:31:3b:a2:dc:8f:f8:43:58:11:ee:9f:fc:75:fe:
fe:46:50:db:26:5d:e0:ca:4b:74:76:0e:d0:ed:d0:81:2f:37:
7a:a9:b5:10:e3:66:0d:d7:d0:87:ac:d4:4f:87:df:52:6b:d6:
a0:13:c2:ae:92:df:09:c8:a2:51:7f:3b:89:c6:d4:cc:87:9a:
0b:42:97:81:18:a0:da:bf:fc:a9:c4:b0:5c:b8:48:60:94:6b:
96:f1:d0:b2:09:ed:1a:d8:f8:44:b3:d2:a2:e6:e9:6d:01:f1:
01:bd:9a:d8:38:f5:a8:3d:13:db:a1:78:a0:32:cf:86:24:6d:
a1:57:1c:f9:75:7d:9e:66:d9:b0:a0:4b:1f:5e:a5:9a:ce:7e:
f1:8a:45:4a:3f:91:e8:49:e4:8b:0c:cd:97:72:2b:4b:d6:3d:
d3:7b:9f:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 10:33:26 2025 by rpki-client