Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/95d71d-f41b-4171-8350-e0892a28aac9/1/dADVATwShSJCNDCTy_UUjU6uqvk.mft
File: dADVATwShSJCNDCTy_UUjU6uqvk.mft (raw, json)
Hash identifier: zFZerLxmmqaNLtRIRFDvE4JvBkUR0JDJpTLx6gWLOfw=
Subject key identifier: 65:D7:86:82:9D:14:C3:79:F9:8E:A1:A6:7B:53:E0:6C:A4:B5:27:28
Authority key identifier: 74:00:D5:01:3C:12:85:22:42:34:30:93:CB:F5:14:8D:4E:AE:AA:F9
Certificate issuer: /CN=7400d5013c12852242343093cbf5148d4eaeaaf9
Certificate serial: 019747E7D886F6F6990E6C93DE2EBBB4A214
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dADVATwShSJCNDCTy_UUjU6uqvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/95d71d-f41b-4171-8350-e0892a28aac9/1/dADVATwShSJCNDCTy_UUjU6uqvk.mft
Manifest number: 1584
Signing time: Sat 07 Jun 2025 01:01:05 +0000
Manifest this update: Sat 07 Jun 2025 01:01:05 +0000
Manifest next update: Sun 08 Jun 2025 01:01:05 +0000
Files and hashes: 1: dADVATwShSJCNDCTy_UUjU6uqvk.crl (hash: sLUbboIx4TTbZrnoU7aKWE4sW4dbYlF9BJ+cJxpQ+lM=)
2: oOVgWaswWK83lx4bnEkW14OhMKs.roa (hash: YCwyUpEoklqLQv5It7tbrU/sEyoMqDnHIRoTVUyhsOs=)
3: rwCcNCLFriBxsD0bJomvJ0xlQ9c.roa (hash: PsKxZJF6yIek93GITDSEpyvFVPew4gbr5lDkhG4UbEw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/95d71d-f41b-4171-8350-e0892a28aac9/1/dADVATwShSJCNDCTy_UUjU6uqvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/95d71d-f41b-4171-8350-e0892a28aac9/1/dADVATwShSJCNDCTy_UUjU6uqvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/dADVATwShSJCNDCTy_UUjU6uqvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:e7:d8:86:f6:f6:99:0e:6c:93:de:2e:bb:b4:a2:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7400d5013c12852242343093cbf5148d4eaeaaf9
Validity
Not Before: Jun 7 01:01:05 2025 GMT
Not After : Jun 8 01:01:05 2025 GMT
Subject: CN=65d786829d14c379f98ea1a67b53e06ca4b52728
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:65:26:90:ec:55:d4:05:f5:c8:9f:5e:57:e4:
8b:4f:7d:24:9f:82:11:00:3e:57:22:62:e3:35:aa:
92:8a:d9:22:4e:84:cc:72:2b:88:21:5c:d7:7d:f9:
eb:f1:4e:c3:3b:47:77:3a:f5:40:42:6a:71:09:20:
0f:d1:69:d7:68:3a:96:35:9e:b7:d4:08:93:1b:e6:
88:1b:d5:42:59:d9:16:98:7a:90:06:c7:ba:6c:30:
87:65:37:e7:d9:d1:e9:3e:b7:0f:29:5c:26:be:85:
39:51:d5:f4:d7:8c:99:02:2a:44:af:d2:ee:7d:30:
df:6e:1f:a2:84:86:4c:36:6e:b8:2c:61:78:cf:28:
1e:4e:04:ce:b2:ca:80:a6:a9:f9:94:3e:5c:ed:8e:
8a:d6:c8:3f:9b:fc:c3:20:f9:26:e3:c4:55:b2:50:
1f:e2:2f:5a:2a:67:00:7f:9e:99:23:5b:e2:9a:0b:
21:07:59:9a:16:9c:65:85:6b:fa:69:72:50:0b:70:
58:b9:51:93:c2:4d:31:2e:7d:d6:7c:73:ba:c0:ce:
6d:e0:93:43:59:26:0c:9d:ef:96:f1:66:1f:18:89:
a6:be:34:f5:1e:6f:37:0a:1a:9e:13:74:9d:56:93:
64:8d:ff:84:ed:2a:71:bc:19:d0:2b:80:35:ab:f2:
d3:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:D7:86:82:9D:14:C3:79:F9:8E:A1:A6:7B:53:E0:6C:A4:B5:27:28
X509v3 Authority Key Identifier:
keyid:74:00:D5:01:3C:12:85:22:42:34:30:93:CB:F5:14:8D:4E:AE:AA:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dADVATwShSJCNDCTy_UUjU6uqvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/95d71d-f41b-4171-8350-e0892a28aac9/1/dADVATwShSJCNDCTy_UUjU6uqvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/95d71d-f41b-4171-8350-e0892a28aac9/1/dADVATwShSJCNDCTy_UUjU6uqvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:98:51:16:09:6e:d1:a4:51:74:57:74:7d:71:40:e3:c3:53:
cc:e5:b2:19:cc:7a:e3:7d:d4:4e:9e:c5:d0:9c:0b:76:4c:6a:
23:8a:9e:9b:92:5e:f7:6f:20:53:dc:7a:26:ec:91:fa:70:d2:
3f:6d:8b:88:c6:73:57:39:91:19:4e:3d:bb:e8:29:d1:0a:cb:
88:54:b8:4d:99:1c:fe:a4:24:30:68:b3:5f:05:94:d7:a5:6d:
52:fd:96:94:af:12:a5:15:72:54:97:bd:cd:55:79:e2:5a:e3:
2e:b0:e2:14:d6:85:c7:82:86:2e:b5:c4:9f:9f:c0:b0:d3:e4:
53:7e:db:3f:1b:4a:a9:aa:90:db:2c:6c:c5:1b:0a:b1:bb:0b:
72:6a:6c:9c:7b:a1:29:e5:2c:1f:15:e4:89:3d:57:ef:b2:81:
ef:b3:dc:49:c2:fe:ce:59:a4:06:ae:c8:b8:c6:12:90:5e:ff:
18:d7:07:ff:33:32:67:81:93:7e:97:55:4d:1e:46:9a:e4:b3:
64:3c:c9:b5:5a:a7:c3:23:79:40:1a:0b:41:21:6e:d7:6f:b9:
d9:ce:b9:1b:c1:12:ad:41:3e:17:46:60:7b:47:11:2e:b4:4f:
8e:34:3e:fd:ff:19:7c:8c:b4:d1:44:65:c8:ba:0a:09:69:66:
d7:32:f1:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:28:52 2025 by rpki-client