Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/0fb69d-cefc-46ec-be39-85bd34bd4e5a/1/dHdLe1MO2s-PpzNTqQFKVjiUm_s.mft
File: dHdLe1MO2s-PpzNTqQFKVjiUm_s.mft (raw, json)
Hash identifier: 3hu/W/oV4wNSJwdfEeQka7ZesVExs+ytWvjFhQvuHkE=
Subject key identifier: E4:73:03:93:E4:39:DF:90:E2:34:FA:07:9F:16:25:5B:90:CB:36:32
Authority key identifier: 74:77:4B:7B:53:0E:DA:CF:8F:A7:33:53:A9:01:4A:56:38:94:9B:FB
Certificate issuer: /CN=74774b7b530edacf8fa73353a9014a5638949bfb
Certificate serial: 01974D0D8FB33AE5D0777E1B4F1965385C6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dHdLe1MO2s-PpzNTqQFKVjiUm_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/0fb69d-cefc-46ec-be39-85bd34bd4e5a/1/dHdLe1MO2s-PpzNTqQFKVjiUm_s.mft
Manifest number: 0C4D
Signing time: Sun 08 Jun 2025 01:00:23 +0000
Manifest this update: Sun 08 Jun 2025 01:00:23 +0000
Manifest next update: Mon 09 Jun 2025 01:00:23 +0000
Files and hashes: 1: 4V_ibiqr3ToA5yeO7eCC_kmdHfY.roa (hash: iaaPPpRPgVRp2VBYf0amI7H0JrYQ2W8NdUPmUpkX7Ug=)
2: dHdLe1MO2s-PpzNTqQFKVjiUm_s.crl (hash: WPJLUhgFCOwBs3WlhwSD3imo0Pkoylmc+HX8nZ+Dki0=)
3: jcgG2k-DMvgq0AsuFmjBxm0-O-Q.roa (hash: SEfA+iWkgEeN5RJiBiU8Z6qVRU+/NBl881HzOl2we+M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/0fb69d-cefc-46ec-be39-85bd34bd4e5a/1/dHdLe1MO2s-PpzNTqQFKVjiUm_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/0fb69d-cefc-46ec-be39-85bd34bd4e5a/1/dHdLe1MO2s-PpzNTqQFKVjiUm_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/dHdLe1MO2s-PpzNTqQFKVjiUm_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:0d:8f:b3:3a:e5:d0:77:7e:1b:4f:19:65:38:5c:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74774b7b530edacf8fa73353a9014a5638949bfb
Validity
Not Before: Jun 8 01:00:23 2025 GMT
Not After : Jun 9 01:00:23 2025 GMT
Subject: CN=e4730393e439df90e234fa079f16255b90cb3632
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:22:d7:6f:7b:52:3a:2c:e2:86:60:e0:7a:be:
16:f9:e3:ba:95:a4:3c:a1:01:53:1f:fa:26:dc:19:
d8:3f:07:4e:9a:be:58:52:57:3f:0b:fd:8d:38:f7:
ff:97:b5:b5:99:9a:b9:21:4b:35:76:75:7e:5f:92:
28:11:25:99:b6:7b:85:4b:a1:da:0b:fd:89:3e:29:
e4:4d:2c:6b:e2:88:db:b6:16:c6:27:58:7a:d7:5c:
eb:c2:3f:3a:50:32:a3:6b:56:22:7f:a6:33:88:40:
66:79:dc:78:af:b5:9b:b0:16:f8:99:aa:3f:72:11:
76:99:a0:9a:2d:63:75:f8:95:38:c6:d9:57:a2:b1:
3b:bd:65:2c:6f:5b:72:71:84:d1:ae:7f:89:ec:e3:
89:00:22:03:d5:cb:3b:54:6e:13:05:aa:53:2f:57:
88:c3:ec:d4:b7:d4:44:e0:e0:82:f2:47:2b:29:90:
5c:77:bd:2f:73:91:27:34:a1:a5:4a:7a:d2:63:51:
e0:a2:44:74:63:bc:93:e6:8a:d7:d9:07:da:eb:42:
34:af:53:29:86:c8:3b:3d:ae:a0:89:04:c1:52:ee:
db:88:47:63:6b:25:2c:58:48:ec:1b:f5:79:b3:be:
99:7f:cf:55:96:3a:5b:49:45:13:10:e5:40:55:61:
36:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:73:03:93:E4:39:DF:90:E2:34:FA:07:9F:16:25:5B:90:CB:36:32
X509v3 Authority Key Identifier:
keyid:74:77:4B:7B:53:0E:DA:CF:8F:A7:33:53:A9:01:4A:56:38:94:9B:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dHdLe1MO2s-PpzNTqQFKVjiUm_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/0fb69d-cefc-46ec-be39-85bd34bd4e5a/1/dHdLe1MO2s-PpzNTqQFKVjiUm_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/0fb69d-cefc-46ec-be39-85bd34bd4e5a/1/dHdLe1MO2s-PpzNTqQFKVjiUm_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:db:1f:a7:48:a2:71:2d:7f:83:73:ec:47:fc:b6:26:24:62:
37:b2:33:cc:6b:1e:df:18:95:22:09:c3:a9:f6:02:de:02:de:
54:39:29:ce:28:c4:8c:a1:2a:61:37:76:d6:7f:c9:18:f0:55:
51:7f:ed:9d:24:e1:13:3e:93:dd:17:d2:13:1a:6a:16:39:42:
e7:f9:a0:c2:3f:31:de:2c:49:12:e6:d9:90:fa:5b:5e:2c:0f:
eb:ef:e4:00:c6:41:4b:98:87:0f:4f:4e:da:dd:fe:38:79:4a:
ab:5d:89:f6:ff:00:dd:e8:50:6a:5a:50:0b:b2:bc:ae:d4:13:
11:7b:4c:9e:c9:22:f9:bb:e8:db:5d:0e:1a:17:ce:7e:b1:f2:
34:4a:bc:05:65:77:61:42:45:e6:b9:c0:6f:6b:71:77:1c:3c:
3f:e4:17:9d:a0:61:d5:15:67:aa:38:43:5c:41:9f:16:e9:c1:
23:ea:26:a6:c5:4e:50:f0:3c:69:58:2f:d6:ef:4b:dd:d2:57:
c7:af:e4:a9:20:c5:1b:f6:4c:8c:96:9f:20:80:8a:c8:b1:e5:
b8:b9:8a:93:98:ab:99:0a:d0:e7:4c:1e:f2:b6:80:d4:ed:70:
44:7a:50:5a:8e:43:89:ae:c2:24:34:f8:c7:13:c6:4e:f9:15:
ef:ef:05:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 04:21:32 2025 by rpki-client