Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/b039bc-213b-457c-96ae-3181db911a13/1/DQh0szPjXfFP2XDhiVgdoJO8gJM.mft
File: DQh0szPjXfFP2XDhiVgdoJO8gJM.mft (raw, json)
Hash identifier: +xp3TF0zeX0E4lHahfXEP1INzWkjRxzyuuQTkwRbTl8=
Subject key identifier: 93:AF:90:08:3C:36:C9:87:D6:CF:37:1C:54:85:6D:25:6D:B7:E8:D4
Authority key identifier: 0D:08:74:B3:33:E3:5D:F1:4F:D9:70:E1:89:58:1D:A0:93:BC:80:93
Certificate issuer: /CN=0d0874b333e35df14fd970e189581da093bc8093
Certificate serial: 01974CD6E0A33DA04C1522F1A3C8F884A574
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DQh0szPjXfFP2XDhiVgdoJO8gJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/b039bc-213b-457c-96ae-3181db911a13/1/DQh0szPjXfFP2XDhiVgdoJO8gJM.mft
Manifest number: 1584
Signing time: Sun 08 Jun 2025 00:00:40 +0000
Manifest this update: Sun 08 Jun 2025 00:00:40 +0000
Manifest next update: Mon 09 Jun 2025 00:00:40 +0000
Files and hashes: 1: DQh0szPjXfFP2XDhiVgdoJO8gJM.crl (hash: e62UhdophN1kJrG+L6oxFCEUG2teIzpb+VcrTtu0IU8=)
2: KXd_5OhpNxA2dAEUBM7BRlNmng0.roa (hash: naKbPeMlQvH49cTjg2nRiud0MzlhFN73NWmhIANkiB0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/b039bc-213b-457c-96ae-3181db911a13/1/DQh0szPjXfFP2XDhiVgdoJO8gJM.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/b039bc-213b-457c-96ae-3181db911a13/1/DQh0szPjXfFP2XDhiVgdoJO8gJM.mft
rsync://rpki.ripe.net/repository/DEFAULT/DQh0szPjXfFP2XDhiVgdoJO8gJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 00:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:d6:e0:a3:3d:a0:4c:15:22:f1:a3:c8:f8:84:a5:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d0874b333e35df14fd970e189581da093bc8093
Validity
Not Before: Jun 8 00:00:40 2025 GMT
Not After : Jun 9 00:00:40 2025 GMT
Subject: CN=93af90083c36c987d6cf371c54856d256db7e8d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:fd:c9:39:26:02:94:9a:8a:27:dd:b1:22:b8:
1b:4d:7c:f0:05:57:0f:74:d7:3d:a9:76:0a:7e:d7:
c3:de:60:48:64:2f:1d:eb:b8:69:d4:40:44:69:a2:
c7:3f:2a:03:58:f9:ad:23:29:e5:30:3a:a8:b2:b5:
9f:5b:99:19:6a:b6:e6:43:d4:ea:d1:d8:92:00:5e:
4e:4e:be:b5:75:22:09:2b:89:6f:5b:cb:c5:eb:82:
20:91:a9:c6:e4:b8:d7:fa:64:14:58:eb:5b:53:83:
68:d3:a6:f6:d9:ea:4f:1d:a9:a6:28:a9:85:9c:43:
fa:2e:88:33:9e:b3:fc:be:e0:7f:09:58:92:b5:0e:
dd:54:29:1c:57:5e:0e:96:e8:22:ca:8d:5c:fe:6b:
3a:55:55:16:8b:e5:e8:5f:2d:1d:75:1d:27:41:26:
22:8f:54:e2:d9:3a:e1:2e:dc:46:64:5f:29:4c:2c:
c9:47:77:3e:c9:38:c3:40:ef:b1:06:06:7f:da:83:
25:ad:14:c6:01:f9:a3:c0:cc:62:2e:f6:95:c1:75:
38:9e:ae:24:16:b9:78:d3:b5:38:02:b6:a6:f3:43:
17:46:1f:6a:cf:1d:61:e6:a8:ac:af:7b:41:cc:bf:
04:d0:fc:f9:25:ce:77:d6:e0:21:af:d6:bd:4f:44:
b7:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:AF:90:08:3C:36:C9:87:D6:CF:37:1C:54:85:6D:25:6D:B7:E8:D4
X509v3 Authority Key Identifier:
keyid:0D:08:74:B3:33:E3:5D:F1:4F:D9:70:E1:89:58:1D:A0:93:BC:80:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQh0szPjXfFP2XDhiVgdoJO8gJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/b039bc-213b-457c-96ae-3181db911a13/1/DQh0szPjXfFP2XDhiVgdoJO8gJM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/b039bc-213b-457c-96ae-3181db911a13/1/DQh0szPjXfFP2XDhiVgdoJO8gJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:40:22:47:a4:91:b8:b9:99:61:c1:50:aa:9b:d3:e2:78:83:
14:03:69:47:10:26:fd:4a:21:30:1b:f9:d2:db:85:60:90:f4:
b5:2c:4f:86:a8:28:cc:b9:78:4c:27:70:b5:bd:a9:7d:da:ba:
26:a2:73:f9:e2:23:16:bf:35:e7:b1:c3:ef:da:33:a7:c4:84:
6e:b8:aa:db:34:1b:ff:7f:c8:97:28:4e:ed:7c:1e:49:cb:90:
aa:08:f4:0f:42:1a:c0:ab:69:29:2f:f1:07:86:16:10:da:3f:
bb:24:98:99:19:4c:0d:0c:e1:20:1c:0b:77:eb:6c:95:23:39:
5c:7b:01:be:de:57:7c:43:e3:5e:0f:98:3f:4f:79:51:ef:fb:
ef:35:c0:e2:45:95:6f:1e:23:27:8d:29:a5:27:87:b9:7e:4e:
42:b2:ba:50:df:0b:8b:5f:fd:ea:b9:2a:46:7e:24:6b:17:b4:
fd:ee:0b:53:ef:55:8f:ff:21:9c:4d:09:bc:7a:39:bf:69:4a:
70:5c:95:28:5f:ce:71:38:4c:54:f7:a0:85:c4:5a:34:76:06:
6e:7f:d7:59:74:51:fc:95:6b:52:4e:98:a4:ef:f7:8d:e6:a8:
44:3e:30:ec:f3:70:35:96:d1:67:a2:85:73:7b:ff:7a:d7:08:
f1:ec:e4:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 09:05:56 2025 by rpki-client