Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/74e15f-f487-4559-bfdd-0fc58e58cac9/1/dl6jQAo3SMO2xhJo1JL4vwqQgjk.mft
File: dl6jQAo3SMO2xhJo1JL4vwqQgjk.mft (raw, json)
Hash identifier: nR6DFI25yOVLQTLVKPD9UP0eR2Hs/Ok6sKvwafItzgI=
Subject key identifier: FD:61:3D:05:54:4E:93:37:26:AA:77:E4:0A:B0:83:7B:9F:63:27:66
Authority key identifier: 76:5E:A3:40:0A:37:48:C3:B6:C6:12:68:D4:92:F8:BF:0A:90:82:39
Certificate issuer: /CN=765ea3400a3748c3b6c61268d492f8bf0a908239
Certificate serial: 0197575AAD720620578E2FDC5B17E542CD95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dl6jQAo3SMO2xhJo1JL4vwqQgjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/74e15f-f487-4559-bfdd-0fc58e58cac9/1/dl6jQAo3SMO2xhJo1JL4vwqQgjk.mft
Manifest number: 1107
Signing time: Tue 10 Jun 2025 01:00:49 +0000
Manifest this update: Tue 10 Jun 2025 01:00:49 +0000
Manifest next update: Wed 11 Jun 2025 01:00:49 +0000
Files and hashes: 1: JmRIXqWgLbHOS_DUn9tYXP3VwvE.roa (hash: 07OywnLuhNnV2ffg9k1J1SDz7HRBDcbP+ENwBGJ8ZCU=)
2: dl6jQAo3SMO2xhJo1JL4vwqQgjk.crl (hash: LkXS+sEOnlYWqmnqFBUU9/ebcee5yKbtrkDuffLZQeQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/74e15f-f487-4559-bfdd-0fc58e58cac9/1/dl6jQAo3SMO2xhJo1JL4vwqQgjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/74e15f-f487-4559-bfdd-0fc58e58cac9/1/dl6jQAo3SMO2xhJo1JL4vwqQgjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/dl6jQAo3SMO2xhJo1JL4vwqQgjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:57:5a:ad:72:06:20:57:8e:2f:dc:5b:17:e5:42:cd:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=765ea3400a3748c3b6c61268d492f8bf0a908239
Validity
Not Before: Jun 10 01:00:49 2025 GMT
Not After : Jun 11 01:00:49 2025 GMT
Subject: CN=fd613d05544e933726aa77e40ab0837b9f632766
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:30:4a:97:00:4a:e0:fc:21:12:3b:80:29:57:
ac:6c:e6:b7:88:b6:5c:78:2a:a8:04:2e:79:c4:21:
52:de:88:29:8e:fc:a5:4c:86:d7:d4:dc:81:94:64:
84:10:0e:c8:81:53:e6:50:ba:30:8d:82:28:cb:9a:
c7:52:5a:64:9f:52:d3:6c:8b:82:6d:b3:a1:c3:cd:
d9:93:7f:dc:58:95:20:7a:bd:65:72:fd:48:4e:08:
ca:b3:96:20:3c:e6:cb:f4:55:dd:6f:15:10:0b:0d:
6b:d6:53:fa:e3:26:42:92:44:e0:61:bc:b8:2e:81:
73:37:54:00:1f:fd:d2:c4:99:92:65:f3:77:a4:e5:
dc:81:d5:d9:e7:b0:27:0b:da:ad:72:dc:5b:f8:77:
61:ad:b1:c8:2b:f6:c8:f1:40:bd:62:a1:36:dd:92:
d6:60:70:70:7e:60:b3:f5:18:13:d4:d7:23:8d:ad:
e2:64:da:d5:72:a7:9c:b1:79:55:bc:fe:bf:f7:77:
82:08:8c:a9:ec:2a:d7:ad:9f:af:99:af:85:a8:fe:
68:79:31:7b:9d:eb:91:af:29:ec:34:cf:ba:95:2a:
2e:48:40:59:d7:40:2d:16:8c:0f:34:69:93:bd:9f:
c2:0a:f0:5b:7e:e8:bf:92:c1:1f:aa:63:20:54:21:
27:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:61:3D:05:54:4E:93:37:26:AA:77:E4:0A:B0:83:7B:9F:63:27:66
X509v3 Authority Key Identifier:
keyid:76:5E:A3:40:0A:37:48:C3:B6:C6:12:68:D4:92:F8:BF:0A:90:82:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dl6jQAo3SMO2xhJo1JL4vwqQgjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/74e15f-f487-4559-bfdd-0fc58e58cac9/1/dl6jQAo3SMO2xhJo1JL4vwqQgjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/74e15f-f487-4559-bfdd-0fc58e58cac9/1/dl6jQAo3SMO2xhJo1JL4vwqQgjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:22:e9:4c:65:69:b8:4b:44:ae:b1:d5:5a:1b:f7:03:c3:7b:
78:2c:f4:4c:37:df:46:88:5f:b3:1b:1c:2d:55:29:f5:ec:d0:
1d:ae:35:47:12:00:69:fe:eb:3a:44:ee:6c:dd:8e:a6:ea:70:
2b:fa:da:61:c1:98:3c:28:85:57:01:07:12:58:73:cf:c8:d8:
38:37:a3:0f:44:4f:4c:c5:ab:be:14:0e:a8:05:7b:f3:f0:85:
e6:9e:de:de:d2:ee:bc:b5:17:46:7c:cf:1c:d7:3a:40:c2:81:
ef:fa:92:df:59:a7:1a:a0:0c:54:76:c1:ca:07:0c:fb:da:5e:
01:b4:36:b3:1e:3b:4c:d3:72:ef:39:8d:23:db:b5:50:79:da:
5d:b7:d3:18:8c:5a:3f:fe:19:ec:74:d7:d4:78:a6:2c:ff:f8:
da:69:43:1b:46:53:8a:97:5d:b1:6b:e2:70:95:03:61:ee:04:
a9:bd:1c:24:51:33:f0:44:48:c2:f6:98:84:aa:af:7f:3b:d5:
73:cf:2c:4a:c5:17:20:9b:1e:04:c6:15:40:2c:e8:46:89:c9:
3f:fe:22:c8:01:79:b6:62:93:30:38:6f:39:da:d3:d0:e7:7d:
f6:bd:5f:26:dd:60:56:f8:39:e6:62:3e:79:c9:9c:4d:96:5e:
c6:46:13:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 10:17:42 2025 by rpki-client