Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/425c24-bfe0-4790-b250-d4c66f4f3b6e/1/DXhL2WpEvDYdEzRNVMi8Uf9nqAI.mft
File: DXhL2WpEvDYdEzRNVMi8Uf9nqAI.mft (raw, json)
Hash identifier: RTP4RPXH/zU+qyKD0WUE1nT3r9QBHFxn6I7TvWIlqkk=
Subject key identifier: 59:33:A7:70:D0:11:09:63:50:53:A7:17:0B:E9:EE:0A:BF:FF:7D:C2
Authority key identifier: 0D:78:4B:D9:6A:44:BC:36:1D:13:34:4D:54:C8:BC:51:FF:67:A8:02
Certificate issuer: /CN=0d784bd96a44bc361d13344d54c8bc51ff67a802
Certificate serial: 019751C68767FBA597818C0EA1EC25CCE8FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXhL2WpEvDYdEzRNVMi8Uf9nqAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/425c24-bfe0-4790-b250-d4c66f4f3b6e/1/DXhL2WpEvDYdEzRNVMi8Uf9nqAI.mft
Manifest number: 0CE4
Signing time: Sun 08 Jun 2025 23:00:54 +0000
Manifest this update: Sun 08 Jun 2025 23:00:54 +0000
Manifest next update: Mon 09 Jun 2025 23:00:54 +0000
Files and hashes: 1: DXhL2WpEvDYdEzRNVMi8Uf9nqAI.crl (hash: p+uPe3xENsZnWeqyPVdtb6RPBz7Eyp+0+fltM7sfrx8=)
2: zo9Y2aPXtg0v5rw18Mi_WOQc36Y.roa (hash: v9STSvD6P0pmUA0gxCp1HPZofea00hykboqUh1BCCCs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/425c24-bfe0-4790-b250-d4c66f4f3b6e/1/DXhL2WpEvDYdEzRNVMi8Uf9nqAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/425c24-bfe0-4790-b250-d4c66f4f3b6e/1/DXhL2WpEvDYdEzRNVMi8Uf9nqAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/DXhL2WpEvDYdEzRNVMi8Uf9nqAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 21:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:51:c6:87:67:fb:a5:97:81:8c:0e:a1:ec:25:cc:e8:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d784bd96a44bc361d13344d54c8bc51ff67a802
Validity
Not Before: Jun 8 23:00:54 2025 GMT
Not After : Jun 9 23:00:54 2025 GMT
Subject: CN=5933a770d01109635053a7170be9ee0abfff7dc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:97:56:6b:bb:bc:34:c9:9a:86:48:f4:2d:48:
4d:8c:06:e8:75:6e:07:2a:56:64:8a:61:5f:13:2b:
1e:1e:ef:23:64:21:d1:9d:fd:3d:07:48:0e:5e:d0:
87:b1:87:c4:21:27:ec:59:2a:4d:b4:10:fb:7f:86:
80:4b:cb:3d:38:c9:f8:8f:51:2b:56:e4:a2:30:ce:
1e:8e:b1:1b:b1:4a:04:a3:ed:53:7e:4f:38:56:10:
4a:93:ff:6c:8b:71:6c:6a:61:84:71:30:47:24:86:
61:6c:a9:52:85:91:cd:8a:02:62:e0:3e:5f:ad:82:
f0:b4:c3:67:b2:bd:7b:f5:d3:f5:fb:cf:c6:f5:02:
21:ae:31:0b:6b:fb:d8:70:95:ee:06:42:23:3b:5b:
62:ee:b4:f0:e8:99:28:77:5c:30:00:e8:7b:97:a0:
9c:29:2f:2a:46:33:e7:35:39:f4:ae:50:5e:57:0a:
46:22:d5:79:61:cc:8e:18:fc:e3:92:ea:e6:3f:ea:
f2:1e:12:6b:54:bb:46:ee:f6:23:a0:bb:44:7b:e0:
73:8a:18:d3:0f:f3:95:ce:82:94:ad:dd:2a:27:a8:
96:f8:9c:45:31:04:69:12:90:06:5c:3d:23:ea:1c:
cd:fb:57:a3:61:3f:a4:81:4a:e6:01:33:9f:a1:bc:
c9:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:33:A7:70:D0:11:09:63:50:53:A7:17:0B:E9:EE:0A:BF:FF:7D:C2
X509v3 Authority Key Identifier:
keyid:0D:78:4B:D9:6A:44:BC:36:1D:13:34:4D:54:C8:BC:51:FF:67:A8:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXhL2WpEvDYdEzRNVMi8Uf9nqAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/425c24-bfe0-4790-b250-d4c66f4f3b6e/1/DXhL2WpEvDYdEzRNVMi8Uf9nqAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/425c24-bfe0-4790-b250-d4c66f4f3b6e/1/DXhL2WpEvDYdEzRNVMi8Uf9nqAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:0d:dc:56:c6:a8:de:97:e1:72:ef:36:aa:93:24:03:71:5a:
45:c7:18:e6:46:6c:53:cd:96:eb:8d:fc:fb:8a:0d:22:56:05:
5a:91:c2:13:1a:c5:4d:2d:c4:87:e1:54:42:28:38:94:03:43:
23:c1:91:d8:75:a1:b5:04:3d:0f:92:16:21:15:d7:04:45:c7:
45:37:dc:22:7d:ae:e1:96:0d:c4:1e:8a:15:63:8b:b3:75:e0:
fc:48:bd:4c:24:fa:0b:a2:43:21:15:b8:4f:15:1e:bb:e7:de:
d8:e3:ab:20:7a:03:47:de:2e:ea:2b:8e:c7:09:12:58:b3:14:
81:07:3b:c8:d6:50:ab:c4:5e:c1:b6:8f:2d:b2:8d:41:ea:05:
57:8d:a7:14:cb:f7:94:09:e5:ad:6b:f4:26:4a:58:1a:9d:c1:
0f:62:0a:ac:ef:9c:7c:f4:ff:ac:7b:bc:9e:ae:04:70:ad:f1:
d6:85:d9:5a:37:5d:d1:aa:62:a5:e3:ca:63:8a:22:e6:24:1c:
f3:21:80:c4:ff:eb:a6:04:7f:80:3a:b7:aa:be:c9:43:01:0f:
90:85:69:c7:ba:f4:13:7d:fc:81:54:84:9a:7a:b5:c0:8b:00:
9d:9c:c4:f0:94:a8:d6:0d:89:a3:02:ef:65:af:ad:db:9c:b8:
17:70:52:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 06:44:54 2025 by rpki-client