Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/b0f7bf-6844-4ba4-b33d-77869a6bfe54/1/DJpALskLW0dezJv0scZrI4ITIU4.mft
File: DJpALskLW0dezJv0scZrI4ITIU4.mft (raw, json)
Hash identifier: v2Vmh/4zVfCqXHo+OhcBy4DFyxZjxQIvRBt9R6WUqTY=
Subject key identifier: C9:ED:A6:47:81:49:ED:55:52:5A:7D:A4:4E:ED:D3:48:EA:54:B0:5F
Authority key identifier: 0C:9A:40:2E:C9:0B:5B:47:5E:CC:9B:F4:B1:C6:6B:23:82:13:21:4E
Certificate issuer: /CN=0c9a402ec90b5b475ecc9bf4b1c66b238213214e
Certificate serial: 01975E01AB3890FF985AD17B50138F87D051
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DJpALskLW0dezJv0scZrI4ITIU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/b0f7bf-6844-4ba4-b33d-77869a6bfe54/1/DJpALskLW0dezJv0scZrI4ITIU4.mft
Manifest number: 1588
Signing time: Wed 11 Jun 2025 08:00:57 +0000
Manifest this update: Wed 11 Jun 2025 08:00:57 +0000
Manifest next update: Thu 12 Jun 2025 08:00:57 +0000
Files and hashes: 1: DJpALskLW0dezJv0scZrI4ITIU4.crl (hash: Wkag9zU0yuuBedXuVQLDIbt9F0gueUAxHpJ8/l/VhN4=)
2: x2MfmeFdkAhvqtMnijQj44RaTsU.roa (hash: vo8DVrtFsZbAKsU4/jySKYry7q+PSUACGGuHHoeRqBM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/b0f7bf-6844-4ba4-b33d-77869a6bfe54/1/DJpALskLW0dezJv0scZrI4ITIU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/b0f7bf-6844-4ba4-b33d-77869a6bfe54/1/DJpALskLW0dezJv0scZrI4ITIU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/DJpALskLW0dezJv0scZrI4ITIU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 08:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5e:01:ab:38:90:ff:98:5a:d1:7b:50:13:8f:87:d0:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c9a402ec90b5b475ecc9bf4b1c66b238213214e
Validity
Not Before: Jun 11 08:00:57 2025 GMT
Not After : Jun 12 08:00:57 2025 GMT
Subject: CN=c9eda6478149ed55525a7da44eedd348ea54b05f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:bf:65:67:ed:9a:30:3c:84:ad:9f:34:90:95:
fe:2d:60:12:45:16:f3:bd:3b:a4:a8:75:18:40:97:
29:f1:1c:e2:1e:94:b0:c8:c9:61:39:d3:35:ca:39:
0d:20:91:98:7d:c0:f3:90:e1:ab:d6:ec:ca:a5:7e:
85:d2:6d:ea:8f:74:19:b8:0f:53:1c:d8:a1:f2:a3:
e4:49:67:f6:16:7f:12:89:12:fc:78:e7:c0:91:9f:
47:5c:c2:db:ef:dc:84:68:1a:bf:f2:1d:24:3d:08:
83:70:f3:00:c4:72:4a:8b:2f:b0:06:81:97:e7:29:
6d:92:bc:47:ce:e9:d6:4a:7c:41:41:f3:f0:66:d1:
6b:b7:0f:d1:58:58:96:ed:61:1c:06:60:c2:6e:b3:
54:54:89:65:f9:ad:af:7a:29:40:de:b7:35:8d:33:
1c:5a:40:c1:23:b3:4c:2a:fe:16:78:99:fe:53:a8:
a6:39:04:9e:4a:47:08:a8:27:c2:44:b7:00:68:17:
20:a2:2f:d6:be:dc:6a:f7:12:73:c2:cf:8a:60:c3:
16:e0:f9:28:6f:d3:b6:68:39:d6:f5:fc:28:4d:dc:
df:e6:45:92:21:1d:3f:b5:32:7f:1e:52:62:b0:28:
ea:61:2f:c5:40:72:b9:68:0c:b2:38:86:09:74:9d:
3e:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:ED:A6:47:81:49:ED:55:52:5A:7D:A4:4E:ED:D3:48:EA:54:B0:5F
X509v3 Authority Key Identifier:
keyid:0C:9A:40:2E:C9:0B:5B:47:5E:CC:9B:F4:B1:C6:6B:23:82:13:21:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DJpALskLW0dezJv0scZrI4ITIU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/b0f7bf-6844-4ba4-b33d-77869a6bfe54/1/DJpALskLW0dezJv0scZrI4ITIU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/b0f7bf-6844-4ba4-b33d-77869a6bfe54/1/DJpALskLW0dezJv0scZrI4ITIU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:47:86:06:1d:92:61:88:f7:50:90:d6:73:16:a4:0c:72:83:
d5:4c:3c:04:ec:67:04:b3:87:02:29:35:57:1b:a5:2c:43:cd:
33:94:59:f9:79:33:ef:aa:6f:8c:a6:f5:9f:97:6c:72:7b:63:
97:82:30:39:1d:fb:2d:fb:c1:a1:63:62:fd:9c:cb:28:1d:b8:
13:f1:69:99:c0:94:41:29:20:4d:2a:1e:1b:1e:6e:83:0a:f2:
89:c0:8e:36:1e:8d:d4:cf:49:7d:0b:03:eb:82:75:50:ca:c6:
e6:d8:8c:0f:08:b0:e8:1e:cb:09:5a:27:dd:0b:60:67:8d:a1:
ce:fc:3b:cd:aa:6d:d9:05:7d:d1:e3:11:0c:18:2f:73:fa:c1:
9a:7f:c3:c5:94:a0:13:0f:9a:f2:bd:b3:a8:9b:39:a0:fa:f0:
42:d7:58:eb:27:2b:77:e3:0b:46:f5:12:67:ee:89:86:86:6d:
90:40:47:c6:9a:22:ea:a3:db:ee:a9:71:76:86:1c:65:ab:11:
b4:c7:13:11:41:81:ab:cb:88:f2:a9:4e:f7:f9:84:71:b1:a0:
2e:04:ea:96:26:4c:7d:5b:aa:c3:94:6e:a6:72:63:08:c7:ce:
2b:4c:f9:b1:10:c0:ad:1f:bd:b3:8c:ad:32:97:0b:45:18:ac:
2f:ee:f6:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 11:02:59 2025 by rpki-client