Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/6cb714-c714-4281-8ada-43ce949663d9/1/dxLiD1ELIrghfN8NIRSWsbnB7bg.mft
File: dxLiD1ELIrghfN8NIRSWsbnB7bg.mft (raw, json)
Hash identifier: AgjHoTpYv2Movd76nBKMysWIJCef6v4rPQTWY0Z/7Xg=
Subject key identifier: 33:14:15:C5:AA:B4:C3:48:46:8E:94:EA:DE:CC:E7:53:3C:EC:BB:AD
Authority key identifier: 77:12:E2:0F:51:0B:22:B8:21:7C:DF:0D:21:14:96:B1:B9:C1:ED:B8
Certificate issuer: /CN=7712e20f510b22b8217cdf0d211496b1b9c1edb8
Certificate serial: 0197526B85316EF3299D5AC55D57EC0C19BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dxLiD1ELIrghfN8NIRSWsbnB7bg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/6cb714-c714-4281-8ada-43ce949663d9/1/dxLiD1ELIrghfN8NIRSWsbnB7bg.mft
Manifest number: 1581
Signing time: Mon 09 Jun 2025 02:01:07 +0000
Manifest this update: Mon 09 Jun 2025 02:01:07 +0000
Manifest next update: Tue 10 Jun 2025 02:01:07 +0000
Files and hashes: 1: 0bjBu50yRFSQQCpaSDnz4Da59n0.roa (hash: EpIJkfUrUz0ncMqveTDKjCXPCU3oKNIvzwGQlVcXpbY=)
2: dxLiD1ELIrghfN8NIRSWsbnB7bg.crl (hash: fgaqREUr9tDALQJx5bE49G3bccpooFTHqvlPh4ubKd4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/6cb714-c714-4281-8ada-43ce949663d9/1/dxLiD1ELIrghfN8NIRSWsbnB7bg.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/6cb714-c714-4281-8ada-43ce949663d9/1/dxLiD1ELIrghfN8NIRSWsbnB7bg.mft
rsync://rpki.ripe.net/repository/DEFAULT/dxLiD1ELIrghfN8NIRSWsbnB7bg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 02:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:52:6b:85:31:6e:f3:29:9d:5a:c5:5d:57:ec:0c:19:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7712e20f510b22b8217cdf0d211496b1b9c1edb8
Validity
Not Before: Jun 9 02:01:07 2025 GMT
Not After : Jun 10 02:01:07 2025 GMT
Subject: CN=331415c5aab4c348468e94eadecce7533cecbbad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e5:ac:2b:1e:d7:af:a9:81:83:c3:60:fd:f2:
f6:4f:e7:54:42:03:d8:d8:3e:da:a1:b1:90:ea:00:
2a:14:34:88:80:19:1e:8a:e6:21:54:0a:8a:8f:30:
b9:08:5a:72:ad:e8:05:30:0d:1d:3e:c9:d3:59:82:
95:ce:d3:bd:8f:b3:ae:f2:8a:11:87:6f:a7:62:da:
03:d4:1c:5b:7e:53:b7:24:44:66:48:12:24:7b:c3:
ac:3d:78:00:d0:e1:62:6a:26:85:c4:2e:87:08:47:
20:78:2c:1f:d9:84:18:b5:13:14:5e:16:71:3c:97:
80:70:31:4f:98:a0:2d:da:69:71:7d:42:e3:46:5a:
0c:03:8b:4b:15:95:dd:1b:9d:5e:80:8e:f0:e4:12:
fc:69:b3:37:41:a0:c2:b3:a8:ef:74:9e:3d:06:69:
6d:64:d3:eb:1a:11:be:86:31:8d:23:e1:c7:a6:0a:
60:f8:df:00:08:85:61:68:b9:27:e6:cf:5b:7e:12:
15:a4:d8:02:26:cf:3f:64:8c:15:59:cf:e5:07:cf:
dd:e5:56:4d:1c:55:ad:37:ce:92:be:c6:57:a7:d1:
b9:80:41:3c:cf:e0:fa:9d:16:7e:57:39:82:4b:68:
73:4a:ff:23:00:fe:14:f7:ce:b1:48:92:32:dd:49:
ab:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:14:15:C5:AA:B4:C3:48:46:8E:94:EA:DE:CC:E7:53:3C:EC:BB:AD
X509v3 Authority Key Identifier:
keyid:77:12:E2:0F:51:0B:22:B8:21:7C:DF:0D:21:14:96:B1:B9:C1:ED:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dxLiD1ELIrghfN8NIRSWsbnB7bg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/6cb714-c714-4281-8ada-43ce949663d9/1/dxLiD1ELIrghfN8NIRSWsbnB7bg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/6cb714-c714-4281-8ada-43ce949663d9/1/dxLiD1ELIrghfN8NIRSWsbnB7bg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:67:59:f8:99:c7:9e:d7:71:4f:07:f7:6f:dc:4c:e3:02:27:
59:5e:98:fe:ba:a5:ef:a9:b5:23:25:fd:ef:dc:9b:6e:45:cb:
fe:41:1c:c8:de:77:93:9e:ec:7f:cd:c1:f0:71:7c:e7:17:6f:
81:a8:a2:b5:94:d9:aa:9a:8a:ac:2f:cf:d7:c7:b2:5c:69:bb:
e0:55:b1:60:57:5b:79:49:da:5c:e7:d6:90:d6:da:d5:40:cb:
b6:fb:58:ad:f3:0d:e5:42:10:df:d7:4c:f9:0d:18:f2:77:5a:
07:24:d2:a5:a4:c3:26:e9:e6:69:b9:59:5d:a8:a5:69:a6:a9:
4d:31:ac:02:6a:af:d3:ae:29:bd:61:26:d6:ad:54:af:d3:fe:
a2:ab:e2:93:0c:a2:11:2e:a2:12:ba:3b:16:d9:24:e4:90:1b:
91:07:5c:be:cd:f8:1e:e9:13:84:c8:41:a9:e1:e5:6b:46:fa:
56:8d:c4:81:22:b3:b6:00:33:d4:47:9d:77:73:b8:ac:b2:fa:
25:a5:73:c9:7c:d4:96:2b:9a:6f:aa:54:68:15:3d:3a:51:78:
a2:9b:34:2f:9b:f9:04:d2:2f:b8:b4:98:f8:98:43:80:9d:bf:
60:da:49:8b:74:e7:6d:39:e2:87:ba:71:64:21:9d:71:9e:61:
11:65:35:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 08:31:33 2025 by rpki-client